Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
File: AS50385.roa (raw, json)
Hash identifier: rMujR3CZpZr338aFmqbZAWV0cQCQhsaIZUQy2W9uYAs=
Subject key identifier: 4A:E4:BB:33:F5:88:D6:80:6C:74:26:60:A1:37:50:E9:B5:E0:6C:F1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 036CB97CD4A03CEF7E46828A5226F5D9B1341AC6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
Signing time: Fri 07 Aug 2026 08:49:20 +0000
ROA not before: Fri 07 Aug 2026 08:44:20 +0000
ROA not after: Fri 06 Aug 2027 08:49:20 +0000
asID: 50385
IP address blocks: 140.233.191.0/24 maxlen: 24
143.14.86.0/24 maxlen: 24
155.117.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6c:b9:7c:d4:a0:3c:ef:7e:46:82:8a:52:26:f5:d9:b1:34:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 08:44:20 2026 GMT
Not After : Aug 6 08:49:20 2027 GMT
Subject: CN=4AE4BB33F588D6806C742660A13750E9B5E06CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:02:9f:21:bb:83:89:53:7b:17:c3:be:13:
95:aa:38:ae:29:c3:65:1e:fd:50:c8:bf:88:68:a0:
77:a2:16:2b:dc:cb:5c:74:4b:6c:aa:c5:4f:4e:0f:
a6:b9:3f:cf:fc:07:05:48:97:b3:3b:9a:ea:fd:88:
97:3e:dc:b8:c1:d5:6c:e9:8a:f9:ff:68:60:ef:c9:
d3:ff:91:ff:c5:04:db:aa:fa:6f:d4:3a:bb:b9:83:
b9:07:04:0f:05:2d:0c:8f:53:fd:92:51:6d:84:26:
7a:e9:c0:f1:de:8d:7d:b9:18:1d:ee:5d:6f:2d:59:
8b:8f:e1:09:83:73:41:a0:3c:4e:33:b1:1d:98:d9:
f2:1f:c0:48:0b:52:c8:d6:d2:43:d3:42:9f:1d:2b:
d4:bb:f6:24:7d:c9:ac:40:7a:72:06:48:4c:c0:89:
dd:27:1b:8e:43:a2:dc:bc:d8:a2:1b:76:a7:8d:c8:
7a:59:84:50:a4:5b:f2:6c:e7:4d:40:a0:c7:fa:08:
15:a8:6d:8a:0e:ac:c4:2a:b6:c3:bf:10:cd:99:ea:
b3:10:e7:77:d0:bb:0a:d0:7e:a8:5b:23:b5:7e:e8:
22:ef:29:6b:7f:ed:27:a4:7b:ef:56:4d:6e:30:b7:
87:75:2f:7a:fe:17:64:24:e1:38:86:83:b1:46:95:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:BB:33:F5:88:D6:80:6C:74:26:60:A1:37:50:E9:B5:E0:6C:F1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
143.14.86.0/24
155.117.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:53:f0:fe:3a:5f:c1:23:f0:65:7f:e4:ee:75:f6:9c:49:17:
e1:9e:c4:df:4c:ce:18:25:66:00:52:c8:f6:f5:92:81:f0:05:
3a:8f:d6:4c:7a:0b:8c:0b:9c:20:e2:82:43:db:27:12:05:ea:
84:41:83:5c:3d:40:86:cc:95:57:6e:5c:a2:87:68:a0:12:06:
9e:2b:17:7b:d2:97:f1:49:b7:97:ef:8f:49:ae:a1:e8:d8:76:
ec:9a:fd:a9:a2:f9:29:a1:6d:59:9c:90:f5:bc:cb:22:c8:f0:
1d:e3:85:6d:80:fc:a3:7c:02:2b:37:7c:10:61:9f:53:1b:f7:
43:1e:7d:02:5c:25:f8:7d:39:9b:ee:79:0b:ce:1b:ef:ed:0d:
5d:e1:4d:bb:76:1f:ec:22:3e:00:5f:bd:e9:20:2e:05:e5:5d:
19:94:c9:66:7b:a3:bf:a9:9c:33:61:12:39:63:28:f6:3f:7f:
a0:0f:ff:35:73:2b:30:7d:a6:de:7a:58:b2:da:99:12:1f:42:
ec:77:51:6b:f1:6d:99:48:65:4c:6f:dd:15:2f:73:10:4a:1c:
42:b4:c5:81:59:23:6c:dc:f5:58:cc:37:02:31:53:21:9c:e1:
f6:b0:7c:12:b3:27:e4:7e:80:02:47:8c:63:81:e4:44:67:84:
bf:5a:ce:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:11:34 2026 by rpki-client