Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: bWvoJTTds0gSh0GbB04ezuBWhK6HabPonLF9BLue3aQ=
Subject key identifier: 47:FE:75:E2:14:11:6B:BE:6A:BC:7F:19:83:02:30:A7:4C:32:C5:28
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 09DB1F3DD00D5F69A9BCF515EC5257274F4B8EFB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
Signing time: Thu 02 Jul 2026 09:21:38 +0000
ROA not before: Thu 02 Jul 2026 09:16:38 +0000
ROA not after: Thu 01 Jul 2027 09:21:38 +0000
asID: 5650
IP address blocks: 46.203.160.0/24 maxlen: 24
46.203.164.0/24 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.135.38.0/24 maxlen: 24
95.135.85.0/24 maxlen: 24
95.135.127.0/24 maxlen: 24
95.135.138.0/24 maxlen: 24
95.135.219.0/24 maxlen: 24
178.92.220.0/24 maxlen: 24
178.95.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:db:1f:3d:d0:0d:5f:69:a9:bc:f5:15:ec:52:57:27:4f:4b:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 2 09:16:38 2026 GMT
Not After : Jul 1 09:21:38 2027 GMT
Subject: CN=47FE75E214116BBE6ABC7F19830230A74C32C528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:d1:22:35:77:ee:50:21:ec:95:d5:3c:40:
14:d7:7f:39:6f:0e:02:86:f0:da:85:52:ff:fc:4d:
9f:2a:c5:5f:cf:3c:99:d6:19:d5:d7:db:6e:03:2b:
2b:64:67:53:8d:98:05:c9:cf:f4:81:43:3a:72:c7:
cd:11:36:a0:6d:be:49:0e:8c:21:56:15:61:3d:1a:
92:6d:26:45:9f:30:e2:47:e0:aa:33:8e:dd:58:c7:
65:f3:d4:7c:36:2f:b1:24:38:6b:27:15:2a:85:4e:
47:8c:80:3f:74:f6:1e:21:f7:51:53:bc:02:e7:fb:
27:f4:f3:86:7b:4f:21:a0:34:89:1f:2c:7a:5d:98:
83:56:18:66:ca:b1:79:7b:da:7b:c5:95:c1:94:96:
e7:56:a7:8b:70:20:fa:a3:93:3a:24:ca:08:7c:25:
9e:b6:4c:ed:94:46:89:3d:3c:44:00:06:61:b1:54:
c3:51:f0:bb:15:c8:fa:d6:2c:6b:bc:b8:c2:21:41:
11:d0:a7:d7:3a:f4:58:2e:9b:4d:a2:72:37:94:52:
e8:fd:3a:64:5a:7a:79:1a:82:d8:42:b0:96:85:f7:
42:1a:3d:67:bb:d9:e9:a0:00:d7:dd:eb:22:aa:df:
21:84:63:c7:3e:8a:a9:a1:ba:a5:a0:76:62:c3:f5:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:75:E2:14:11:6B:BE:6A:BC:7F:19:83:02:30:A7:4C:32:C5:28
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.160.0/24
46.203.164.0/24
92.112.32.0/22
92.113.215.0/24
95.135.38.0/24
95.135.85.0/24
95.135.127.0/24
95.135.138.0/24
95.135.219.0/24
178.92.220.0/24
178.95.191.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cf:bd:fa:a1:ee:08:5a:2f:b9:7e:62:f9:21:2b:e6:cb:55:
ed:a8:c1:fc:eb:81:b0:f9:21:74:11:25:c6:bb:28:bc:5b:d9:
34:b2:db:46:1a:5e:42:b0:b1:c9:12:dc:51:e6:25:e9:b2:de:
7d:cc:06:7a:75:e4:ee:37:a6:0c:79:29:79:e0:d8:9b:83:93:
cf:dc:b7:88:13:8a:d1:7b:af:ae:5f:42:ce:9e:2c:3e:39:4d:
e4:ae:09:84:0a:9b:f7:f6:ff:de:72:65:58:5c:6e:15:10:22:
cf:76:ee:9f:5a:4c:da:d8:cb:65:2a:e1:0b:16:9b:f7:de:d4:
ff:c1:1a:80:15:32:c8:97:77:f6:5a:48:17:6f:8a:45:73:c1:
24:a7:31:77:91:16:d5:dc:b3:0e:84:ac:5a:ce:59:e0:63:e5:
68:2d:0e:61:34:ef:a8:4c:91:88:43:c0:1e:03:2d:2b:4a:f8:
c8:87:06:05:3a:e7:5c:03:13:14:ee:f5:0f:7a:25:2a:8e:ba:
b5:0b:89:47:eb:a6:b2:fc:05:ce:3a:0f:3e:96:67:be:5c:a7:
1d:3f:6a:45:27:a4:ed:c3:51:e9:aa:00:92:0e:cf:17:0e:9c:
5c:0e:15:d9:b0:75:f9:df:56:8f:93:d4:47:e6:33:29:0e:53:
2a:52:22:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:53:47 2026 by rpki-client