Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: LQr/f6FfRARVhnolLZtZ2SttMBVOq7p9rFkGtKovkgE=
Subject key identifier: EE:B3:3C:8D:B4:1A:A8:1C:09:8E:17:31:A0:A9:81:1A:92:F1:51:94
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6194679A0928EED8DF56F060ACCCAED016BE8C86
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
Signing time: Sat 08 Aug 2026 00:02:05 +0000
ROA not before: Fri 07 Aug 2026 23:57:05 +0000
ROA not after: Sat 07 Aug 2027 00:02:05 +0000
asID: 5650
IP address blocks: 150.241.255.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:94:67:9a:09:28:ee:d8:df:56:f0:60:ac:cc:ae:d0:16:be:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 23:57:05 2026 GMT
Not After : Aug 7 00:02:05 2027 GMT
Subject: CN=EEB33C8DB41AA81C098E1731A0A9811A92F15194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:83:ce:50:fb:78:c3:f1:55:8a:a2:12:10:
c6:64:f4:a3:01:77:87:19:09:cf:39:76:bf:f5:c6:
90:ef:e4:db:44:0e:25:3d:44:aa:ef:73:50:b7:05:
09:58:5a:75:57:a9:9f:34:bb:47:44:04:d3:05:44:
51:26:86:4a:37:9f:21:e8:39:d1:fd:ee:1e:27:c2:
80:cb:c3:aa:6c:e0:c5:fe:f8:f9:e5:e4:37:81:7b:
72:e1:dd:8a:68:52:6c:4f:56:bc:c4:b1:22:07:5e:
a7:bb:0a:2b:38:9b:f4:3f:87:49:6d:6b:8c:59:42:
ca:ab:de:09:9c:94:56:86:7b:46:18:b2:11:1e:53:
b1:e8:53:44:00:c5:0a:25:6a:ea:96:50:f9:c7:31:
e2:66:17:e3:f8:82:ea:6e:4d:9e:b8:7b:74:84:6a:
23:f7:83:4d:a3:25:9c:03:6b:f6:76:b7:aa:93:47:
8c:76:86:5f:90:36:30:a4:85:7f:c8:34:04:e8:9c:
0b:2d:a5:46:7e:fe:6b:f4:5f:6b:75:88:36:6e:56:
cd:22:80:fc:89:03:d0:ab:be:7a:be:ad:cb:79:a2:
0e:10:f2:42:8b:33:e3:6f:ec:e9:3d:ef:d0:04:84:
b0:0a:1f:8f:46:7c:db:7f:83:2e:2c:50:54:0a:3f:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:3C:8D:B4:1A:A8:1C:09:8E:17:31:A0:A9:81:1A:92:F1:51:94
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.255.0/24
162.141.2.0/23
162.141.6.0/23
162.141.60.0/22
162.141.76.0/23
162.141.134.0/23
162.141.192.0-162.141.215.255
167.148.24.0/22
167.148.43.0/24
167.148.75.0/24
167.148.145.0/24
167.148.185.0/24
168.222.6.0/24
168.222.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:d0:b5:00:ec:49:76:16:e4:db:de:2c:a7:a9:a6:50:d8:51:
92:74:90:50:ce:a7:87:89:db:16:bd:62:91:f9:5c:e9:ef:9d:
38:e2:73:a1:ef:d2:ce:98:29:54:02:8a:9a:cb:66:9c:df:5a:
b6:3e:17:12:f1:c3:73:98:a4:96:17:c1:e1:0a:25:fc:87:58:
58:c4:ad:66:72:b4:dc:41:c1:8a:6e:c1:7f:36:0f:86:90:d9:
48:44:35:70:65:e0:1d:c1:78:aa:2a:c2:34:f3:6b:71:cc:18:
2b:61:e7:af:03:4a:9e:13:ee:6a:c1:1d:74:a1:6c:95:bb:bc:
1c:17:ed:a1:98:18:92:c1:c1:7e:f2:bf:d4:19:53:f3:84:1b:
9e:14:62:b3:26:0e:8c:f3:97:9e:e4:3c:9e:7e:4d:07:1d:5c:
c1:3f:22:f2:32:fb:34:dd:28:51:8c:b0:ae:36:49:19:b2:70:
67:1e:d8:bb:1d:54:5c:60:25:e6:3c:bb:e2:8c:49:80:a1:b5:
7f:7e:c5:ab:f9:cc:a4:80:04:fd:38:11:5d:c3:99:c5:44:df:
61:81:2a:8a:8e:34:f2:61:31:f2:08:6f:66:63:25:89:ab:67:
70:a4:77:1a:32:cc:e1:59:e5:b4:99:4a:7c:bb:4a:ea:bc:04:
77:0c:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:55:49 2026 by rpki-client