Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: m52BoDgu4LaE3uqaMW3PLNMuEio86j9GTUEZuRfWGG0=
Subject key identifier: 45:34:9D:1C:A2:AD:93:4A:77:7E:6B:48:53:F2:B6:25:7C:40:97:3D
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 483DC42C8A8FBEDA58FA546D4DFAA480B5B23DD2
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS50049.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 50049
IP address blocks: 5.199.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3d:c4:2c:8a:8f:be:da:58:fa:54:6d:4d:fa:a4:80:b5:b2:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=45349D1CA2AD934A777E6B4853F2B6257C40973D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:a9:bf:9d:d8:5e:09:81:f0:57:78:06:46:
88:5b:c7:23:f6:ca:5a:d7:00:fb:28:ce:89:12:ef:
9a:82:3c:e6:5c:08:68:c8:75:f5:be:85:03:0f:c3:
40:87:32:89:4b:1b:11:ae:32:24:90:72:30:87:da:
52:3e:92:12:a4:03:3d:5b:bd:29:6f:29:f7:61:98:
d5:7a:5a:19:4d:82:78:e2:de:e3:15:e4:ea:19:d7:
e9:9d:4e:da:e7:9e:c7:2d:38:b5:43:cf:91:dd:d0:
3f:63:e6:6b:58:b7:f5:22:60:03:15:d3:4a:98:24:
57:3b:43:60:eb:6c:18:bc:84:f4:40:58:a4:d0:25:
c3:bd:f0:b1:08:83:5e:d6:be:19:43:d4:49:97:aa:
66:e1:8c:41:6a:cf:c3:12:33:09:0d:16:01:d8:12:
a3:b0:8f:65:16:98:eb:bf:66:6b:13:21:5f:5a:08:
cb:20:b3:43:8b:ab:c3:75:b8:fb:3c:10:c8:10:d5:
10:7a:59:8d:f4:d5:ae:35:e9:3d:e0:f1:56:04:04:
10:45:99:2e:c0:3f:39:c5:65:0a:84:ea:fb:aa:b2:
7e:22:09:b0:b6:2f:8e:5c:ac:a8:e2:33:88:aa:fd:
b9:3a:ab:a2:d3:8d:fe:6b:3f:bb:4c:1f:5e:85:e9:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:9D:1C:A2:AD:93:4A:77:7E:6B:48:53:F2:B6:25:7C:40:97:3D
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:52:b8:aa:50:f0:6f:f5:b3:6e:25:4d:f7:15:16:44:85:bd:
e4:9d:4d:05:f8:f7:a0:f5:b7:eb:98:c6:0d:f3:c8:5c:53:e7:
fe:e9:8f:e9:a6:a6:ad:d6:9e:56:6e:16:f9:9a:ea:ef:c1:4f:
66:50:26:b3:49:ac:e6:0e:d1:80:fe:b2:d3:25:32:b6:2e:dd:
10:31:46:98:6a:cf:7d:d0:4e:8b:47:d1:f5:bd:de:df:33:c7:
16:12:aa:45:29:e7:bc:a2:82:77:1b:87:7f:97:de:bc:90:bf:
df:87:32:88:46:72:c1:73:a6:ad:32:9b:cc:72:0e:de:d2:7d:
0b:fa:97:a7:fd:6c:56:7a:ec:a2:f3:5e:88:66:5a:45:35:bf:
0a:d5:02:2f:08:2d:cc:03:f9:c7:74:c6:19:91:64:8e:09:83:
c4:83:f8:0d:8d:ca:e0:07:52:fe:6d:e0:d9:18:33:e1:7e:ff:
57:29:bf:d5:a5:42:17:50:e8:3e:1e:48:00:dd:68:ce:ce:6c:
ba:54:d6:0c:77:32:98:03:66:27:6b:48:8e:f2:b1:aa:3b:60:
3e:9e:68:7e:84:0f:cd:84:29:02:ae:a3:3d:50:85:c4:2b:66:
eb:f1:79:ca:00:37:91:fa:75:75:27:dc:9c:cf:a9:be:30:46:
2d:e6:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:17 2026 by rpki-client