Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: dRm9bzRN19DURvK7y7zwS5x9GOOgT3L4F6isvVm8XGU=
Subject key identifier: 69:A9:95:A3:FF:18:80:33:5C:0A:F9:84:7B:FE:E5:22:52:E6:A5:2A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6A076D466D8E9E3910698BF24E44F7956BFC87F5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
Signing time: Mon 27 Oct 2025 12:55:10 +0000
ROA not before: Mon 27 Oct 2025 12:50:10 +0000
ROA not after: Mon 26 Oct 2026 12:55:10 +0000
asID: 50304
IP address blocks: 181.214.3.0/24 maxlen: 24
181.214.15.0/24 maxlen: 24
181.214.19.0/24 maxlen: 24
181.214.28.0/24 maxlen: 24
181.214.32.0/24 maxlen: 24
185.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:07:6d:46:6d:8e:9e:39:10:69:8b:f2:4e:44:f7:95:6b:fc:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 27 12:50:10 2025 GMT
Not After : Oct 26 12:55:10 2026 GMT
Subject: CN=69A995A3FF1880335C0AF9847BFEE52252E6A52A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:e5:d9:14:fb:d9:7c:e7:13:0e:c9:9e:21:
ff:32:ca:34:8e:aa:74:97:f0:d5:35:fa:7a:a6:71:
fe:b9:43:6c:8a:ca:0b:d2:ea:b0:1c:86:e8:44:23:
21:42:80:ce:12:d6:dd:74:1b:8e:9a:cf:5a:07:0d:
66:85:25:2f:2a:e7:36:61:ab:9f:32:06:e6:45:0d:
a3:22:2a:48:52:e0:5f:d5:2c:be:c5:03:46:d6:ed:
b0:f7:24:2d:c9:7c:76:d8:b0:2b:95:98:87:a7:45:
14:64:cf:a8:09:eb:b6:38:4f:5e:e3:6b:9f:1c:68:
66:ae:a2:55:d4:36:9f:b2:4b:29:af:80:39:12:f4:
ca:e7:1b:28:fc:25:7b:91:ba:dc:79:3d:b1:f3:9d:
93:6f:80:6d:76:9b:c2:b0:cf:45:da:1c:3b:33:fe:
d7:b3:fa:42:19:c5:02:74:42:fb:44:39:f1:b9:e0:
29:6e:f6:59:c7:ac:65:42:47:60:57:8c:45:00:3b:
60:a0:3e:2f:c3:d6:72:66:98:3d:5f:29:26:fc:22:
4e:5f:1b:d6:f3:63:06:45:54:a1:a4:5b:83:b3:34:
69:92:29:60:6e:cd:a7:6c:b6:88:44:e0:e1:e8:02:
3f:1f:aa:d3:c5:7a:3f:c2:27:2b:d0:a3:ad:4b:7e:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:95:A3:FF:18:80:33:5C:0A:F9:84:7B:FE:E5:22:52:E6:A5:2A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.3.0/24
181.214.15.0/24
181.214.19.0/24
181.214.28.0/24
181.214.32.0/24
185.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2d:9e:6d:4c:33:4b:15:ef:e9:e3:61:a3:a0:5c:80:37:c5:
c4:6e:d8:27:b7:b0:fe:0f:0c:0b:6f:75:fe:8d:cd:da:a7:c5:
88:20:c7:df:e0:e2:49:77:81:8c:4c:2f:1c:a8:39:46:d1:f9:
80:53:7d:c2:47:9d:c9:a0:52:4e:12:db:b4:17:51:53:ca:de:
e7:ff:10:58:a1:bf:6b:f7:46:6c:53:f1:2d:d8:d8:f8:c5:59:
d7:b6:a6:55:64:8e:c0:cf:79:3f:83:23:c3:3c:4c:ae:a0:9a:
f5:0f:ec:9e:32:b7:01:10:2d:6f:fd:45:ef:53:18:38:66:4c:
56:3c:41:73:b4:8e:48:11:42:63:94:d1:b3:11:7f:b8:a6:60:
ad:57:0c:f9:b7:5f:31:ea:2e:07:19:77:af:21:3e:9e:43:17:
48:e2:27:b9:c5:99:3a:2a:cb:19:2a:20:98:84:36:7d:87:59:
5b:bd:cb:56:26:ed:b4:9d:6b:1c:d0:3a:04:30:0e:f4:6d:f3:
84:f5:c2:14:ed:49:53:c0:3d:45:97:89:ca:09:2d:92:ef:4f:
40:1f:d7:b5:a0:0a:de:58:aa:3d:4d:30:6c:d4:92:74:2d:56:
8c:b9:7b:25:d0:7d:63:3a:5c:db:3f:2d:1f:62:1b:c7:9f:2e:
4f:d4:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:25 2025 by rpki-client