Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: hxGGAKxNcd8jpJef/xLa5Jl7sS8NULazTW23VKYYcZk=
Subject key identifier: 7B:56:A1:59:57:1D:8E:AF:5C:65:85:D1:C2:70:64:4E:32:16:9B:98
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 361053E392F2C940BE08923993ACB0E8724DBB81
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
Signing time: Tue 11 Aug 2026 13:37:24 +0000
ROA not before: Tue 11 Aug 2026 13:32:24 +0000
ROA not after: Tue 10 Aug 2027 13:37:24 +0000
asID: 5650
IP address blocks: 46.203.160.0/24 maxlen: 24
46.203.164.0/24 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.134.130.0/24 maxlen: 24
95.134.135.0/24 maxlen: 24
95.134.155.0/24 maxlen: 24
95.134.176.0/24 maxlen: 24
95.134.182.0/24 maxlen: 24
95.135.38.0/24 maxlen: 24
95.135.85.0/24 maxlen: 24
95.135.127.0/24 maxlen: 24
95.135.138.0/24 maxlen: 24
95.135.219.0/24 maxlen: 24
178.92.220.0/24 maxlen: 24
178.95.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:10:53:e3:92:f2:c9:40:be:08:92:39:93:ac:b0:e8:72:4d:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 11 13:32:24 2026 GMT
Not After : Aug 10 13:37:24 2027 GMT
Subject: CN=7B56A159571D8EAF5C6585D1C270644E32169B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:2a:50:6c:35:ab:6b:3d:43:fa:6e:a4:e7:
9e:21:7b:62:37:9c:4c:9a:96:97:9a:d3:b1:05:37:
9f:11:49:d2:4e:2b:e4:3e:a3:41:05:e3:cb:76:8c:
5d:ce:c5:af:88:96:41:f9:1d:4a:06:dc:17:5e:64:
d7:70:ff:b1:01:a0:d4:10:f0:3b:de:21:b4:bf:bb:
cc:00:35:5e:07:5d:7b:90:a9:5e:5d:13:8f:f3:71:
0e:0f:3e:55:34:06:2e:e6:43:79:b0:5a:7b:ce:c3:
b2:a6:83:49:d1:9e:46:19:08:79:e8:b4:4a:46:ea:
23:5b:7a:80:33:14:fc:6a:cc:fb:06:88:df:ab:90:
e3:f0:c2:f2:6a:44:2b:b3:c9:75:ba:a6:95:69:64:
06:45:39:66:29:5e:4a:3d:e4:21:c5:52:13:30:13:
7d:d7:3e:ab:85:02:41:35:80:ae:e9:d8:e1:5c:a0:
45:e1:43:61:2b:e8:2f:83:28:eb:14:e9:5d:e3:bc:
89:d1:23:0d:a1:37:0e:af:8c:19:6d:71:62:7e:65:
44:a1:81:59:3c:46:a2:92:54:c6:19:ac:65:f2:62:
78:03:c9:f3:c6:36:c9:25:26:25:24:3b:a0:c0:cf:
49:fd:4e:6e:e7:75:bc:71:b5:21:14:12:49:60:28:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:56:A1:59:57:1D:8E:AF:5C:65:85:D1:C2:70:64:4E:32:16:9B:98
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.160.0/24
46.203.164.0/24
92.112.32.0/22
92.113.215.0/24
95.134.130.0/24
95.134.135.0/24
95.134.155.0/24
95.134.176.0/24
95.134.182.0/24
95.135.38.0/24
95.135.85.0/24
95.135.127.0/24
95.135.138.0/24
95.135.219.0/24
178.92.220.0/24
178.95.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:36:a1:6c:97:14:fb:8e:7b:e4:5e:78:d8:cd:d6:46:36:f4:
1f:e6:f1:89:6c:4e:52:17:c6:de:39:4a:2e:a7:2b:96:17:89:
b9:5a:3a:a8:c8:0f:95:9c:a6:47:fb:53:f7:72:d6:79:a7:ae:
5b:1d:b5:57:c3:91:8b:dc:27:1e:9a:36:3b:08:34:90:78:3b:
76:d1:ad:dc:30:69:d7:3d:9f:da:7c:05:f0:40:4a:00:0b:86:
b1:da:33:b4:7a:8e:2f:8b:50:39:5e:d5:8d:8e:35:11:3f:c8:
0a:07:2d:46:5d:11:7e:8b:f5:55:9c:52:00:28:9d:30:f0:dc:
b8:64:11:97:60:d8:0a:b0:79:6b:f1:05:2f:7b:06:8f:19:cc:
5d:b9:c7:0b:fa:71:59:be:d6:c1:68:c3:20:20:16:6e:d8:a3:
c7:da:83:68:d9:a6:ec:72:b6:c9:21:99:2c:c0:99:91:a3:a6:
5d:16:2e:6e:9b:45:4a:f5:0d:b0:28:3d:f0:57:61:4f:6a:ae:
5d:85:77:42:41:2a:01:de:e4:6f:c1:c5:8f:af:65:30:cd:ec:
ab:b4:a9:c5:d1:e5:34:d4:b9:c7:7d:41:31:63:4b:49:ed:73:
a7:b5:a8:44:c0:da:3c:4f:97:27:a6:cb:f4:28:eb:59:c9:f8:
f5:72:c6:7b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUNhBT45LyyUC+CJI5k6yw6HJNu4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MTExMzMyMjRaFw0yNzA4MTAxMzM3MjRaMDMxMTAvBgNV
BAMTKDdCNTZBMTU5NTcxRDhFQUY1QzY1ODVEMUMyNzA2NDRFMzIxNjlCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LSpQbDWraz1D+m6k554he2I3
nEyalpea07EFN58RSdJOK+Q+o0EF48t2jF3Oxa+IlkH5HUoG3BdeZNdw/7EBoNQQ
8DveIbS/u8wANV4HXXuQqV5dE4/zcQ4PPlU0Bi7mQ3mwWnvOw7Kmg0nRnkYZCHno
tEpG6iNbeoAzFPxqzPsGiN+rkOPwwvJqRCuzyXW6ppVpZAZFOWYpXko95CHFUhMw
E33XPquFAkE1gK7p2OFcoEXhQ2Er6C+DKOsU6V3jvInRIw2hNw6vjBltcWJ+ZUSh
gVk8RqKSVMYZrGXyYngDyfPGNsklJiUkO6DAz0n9Tm7ndbxxtSEUEklgKI3HAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUe1ahWVcdjq9cZYXRwnBkTjIWm5gwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTY1MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB5BggrBgEFBQcBBwEB/wRqMGgwZgQCAAEwYAMEAC7LoAME
AC7LpAMEAlxwIAMEAFxx1wMEAF+GggMEAF+GhwMEAF+GmwMEAF+GsAMEAF+GtgME
AF+HJgMEAF+HVQMEAF+HfwMEAF+HigMEAF+H2wMEALJc3AMEALJfvzANBgkqhkiG
9w0BAQsFAAOCAQEACjahbJcU+4575F542M3WRjb0H+bxiWxOUhfG3jlKLqcrlheJ
uVo6qMgPlZymR/tT93LWeaeuWx21V8ORi9wnHpo2Owg0kHg7dtGt3DBp1z2f2nwF
8EBKAAuGsdoztHqOL4tQOV7VjY41ET/ICgctRl0Rfov1VZxSACidMPDcuGQRl2DY
CrB5a/EFL3sGjxnMXbnHC/pxWb7WwWjDICAWbtijx9qDaNmm7HK2ySGZLMCZkaOm
XRYubptFSvUNsCg98FdhT2quXYV3QkEqAd7kb8HFj69lMM3sq7SpxdHlNNS5x31B
MWNLSe1zp7WoRMDaPE+XJ6bL9CjrWcn49XLGew==
-----END CERTIFICATE-----
Generated at Fri Aug 14 12:15:25 2026 by rpki-client