Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: GaPpuRkcUc7Hf71kusIwuCtN0DI6e110coNkeFL3znE=
Subject key identifier: 88:34:34:FF:8A:A9:74:79:20:F9:2F:EA:8D:D1:36:1D:14:4C:D7:F9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2172A4FEF2334A1B32079863FD0CF618F56B51CD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
Signing time: Thu 12 Nov 2026 14:30:48 +0000
ROA not before: Thu 12 Nov 2026 14:25:48 +0000
ROA not after: Thu 11 Nov 2027 14:30:48 +0000
asID: 5650
IP address blocks: 2.216.0.0/22 maxlen: 22
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.180.0/24 maxlen: 24
51.194.223.0/24 maxlen: 24
51.241.110.0/24 maxlen: 24
51.241.114.0/24 maxlen: 24
51.241.148.0/24 maxlen: 24
51.241.170.0/24 maxlen: 24
51.241.202.0/24 maxlen: 24
51.241.244.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
94.192.0.0/22 maxlen: 24
94.192.8.0/22 maxlen: 24
94.192.16.0/22 maxlen: 24
94.192.24.0/22 maxlen: 24
94.192.32.0/22 maxlen: 24
94.192.244.0/22 maxlen: 24
94.192.248.0/22 maxlen: 24
94.193.148.0/22 maxlen: 24
94.194.112.0/22 maxlen: 22
188.220.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:72:a4:fe:f2:33:4a:1b:32:07:98:63:fd:0c:f6:18:f5:6b:51:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 14:25:48 2026 GMT
Not After : Nov 11 14:30:48 2027 GMT
Subject: CN=883434FF8AA9747920F92FEA8DD1361D144CD7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:a1:6c:15:8c:2a:79:14:65:9a:10:ba:69:
1d:58:77:98:c8:02:30:5c:e0:c5:59:3c:f4:d5:3e:
68:ab:d0:e3:a8:38:c4:6f:fa:b0:55:d9:97:43:60:
e7:f9:cf:66:8b:99:66:ee:6a:8e:fe:ab:40:b6:d8:
68:1d:2f:b7:48:76:f9:eb:aa:56:57:69:1d:bf:b2:
be:e5:8c:5b:09:0a:51:5c:1a:cc:35:6b:ff:d3:73:
48:ee:5a:3f:fc:20:ce:dc:61:83:5c:04:da:0c:d5:
18:5a:21:91:2c:8a:cf:f5:02:78:e4:fd:0a:20:f7:
db:5a:9b:e0:75:7c:20:a1:e9:a9:07:72:1b:6d:84:
82:55:57:c2:59:c8:75:97:00:12:a4:18:12:2a:d8:
d2:62:30:3f:5a:ee:4a:3e:86:9f:6e:ba:5e:38:d5:
1d:d8:72:5c:e5:6b:77:35:da:c8:5e:5f:ff:c2:0e:
97:6b:7c:33:b3:11:e9:10:a1:80:d0:d0:e5:85:57:
82:c2:34:4c:63:a0:ec:d0:f6:83:6a:9f:20:b1:38:
52:54:c2:85:ab:0d:46:a0:60:4b:c2:c7:53:97:aa:
61:6e:8a:8c:d2:3e:a6:8d:40:36:f9:e5:34:7f:87:
e2:24:f1:a2:2f:62:16:45:38:9c:7a:4f:dc:4e:1d:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:34:FF:8A:A9:74:79:20:F9:2F:EA:8D:D1:36:1D:14:4C:D7:F9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.0.0/22
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.180.0/24
51.194.223.0/24
51.241.110.0/24
51.241.114.0/24
51.241.148.0/24
51.241.170.0/24
51.241.202.0/24
51.241.244.0/24
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
94.192.0.0/22
94.192.8.0/22
94.192.16.0/22
94.192.24.0/22
94.192.32.0/22
94.192.244.0-94.192.251.255
94.193.148.0/22
94.194.112.0/22
188.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
70:bd:01:18:6d:b6:b4:7a:3e:05:43:21:85:8f:3b:0f:ab:33:
60:97:05:4b:6e:0f:3d:d6:13:2c:e4:10:8f:88:d3:94:cf:13:
bf:9b:0e:a2:20:b9:f9:d9:32:5b:1a:f3:d5:0e:e2:64:06:3c:
ce:88:b4:c6:08:0f:79:33:76:82:bc:4b:1e:85:ee:a7:47:c3:
f6:c4:bf:d0:ce:20:0c:3c:8e:2c:4d:d2:2f:ae:df:3c:e9:c6:
bb:db:08:f1:1e:d8:b3:e9:a8:47:17:3b:5c:4b:5d:f8:9b:c1:
c6:52:0d:42:74:80:cf:1c:53:c4:6d:8a:51:80:22:8d:90:47:
e2:43:a7:14:3a:81:14:ae:2a:9d:eb:16:54:7b:03:20:dc:f8:
61:64:1c:0e:fa:98:d7:8b:c3:8a:7f:0a:34:12:f9:a5:6e:44:
bf:87:39:8e:24:1c:50:4a:cf:3f:f4:18:f9:d2:06:50:7b:4e:
03:21:27:f8:0e:42:55:f2:b4:d7:7c:2c:9e:b0:cc:23:49:4a:
06:36:9e:6b:85:58:10:06:51:d4:07:80:5d:e8:e4:fa:41:83:
43:d0:ca:17:aa:29:32:4c:ff:18:e3:a2:76:9c:2e:73:69:43:
e3:26:91:57:bc:41:66:ee:b3:37:5c:64:07:67:74:ec:64:3b:
b8:27:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:43:19 2026 by rpki-client