Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: e85NdOAY+FciBSNjauE7IgAzNdryo5lfefVS7z4x4gI=
Subject key identifier: 39:FA:94:23:A8:0C:2F:D7:7D:06:AC:D8:B9:23:09:F9:1B:42:79:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5EBE046A2E9464C284D9A0A573D562741D1E6A43
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
Signing time: Wed 29 Oct 2025 12:55:10 +0000
ROA not before: Wed 29 Oct 2025 12:50:10 +0000
ROA not after: Wed 28 Oct 2026 12:55:10 +0000
asID: 50304
IP address blocks: 148.135.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:be:04:6a:2e:94:64:c2:84:d9:a0:a5:73:d5:62:74:1d:1e:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 29 12:50:10 2025 GMT
Not After : Oct 28 12:55:10 2026 GMT
Subject: CN=39FA9423A80C2FD77D06ACD8B92309F91B427948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:24:62:94:f1:60:88:68:7d:52:37:fb:f0:
b4:1d:28:8e:35:13:de:5a:87:d5:e0:3f:cb:40:32:
64:fe:c4:2b:7d:57:72:c8:1b:ba:d9:06:ec:1d:40:
e4:b1:41:23:ef:b7:60:25:29:da:f2:b5:d3:00:0f:
d1:0e:76:2d:fc:58:cd:2d:1f:b0:24:2a:f2:65:4c:
b6:5f:a9:8d:4b:cd:80:27:ae:86:fc:a2:a1:a5:d2:
21:53:41:54:9c:49:6d:ec:46:7d:e8:5f:0c:b6:76:
36:de:5d:02:0a:ca:03:9d:a5:b6:20:67:0a:4e:18:
f0:47:41:98:db:03:54:54:be:8e:01:f5:59:32:94:
e5:fc:11:8b:42:1a:4c:84:62:60:1d:e4:e5:c5:09:
28:11:b1:36:c1:65:f2:1f:2b:82:19:3f:a9:eb:cd:
8a:bb:ba:72:ae:5c:49:06:ac:75:d4:27:6a:8f:a7:
52:dd:cf:a3:a0:97:6f:1a:5d:84:e3:0e:8a:60:0c:
b4:d5:6b:87:48:63:34:93:04:fa:0f:b1:3c:ff:e7:
28:25:9a:44:5c:74:48:23:f4:ab:38:b4:e7:3a:80:
e7:63:c2:cb:9a:6f:56:c3:a1:c8:c5:fb:22:fe:b7:
98:d0:e5:cc:3e:25:3a:6b:c5:94:6b:d7:21:ac:ff:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:94:23:A8:0C:2F:D7:7D:06:AC:D8:B9:23:09:F9:1B:42:79:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.252.0/24
Signature Algorithm: sha256WithRSAEncryption
af:59:dd:1a:6d:f1:6d:aa:f2:b6:8b:4a:34:f5:e4:08:34:40:
5d:45:4d:eb:b6:6c:90:ba:c5:df:31:8c:06:4f:58:58:e5:98:
6d:fa:3b:24:86:53:af:81:52:22:c4:67:37:3b:f0:e4:b2:d7:
43:f1:11:40:d4:4d:9b:ca:62:4a:50:ef:50:62:bc:e6:0d:ac:
2b:81:73:f0:25:d7:63:91:b2:07:72:d8:07:48:59:ed:ec:14:
2c:7b:e8:3d:27:c7:3b:70:7d:39:89:31:90:fa:70:8c:ab:f4:
00:05:2f:e3:a1:33:76:c8:83:7d:a1:66:3b:b2:e4:95:7c:90:
4c:a1:2a:3e:97:16:a2:1a:ef:90:0f:45:d1:f9:f4:54:47:cb:
77:48:ec:5e:ce:55:17:b4:c3:66:9d:6e:a7:ac:ca:85:bc:fd:
c0:c0:08:be:ca:34:06:b3:2c:df:27:1d:10:d0:28:bf:4f:06:
55:db:23:a3:bb:e5:fc:4c:f4:4c:f7:91:ee:86:d8:2a:30:da:
c5:b3:d3:ad:4d:47:36:1f:79:dd:84:25:01:d2:3c:19:d3:db:
d3:9d:69:4d:46:b0:14:dd:b3:3e:08:b0:44:88:a6:db:9f:2c:
35:4a:3b:4a:e4:79:cb:d1:e3:06:91:e2:5a:b6:21:a0:f3:68:
fe:f5:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:50:28 2025 by rpki-client