Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: l+N7P6mt6GTMzAi12N6I+iAwIX/uLtbbDbS0RIPcf/8=
Subject key identifier: BF:B6:52:A3:68:32:16:5D:6D:FA:48:72:38:04:FF:D4:F8:2E:E2:97
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3240EEA3A23A14F266B1B402BB5D3057A788725A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
Signing time: Mon 26 Oct 2026 12:58:46 +0000
ROA not before: Mon 26 Oct 2026 12:53:46 +0000
ROA not after: Mon 25 Oct 2027 12:58:46 +0000
asID: 5650
IP address blocks: 46.203.160.0/24 maxlen: 24
46.203.164.0/24 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.134.130.0/24 maxlen: 24
95.134.135.0/24 maxlen: 24
95.134.155.0/24 maxlen: 24
95.134.176.0/24 maxlen: 24
95.134.182.0/24 maxlen: 24
95.135.38.0/24 maxlen: 24
95.135.85.0/24 maxlen: 24
95.135.127.0/24 maxlen: 24
95.135.138.0/24 maxlen: 24
95.135.219.0/24 maxlen: 24
178.92.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:40:ee:a3:a2:3a:14:f2:66:b1:b4:02:bb:5d:30:57:a7:88:72:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 26 12:53:46 2026 GMT
Not After : Oct 25 12:58:46 2027 GMT
Subject: CN=BFB652A36832165D6DFA48723804FFD4F82EE297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:e2:49:da:91:5f:32:8a:e5:56:5c:cc:f0:
3b:8d:79:09:f1:1c:6a:6a:36:c0:46:4f:0c:6c:56:
d6:3e:6e:ad:03:80:ec:5a:30:a7:b9:39:07:96:5c:
79:b7:cc:00:11:32:ae:19:c0:44:87:55:86:81:ff:
a5:88:57:2b:d7:93:63:ac:38:27:f9:29:0e:74:2a:
4b:9f:af:5a:9d:e4:f9:a4:d0:8b:e7:ef:27:8a:65:
5c:ba:35:e1:88:70:08:e2:e9:a8:44:84:5a:a6:f2:
bb:d5:cd:b0:9b:44:43:92:e7:84:73:75:35:be:ad:
c8:71:a7:5a:8e:34:8d:95:26:58:db:5a:70:d2:81:
db:d7:88:c1:fb:2d:02:98:6f:c1:1c:2d:ec:a3:07:
6c:cc:7e:f9:b4:3d:b2:e0:fb:b7:c1:91:82:eb:2c:
d1:5a:cb:0f:fa:0e:8e:b1:88:4f:aa:32:df:b6:66:
cd:1c:44:c9:dd:32:cb:ae:c2:93:19:dc:1d:08:36:
7d:0e:c7:26:c3:77:7d:73:dc:43:c8:52:9a:70:22:
c4:b8:4f:ee:6e:35:3d:8b:f6:f1:01:7f:38:c0:cc:
ff:c8:52:67:10:b7:26:9d:e7:e2:6e:0a:80:1e:57:
80:6d:cb:1b:07:88:30:36:ed:81:3f:ca:55:61:b5:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:52:A3:68:32:16:5D:6D:FA:48:72:38:04:FF:D4:F8:2E:E2:97
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.160.0/24
46.203.164.0/24
92.112.32.0/22
92.113.215.0/24
95.134.130.0/24
95.134.135.0/24
95.134.155.0/24
95.134.176.0/24
95.134.182.0/24
95.135.38.0/24
95.135.85.0/24
95.135.127.0/24
95.135.138.0/24
95.135.219.0/24
178.92.220.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7c:bf:d3:8b:7a:48:a0:7b:a5:e8:7d:3d:5d:9c:07:3e:fe:
ef:75:89:26:a4:2b:b6:39:c5:c8:a1:e0:81:db:80:49:c2:8a:
b3:17:11:3f:cd:13:f1:9b:77:f5:2c:0a:00:6f:d9:3c:69:90:
b5:6f:d5:93:51:fb:03:7e:47:d6:5c:95:8d:d8:73:ed:90:bf:
ec:f5:b8:38:09:f9:b6:3f:57:ae:58:ea:d8:37:b5:ca:ab:ac:
38:d5:d0:89:0e:33:a5:4b:e0:9c:b8:8c:25:24:0d:bd:68:a4:
ea:43:e8:3d:8e:1b:d5:c9:61:c1:c7:d8:ea:8d:92:ad:d3:fe:
0a:e3:d7:2a:85:8f:11:d1:7b:b0:ad:9c:94:59:94:dd:0f:d4:
96:d4:85:d9:23:3e:60:3d:79:55:11:4d:48:ec:32:2b:e3:c3:
ea:46:99:30:fe:96:f6:b8:38:88:94:d5:42:46:3f:16:ed:03:
1a:c7:a9:55:74:d8:c4:60:13:57:05:0f:87:b1:56:9e:78:02:
c6:0d:29:31:ff:da:cc:b3:44:46:de:3c:4f:c2:88:3b:42:d7:
bb:40:53:98:28:f6:3e:c9:25:7e:cb:42:9e:00:98:b1:25:5c:
83:73:07:dc:3a:ec:8a:ce:73:fa:c5:45:f8:a9:ee:60:37:d2:
bb:d1:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:27 2026 by rpki-client