Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: AjfVMe2qmjDu43NGSJCZVfMTuZp6yHLvj4pAZQqFjq8=
Subject key identifier: A2:9B:25:33:FD:1F:9E:F9:F0:87:1B:C0:A7:F7:7D:4D:8B:1B:FC:8C
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 0D34E504CC4D643713BF714E6A58666BB5517678
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa
Signing time: Thu 12 Nov 2026 15:30:30 +0000
ROA not before: Thu 12 Nov 2026 15:25:30 +0000
ROA not after: Thu 11 Nov 2027 15:30:30 +0000
asID: 5650
IP address blocks: 79.176.8.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.24.0/24 maxlen: 24
79.176.28.0/24 maxlen: 24
79.176.35.0/24 maxlen: 24
79.176.40.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.80.0/24 maxlen: 24
79.176.83.0/24 maxlen: 24
79.176.148.0/24 maxlen: 24
79.176.149.0/24 maxlen: 24
79.176.150.0/24 maxlen: 24
79.176.153.0/24 maxlen: 24
79.176.156.0/24 maxlen: 24
79.176.196.0/24 maxlen: 24
79.176.252.0/24 maxlen: 24
79.176.253.0/24 maxlen: 24
79.180.68.0/22 maxlen: 24
79.180.72.0/23 maxlen: 24
79.180.94.0/23 maxlen: 24
79.180.96.0/22 maxlen: 24
79.180.140.0/22 maxlen: 24
79.180.152.0/22 maxlen: 24
79.182.60.0/24 maxlen: 24
79.182.124.0/24 maxlen: 24
79.182.172.0/24 maxlen: 24
79.182.173.0/24 maxlen: 24
79.182.174.0/24 maxlen: 24
79.182.175.0/24 maxlen: 24
79.182.252.0/23 maxlen: 24
79.183.28.0/24 maxlen: 24
79.183.29.0/24 maxlen: 24
109.64.224.0/23 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.222.0/23 maxlen: 24
109.66.32.0/22 maxlen: 24
109.66.37.0/24 maxlen: 24
109.66.39.0/24 maxlen: 24
109.66.45.0/24 maxlen: 24
109.66.47.0/24 maxlen: 24
109.66.50.0/24 maxlen: 24
109.66.61.0/24 maxlen: 24
109.66.183.0/24 maxlen: 24
109.66.185.0/24 maxlen: 24
109.66.187.0/24 maxlen: 24
109.66.189.0/24 maxlen: 24
109.66.191.0/24 maxlen: 24
109.66.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:34:e5:04:cc:4d:64:37:13:bf:71:4e:6a:58:66:6b:b5:51:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 12 15:25:30 2026 GMT
Not After : Nov 11 15:30:30 2027 GMT
Subject: CN=A29B2533FD1F9EF9F0871BC0A7F77D4D8B1BFC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:fc:d2:dc:33:2c:fc:4d:ad:d0:a6:68:bd:
4c:28:ed:5a:2e:05:62:72:fb:47:be:50:41:d1:c3:
3d:17:1a:71:42:27:2c:37:1f:5a:b3:9f:4d:79:60:
2e:a6:f0:49:f3:32:19:5b:54:34:48:b4:5c:bd:0c:
10:85:49:b7:dc:5c:7e:66:0a:8c:3e:bc:fe:e5:13:
34:9d:7c:e2:13:ff:20:b0:c1:ba:f8:17:c4:00:94:
35:26:65:57:54:a3:8b:2e:04:85:35:0b:07:b2:85:
8d:21:52:5f:f8:a2:a2:cb:45:94:de:3c:d7:06:9c:
7b:fd:41:1a:27:81:bb:23:c0:43:d4:1c:f0:23:a4:
9e:ab:e4:10:f9:5e:3e:dc:48:15:8a:75:f6:6f:d1:
62:5f:00:be:ee:31:7b:2c:7a:ab:13:7f:9f:92:69:
fe:eb:8b:c4:30:50:78:9f:96:cf:eb:e8:e6:43:7b:
32:8f:e7:65:04:48:68:e0:5d:63:14:62:e5:2b:7c:
7c:23:1d:10:0e:8e:69:bb:f9:41:f7:cf:7e:d4:14:
f5:c5:d3:de:3d:cd:e5:dd:84:8c:31:ee:d0:9a:78:
17:96:85:4c:c6:b1:5b:4a:3f:16:18:b1:54:fd:cf:
0e:8d:6b:9a:2f:9d:27:e8:56:8d:06:7d:89:22:cf:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:25:33:FD:1F:9E:F9:F0:87:1B:C0:A7:F7:7D:4D:8B:1B:FC:8C
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.8.0/24
79.176.16.0/24
79.176.24.0/24
79.176.28.0/24
79.176.35.0/24
79.176.40.0/24
79.176.44.0/24
79.176.80.0/24
79.176.83.0/24
79.176.148.0-79.176.150.255
79.176.153.0/24
79.176.156.0/24
79.176.196.0/24
79.176.252.0/23
79.180.68.0-79.180.73.255
79.180.94.0-79.180.99.255
79.180.140.0/22
79.180.152.0/22
79.182.60.0/24
79.182.124.0/24
79.182.172.0/22
79.182.252.0/23
79.183.28.0/23
109.64.224.0/23
109.65.188.0/23
109.65.222.0/23
109.66.32.0/22
109.66.37.0/24
109.66.39.0/24
109.66.45.0/24
109.66.47.0/24
109.66.50.0/24
109.66.61.0/24
109.66.183.0/24
109.66.185.0/24
109.66.187.0/24
109.66.189.0/24
109.66.191.0/24
109.66.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8c:dc:44:4c:9e:1d:97:2a:d5:e1:53:60:e5:d3:09:11:0b:
90:54:8c:5a:41:70:4b:35:70:bb:37:d3:8c:02:4c:d0:7d:dd:
dd:7a:72:ba:0e:99:6e:57:cf:3e:c8:41:6a:a3:d7:3f:8d:54:
c9:5b:ed:36:6a:b0:3d:f7:21:06:c7:14:93:16:88:ec:65:ea:
b0:ef:6b:1d:e6:af:66:e0:27:73:c4:51:46:f0:1c:0e:b1:01:
5c:5f:fe:7f:c8:d3:fb:b5:1e:b7:c3:3b:2e:06:be:4a:7a:4c:
36:59:ea:dc:92:ee:59:23:b2:f2:8e:b4:58:c7:d4:95:44:27:
9f:8c:c2:d1:86:b6:ff:72:a3:0f:30:14:3e:4b:91:c9:63:e1:
91:1d:68:a1:60:3b:bd:25:db:83:2f:86:e6:37:43:16:d2:a6:
ea:f5:ca:87:64:c7:20:19:01:e9:84:72:26:c0:a4:84:12:97:
dd:13:1b:ca:18:97:0f:b9:d9:8b:6f:5d:2d:b4:9a:bf:37:00:
b5:71:a3:af:c7:f4:7a:ab:8d:2b:43:60:6a:79:6f:34:4d:9f:
98:33:e0:68:08:53:42:f5:c6:ae:4a:3d:99:0d:32:f0:84:60:
79:da:f0:27:ec:d5:11:28:72:8a:ee:44:e0:2e:8d:0f:03:d7:
60:09:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:27:21 2026 by rpki-client