Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: 3ugXVtcrAxKhVhj4fZQJbjFiOFhVmTKmM3nENPxDynw=
Subject key identifier: 87:18:72:8E:0E:82:CA:CE:58:ED:7F:F8:72:9C:BE:F2:FB:D7:88:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 9249A16E4998F6D79B7817394D03E0A9854E67
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
Signing time: Tue 01 Sep 2026 14:45:04 +0000
ROA not before: Tue 01 Sep 2026 14:40:04 +0000
ROA not after: Tue 31 Aug 2027 14:45:04 +0000
asID: 50049
IP address blocks: 96.62.74.0/24 maxlen: 24
143.14.71.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
155.117.99.0/24 maxlen: 24
155.117.214.0/24 maxlen: 24
167.148.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
92:49:a1:6e:49:98:f6:d7:9b:78:17:39:4d:03:e0:a9:85:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 14:40:04 2026 GMT
Not After : Aug 31 14:45:04 2027 GMT
Subject: CN=8718728E0E82CACE58ED7FF8729CBEF2FBD7881F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:75:a9:1d:ea:6d:9f:01:eb:d5:9b:9a:99:
8c:23:eb:cc:19:17:35:4c:8c:47:ab:86:81:e4:7e:
02:bb:03:2b:a8:1b:71:6d:71:4b:df:de:3f:42:b9:
a0:dc:3f:95:ba:88:bc:b8:46:a0:d9:89:c6:50:33:
da:6c:66:43:aa:d5:65:c3:fa:19:de:a4:89:5e:0c:
58:a5:14:c4:37:a3:6b:c0:e6:43:75:59:d5:ab:8c:
3e:73:90:91:2c:60:3f:08:60:1b:a8:df:88:21:99:
ef:9b:a0:c2:00:db:4c:ca:d8:ee:c4:bb:26:79:fa:
aa:8b:0d:12:84:56:a0:73:a5:d4:e7:36:05:58:02:
c6:c0:89:80:fc:64:70:3a:d5:e3:d6:7e:ee:aa:56:
a1:b6:e5:02:b3:66:f0:ad:20:4c:9c:41:91:d2:1d:
6d:de:50:5b:32:b3:6f:ad:db:d0:0b:eb:72:5f:31:
eb:6f:76:28:02:b3:10:e9:60:0f:f1:a0:3e:30:15:
e7:07:b4:60:0b:79:f9:75:d2:b7:06:d7:e5:e0:3b:
5d:a3:34:7f:6b:51:42:49:cf:35:38:22:34:24:4f:
2e:8a:e9:cf:bc:22:26:b2:11:3f:43:1b:b2:7f:62:
42:58:1d:52:37:71:7d:24:66:fe:4b:1b:08:fc:80:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:72:8E:0E:82:CA:CE:58:ED:7F:F8:72:9C:BE:F2:FB:D7:88:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.74.0/24
143.14.71.0/24
143.14.75.0/24
155.117.99.0/24
155.117.214.0/24
167.148.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cd:e0:cd:b2:f6:1c:1a:c2:b4:f7:55:27:97:4e:db:9a:c8:
38:f3:c8:4e:ec:c9:f5:9b:fb:eb:d6:fb:9a:12:fe:1f:96:6b:
bc:db:ce:ac:23:f0:b6:66:0d:b6:c5:bf:36:fb:4d:d8:e6:5d:
6c:97:34:a1:c7:5e:79:a7:16:dc:52:35:fe:4a:cb:bc:24:d5:
b1:3d:22:ca:c8:2f:6b:54:8c:2e:24:d1:69:cd:21:53:ad:1e:
ec:39:dc:6a:63:b2:29:4e:9e:54:fe:8f:47:22:93:f2:b2:3e:
f6:56:65:d7:6d:b0:e0:60:2c:83:37:33:98:41:9e:0f:35:b1:
ff:5d:b4:18:85:c3:f4:34:24:c5:58:35:6d:b9:fe:b7:17:46:
55:1b:ba:92:ec:21:ac:58:33:00:7e:08:87:f3:38:a5:8f:0e:
91:0e:19:85:ee:5b:69:ea:61:08:5e:25:06:ec:f3:81:58:74:
dd:5e:7a:dc:9f:da:b8:93:2e:30:13:da:9d:25:33:d8:a1:69:
4e:54:73:55:4c:ce:e3:1a:3c:2b:f6:48:fe:da:cd:80:a6:72:
81:eb:a5:cd:a1:bd:a1:4d:ba:e6:03:60:17:50:a7:f8:fb:b2:
d6:71:75:9a:cd:02:a5:c0:e5:02:f1:7c:b6:d9:84:75:05:1d:
29:56:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:02:18 2026 by rpki-client