Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: HgVLAi7tM6LRsSfBBKMPdfbIDIzeMkvgKNHsPH4+42I=
Subject key identifier: 03:67:BF:BB:FC:B2:E4:62:FB:1C:4A:69:F0:42:11:8C:61:E9:D9:B6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6C8DF542F7B854F7A8FA6B2F13DDB60D17E38C8C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
Signing time: Sun 10 May 2026 05:11:22 +0000
ROA not before: Sun 10 May 2026 05:06:22 +0000
ROA not after: Sun 09 May 2027 05:11:22 +0000
asID: 50049
IP address blocks: 95.135.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8d:f5:42:f7:b8:54:f7:a8:fa:6b:2f:13:dd:b6:0d:17:e3:8c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 10 05:06:22 2026 GMT
Not After : May 9 05:11:22 2027 GMT
Subject: CN=0367BFBBFCB2E462FB1C4A69F042118C61E9D9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:70:81:9e:7a:0f:4f:c8:dd:7f:41:a5:5b:
c3:3f:e2:62:73:3f:70:02:74:5f:37:19:9a:6c:41:
86:a2:57:77:06:55:18:6b:15:2b:13:8a:85:5f:78:
e9:a3:4f:cf:bd:ea:19:97:9d:dc:94:25:6c:1a:fc:
fa:00:c1:c3:64:ef:ea:62:d5:c9:46:49:ae:0f:dc:
26:41:8b:53:27:d9:d5:21:8d:ed:be:80:93:af:d6:
43:7b:e2:1b:f2:b0:44:4d:60:54:1b:53:b5:38:6b:
40:0a:a9:a1:1e:22:c7:c4:01:6a:33:83:43:fc:9a:
bb:29:a6:bc:77:57:e7:61:af:b9:ac:14:46:6f:9f:
84:29:81:55:91:fc:ba:4b:1b:d6:c6:95:13:6d:9f:
01:a2:2e:29:07:60:f9:24:61:c3:d3:97:93:ab:4b:
ac:f7:44:ec:a9:9d:07:6e:97:1e:61:72:d6:96:8e:
0a:a5:f3:3a:26:29:10:54:b6:49:a5:ae:c6:cb:35:
09:93:11:90:05:11:9b:25:aa:24:6f:e1:10:9c:12:
1b:ff:66:9a:92:95:f4:ff:fc:77:f8:bc:b2:6c:29:
44:0e:3c:7f:01:e7:75:43:27:ba:22:56:47:99:5d:
9d:0f:bf:70:ed:ae:6f:19:ca:e7:51:8e:70:1a:ff:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:BF:BB:FC:B2:E4:62:FB:1C:4A:69:F0:42:11:8C:61:E9:D9:B6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:be:3e:ec:bd:88:c1:bc:cf:af:37:2f:24:14:2f:ab:8c:33:
b5:ad:f1:2c:b2:a5:78:4f:9d:12:ae:09:9c:eb:5e:64:eb:44:
21:42:52:4a:48:33:fb:eb:c1:be:e9:27:dc:68:95:d2:ca:8c:
63:c0:82:c3:50:43:ed:8d:4c:4c:2a:2a:a8:38:06:35:5f:87:
7e:76:5b:bc:84:ad:5a:29:7c:a7:e6:b0:6b:21:13:55:f8:9f:
80:3a:d4:a1:24:47:ca:ed:85:2e:51:92:95:9e:40:bf:42:1d:
58:db:4b:df:da:b9:07:32:3a:2c:05:90:f2:d9:f7:c4:e6:8f:
34:c7:7d:b1:0c:00:13:82:5e:28:6d:ff:7c:c1:a3:c6:a7:02:
0f:60:bc:c2:07:08:8a:31:0a:a9:e9:6a:a5:15:f4:4b:f2:92:
95:74:aa:32:0b:56:aa:92:9a:44:3c:a7:3f:61:38:b9:03:e7:
fd:f6:50:70:25:99:3c:ac:a6:37:a0:9c:91:dd:bc:ff:c3:39:
d1:fb:1d:19:5e:c7:c1:ea:8b:89:c2:47:bc:6c:42:51:06:fa:
40:80:d2:44:d2:15:57:37:7a:de:72:ee:fe:5d:91:80:bf:ff:
52:1b:c4:62:8a:1b:37:27:9b:61:9e:af:5c:68:ae:c3:e2:90:
39:cd:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:31 2026 by rpki-client