Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: KGXncSxfM8p2YxOY+zXywEP+sEj0bYtVcVBT+HsNnjM=
Subject key identifier: 48:2A:22:F3:EA:05:24:6A:EC:AF:A5:E2:0D:7D:EE:33:BB:26:4F:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0ED5A5E5A702BA267FDB3DB6C51A0B2D6FA55052
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
Signing time: Sun 08 Nov 2026 00:09:26 +0000
ROA not before: Sun 08 Nov 2026 00:04:26 +0000
ROA not after: Sun 07 Nov 2027 00:09:26 +0000
asID: 5650
IP address blocks: 150.241.255.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:a5:e5:a7:02:ba:26:7f:db:3d:b6:c5:1a:0b:2d:6f:a5:50:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 00:04:26 2026 GMT
Not After : Nov 7 00:09:26 2027 GMT
Subject: CN=482A22F3EA05246AECAFA5E20D7DEE33BB264F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:f5:96:c5:95:69:a5:04:59:17:3e:ca:51:
dc:2b:de:67:fe:bb:d7:97:4d:16:bf:d5:dc:b7:3a:
06:35:82:52:49:95:12:4e:e6:c2:67:85:2c:27:11:
42:70:d3:5a:c9:b6:50:3c:ef:41:31:93:6a:6d:4c:
35:f5:7b:f7:15:0b:da:12:a9:06:b3:6d:18:26:91:
ad:11:6e:d0:98:e5:de:4a:43:ae:fc:cd:98:48:61:
09:5b:da:d5:60:8f:ca:fb:7c:4c:19:33:83:d6:37:
5c:7d:8f:94:58:69:50:e2:42:f8:0e:98:ac:b4:2d:
bf:af:d0:c6:7b:79:2a:68:e0:43:7f:09:92:f3:4d:
bb:47:d1:63:f0:db:a5:1e:6b:31:d0:e7:b8:51:df:
2a:59:ad:ad:9f:e7:3b:54:c1:71:d3:7e:ac:e4:24:
88:db:b4:b1:20:45:c0:04:e4:64:43:7c:e6:b8:be:
8d:f9:1c:a9:89:52:ec:93:bc:15:f9:9d:68:22:42:
c2:64:58:0f:ac:19:77:46:ff:81:2b:52:7b:6a:6e:
05:60:06:f8:d7:11:27:ec:c1:f2:1c:12:dd:3b:99:
49:1b:88:dd:5f:da:48:ce:d1:1c:6c:a4:11:f0:f5:
ea:93:14:94:1d:98:02:bd:4d:8e:a0:60:c2:ba:33:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:22:F3:EA:05:24:6A:EC:AF:A5:E2:0D:7D:EE:33:BB:26:4F:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.255.0/24
162.141.2.0/23
162.141.6.0/23
162.141.60.0/22
162.141.76.0/23
162.141.134.0/23
162.141.192.0-162.141.215.255
167.148.24.0/22
168.222.6.0/24
168.222.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2d:96:a8:3a:f3:56:9b:49:54:72:7f:c7:b3:57:60:3b:7c:
57:49:6a:a6:9f:b7:bd:02:aa:a1:df:00:c8:cb:c5:47:62:69:
2c:ce:cb:fd:78:52:d9:6b:67:f2:d2:85:ac:6b:95:3c:88:af:
f4:b3:0e:ee:fd:c5:ae:2c:f5:cc:4e:6d:c2:82:37:bd:ca:68:
57:25:e5:dd:33:04:41:e6:da:b6:27:36:e0:ac:9d:40:18:8c:
bd:99:03:37:24:5a:c3:69:e9:4f:95:73:c0:8e:b1:62:c4:80:
05:33:30:d2:e0:cf:b9:9a:5f:22:2c:94:bb:cd:80:d0:c5:84:
93:ea:58:02:6c:e0:db:5b:9a:8e:93:9b:c7:f4:f5:10:92:7e:
d4:40:4a:01:ee:80:d1:70:2c:79:4d:27:9a:cd:5a:13:72:32:
76:0f:fa:82:74:63:a0:fb:c9:f7:de:04:c5:ff:a1:74:b6:b8:
4c:e1:3b:6c:1a:0c:9d:42:8b:a0:20:16:a2:98:61:2b:19:a2:
96:d5:a5:cd:60:3f:cd:5d:6b:de:fa:5e:17:7b:75:e0:9a:fd:
89:84:3b:4e:cc:e8:b4:13:59:a3:ce:87:96:52:01:d1:bb:d8:
c7:d7:bf:d3:84:33:67:bb:0e:f6:7b:8a:ed:31:78:cf:3f:c5:
c6:23:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:22 2026 by rpki-client