Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
File:                     AS50867.roa (raw, json)
Hash identifier:          GLOIWzBQEjjjhMJABY4bU0HgPGHrcV4zruBdZL6ExXA=
Subject key identifier:   02:0B:D1:D5:F0:D1:B2:71:55:68:29:8C:FC:83:32:2D:02:3B:75:C6
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       0DCE70029B9959B834303CE0EFCDF11C9B81689D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
Signing time:             Fri 07 Aug 2026 13:38:27 +0000
ROA not before:           Fri 07 Aug 2026 13:33:27 +0000
ROA not after:            Fri 06 Aug 2027 13:38:27 +0000
asID:                     50867
IP address blocks:        178.92.32.0/24 maxlen: 24
                          178.95.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:70:02:9b:99:59:b8:34:30:3c:e0:ef:cd:f1:1c:9b:81:68:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug  7 13:33:27 2026 GMT
            Not After : Aug  6 13:38:27 2027 GMT
        Subject: CN=020BD1D5F0D1B2715568298CFC83322D023B75C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:56:07:64:f0:0a:6f:f4:08:de:a8:18:8c:
                    8c:4b:98:45:a6:c5:be:aa:e4:05:0b:ca:20:51:ec:
                    ef:05:58:06:f0:1b:18:b8:b9:ca:28:75:dd:0e:b0:
                    c9:95:ce:72:d6:56:8d:1c:86:19:e5:bc:a4:20:2d:
                    82:e0:58:35:74:ee:a9:14:54:04:e5:1f:39:10:cd:
                    81:10:88:6c:5f:3a:e6:5f:9d:a6:a9:24:c9:3b:06:
                    75:e9:b4:fa:20:ab:c3:cf:ff:36:58:a3:19:89:bf:
                    cb:d4:80:05:07:7f:f2:0f:51:1a:75:fb:3c:76:af:
                    9b:40:f7:b9:a7:69:8c:71:5c:70:c7:6e:b6:a6:d2:
                    f6:0a:df:77:61:0a:a2:af:4d:61:a6:6b:e2:0b:16:
                    6d:27:de:37:4c:60:28:01:2e:c2:22:63:da:d4:a4:
                    7b:f1:ff:02:17:f5:9d:49:29:7d:93:cb:aa:49:a4:
                    6d:4a:4a:16:20:83:b9:fc:8f:c2:f2:ea:26:c8:15:
                    05:f7:70:2d:83:82:45:ed:27:c9:88:f4:99:ad:66:
                    39:d0:9c:24:fe:32:c6:76:ac:f5:b1:0a:e6:c8:a4:
                    a0:3b:83:80:9c:da:bb:34:c9:82:92:59:f6:4e:01:
                    76:73:62:bc:81:42:dc:34:2a:36:96:34:9b:6f:9e:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:D1:D5:F0:D1:B2:71:55:68:29:8C:FC:83:32:2D:02:3B:75:C6
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.32.0/24
                  178.95.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:73:ea:12:7d:3f:74:df:46:43:ae:6c:08:8c:2b:3c:de:37:
         2a:ed:d9:ea:59:71:89:08:23:59:56:d7:82:51:72:9a:fe:e8:
         e0:d3:54:19:54:c7:41:e5:83:43:69:d0:da:0b:d2:41:da:87:
         e0:94:ac:c0:ad:bb:d3:15:8c:a1:e5:09:7f:02:02:34:70:b3:
         bb:81:ff:5a:8f:47:36:3e:d0:f1:bf:d2:eb:ef:94:b6:23:13:
         5b:0e:dc:17:cb:45:50:fa:08:1d:ac:9b:fe:67:5f:87:92:95:
         18:1f:a2:9a:81:b8:77:68:f9:b2:fc:19:6f:9d:bd:a7:cf:c6:
         45:8f:59:28:99:f9:c5:82:97:87:6d:12:79:a2:2c:bf:5e:f9:
         09:f2:4a:b0:8a:ce:d1:14:90:8d:ab:4f:28:78:e6:b5:b2:91:
         c8:95:92:bd:e3:c1:ee:02:a5:9c:76:83:c8:78:ee:c5:0d:05:
         37:41:52:94:ee:2a:22:53:8e:2b:5d:35:be:08:17:4c:7f:6e:
         c4:dc:cb:fc:87:22:60:d1:fc:49:2c:f6:38:ae:32:74:ec:69:
         e6:c5:1c:1b:bf:33:7b:03:95:f7:23:03:4a:61:4a:f9:c6:10:
         95:37:88:c8:75:2b:00:e3:4d:81:ff:4d:bf:be:2a:aa:5f:c0:
         c4:cc:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:15:09 2026 by rpki-client