Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa
File: AS50673.roa (raw, json)
Hash identifier: XDjfAI+0U+cXPJ2Ae5jjaBYYfUgvEFcOsiyzOPO1vI4=
Subject key identifier: 24:B5:91:6D:3E:00:0D:90:48:1B:56:DC:B5:F3:18:63:C7:2E:48:C4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 61F08F3409300F70241DEE3B869FA54D13181109
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa
Signing time: Wed 04 Nov 2026 09:49:40 +0000
ROA not before: Wed 04 Nov 2026 09:44:40 +0000
ROA not after: Wed 03 Nov 2027 09:49:40 +0000
asID: 50673
IP address blocks: 185.172.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f0:8f:34:09:30:0f:70:24:1d:ee:3b:86:9f:a5:4d:13:18:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:40 2026 GMT
Not After : Nov 3 09:49:40 2027 GMT
Subject: CN=24B5916D3E000D90481B56DCB5F31863C72E48C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:a6:29:e1:29:32:12:79:68:3c:4a:5b:cb:
57:46:19:a5:8a:cc:66:83:9a:12:15:9c:ae:d2:a3:
86:13:91:29:6e:9b:a8:01:ee:6d:94:4d:d9:e5:19:
9f:aa:84:25:4c:11:4f:61:d7:8e:41:9d:56:e8:8b:
f1:84:ab:5b:b5:0f:2d:fb:69:a3:91:72:bb:0d:cd:
15:5c:7a:13:fd:46:60:48:6c:6d:0c:b4:88:06:00:
14:b4:d3:54:0c:80:05:f3:f2:b5:c6:27:1f:66:42:
de:d9:2f:48:08:e2:35:94:3f:c0:e6:76:ca:b1:9f:
2b:25:66:d8:d3:3c:bd:f2:fd:34:3a:43:ce:26:c1:
6e:97:1f:55:a1:1d:40:db:00:f3:4e:04:5f:e3:b1:
ce:f1:cc:3c:5a:38:6e:9d:69:03:85:51:90:15:0b:
66:9a:9b:94:a7:6b:48:68:72:07:40:65:8e:d5:32:
71:79:86:3e:92:ec:8a:4b:8e:b1:57:5a:ec:af:0b:
1b:e2:70:22:d5:ee:76:a1:a5:66:7a:b3:b3:f3:96:
e4:1b:9f:71:c5:b9:0a:52:19:ab:08:4c:ea:71:f9:
90:03:d6:64:de:43:26:d0:4a:cf:49:33:09:a2:a6:
a9:e4:95:9f:88:01:4f:6c:3d:ab:40:3f:a3:65:76:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:91:6D:3E:00:0D:90:48:1B:56:DC:B5:F3:18:63:C7:2E:48:C4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e2:38:61:1b:a2:1d:8b:63:05:6e:88:8a:fa:a6:68:9e:11:
12:e9:4b:6c:05:96:18:ee:11:de:a8:b9:c6:8c:f9:1e:39:cf:
53:a0:96:1f:0d:a7:66:4a:96:68:78:29:7a:6b:24:4a:28:13:
a5:8a:a2:34:5c:96:ba:bf:db:06:3f:53:a2:87:dd:a2:a1:83:
f0:f0:6f:80:29:ef:49:b2:10:d2:2f:64:0c:2d:7d:db:6d:90:
aa:9e:d8:e2:6e:a2:e1:66:a2:bf:14:f1:80:63:6d:1a:14:82:
8b:f4:ed:bf:43:dc:7b:bc:1a:8a:3c:1d:54:6e:ff:b6:7f:6e:
0b:c8:c3:b8:a3:b8:02:8c:71:2d:49:88:eb:84:a9:c8:fa:d3:
cb:f1:a7:13:2e:12:20:ca:65:86:c7:ce:ea:df:ac:f6:a6:5f:
8b:0b:c4:cd:80:e1:c6:95:37:36:18:14:28:d0:62:e3:e6:25:
09:34:5b:d0:5a:57:00:69:d8:4f:39:30:88:97:ca:de:97:17:
dd:e0:07:d0:a0:80:1e:78:d3:fa:65:e3:21:5b:96:b1:0c:cf:
e0:b2:57:24:35:58:59:36:94:78:00:a7:e6:38:8c:52:23:ba:
9e:ec:c0:3a:8e:93:f5:64:e7:cf:da:0b:d9:5f:c8:60:d7:5b:
71:79:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:36:20 2026 by rpki-client