Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: Ar+Uh7CIjWk4AbNurXLiIhHQEWwEQOw7g8/Yh50eGhw=
Subject key identifier: 1D:3B:D3:64:C2:85:BE:C8:5F:D5:32:BB:59:D3:7D:F6:A3:E7:BC:03
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26B469C0CE0F45E84F1C52334F7DC56A063211F2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
Signing time: Tue 01 Sep 2026 14:45:03 +0000
ROA not before: Tue 01 Sep 2026 14:40:03 +0000
ROA not after: Tue 31 Aug 2027 14:45:03 +0000
asID: 50049
IP address blocks: 82.21.201.0/24 maxlen: 24
82.22.205.0/24 maxlen: 24
82.27.0.0/24 maxlen: 24
82.47.0.0/24 maxlen: 24
82.47.1.0/24 maxlen: 24
84.75.40.0/24 maxlen: 24
84.75.161.0/24 maxlen: 24
84.75.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b4:69:c0:ce:0f:45:e8:4f:1c:52:33:4f:7d:c5:6a:06:32:11:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 1 14:40:03 2026 GMT
Not After : Aug 31 14:45:03 2027 GMT
Subject: CN=1D3BD364C285BEC85FD532BB59D37DF6A3E7BC03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:8f:0d:d5:d6:cf:93:b9:f3:ad:47:9b:dc:
af:77:b2:7a:db:1a:98:59:ac:bd:f8:ed:72:a7:b1:
c6:ce:bf:df:4a:d1:12:aa:17:e4:55:8c:cd:5c:c4:
9a:ba:bf:6d:ef:6d:44:2f:d0:87:de:c7:0f:00:fc:
5a:64:56:f5:d1:51:6b:a9:cf:78:95:57:8b:1b:06:
a6:ef:97:53:d9:2e:a8:3b:08:e2:34:5e:20:1a:e3:
9e:1e:a2:d3:4b:c7:7b:f1:2d:ab:f9:6c:fa:4e:a5:
30:d9:a5:93:06:da:1d:07:6d:35:ac:ea:6f:25:f9:
c5:4d:5c:30:e6:25:21:44:7c:54:9b:2a:d4:2f:78:
01:9a:d2:f2:42:1d:a6:74:8b:2b:db:7a:9a:b6:dd:
1f:41:2c:69:5b:81:af:c7:eb:4f:d6:4f:63:e6:4c:
7e:cd:be:94:55:60:05:34:e5:b0:73:63:e6:24:ed:
6c:76:11:60:5c:d4:e5:5f:eb:c6:34:18:67:87:c2:
01:d9:e8:d2:a2:1d:95:28:5e:9e:fe:fe:6c:31:0e:
5c:94:e7:64:02:94:ba:6a:17:21:7a:8a:26:41:44:
00:28:f0:f4:d9:be:ae:79:f1:c6:e1:57:11:b4:ee:
56:39:af:e7:8a:d8:4d:e8:ff:ee:7d:52:94:32:52:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:D3:64:C2:85:BE:C8:5F:D5:32:BB:59:D3:7D:F6:A3:E7:BC:03
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.201.0/24
82.22.205.0/24
82.27.0.0/24
82.47.0.0/23
84.75.40.0/24
84.75.161.0/24
84.75.241.0/24
Signature Algorithm: sha256WithRSAEncryption
57:44:cc:41:33:18:ce:1f:8a:dc:36:8c:61:56:87:1c:5a:ed:
00:35:6b:56:c6:dc:6c:71:75:0f:5b:c8:20:17:52:8d:2c:c3:
10:c5:b6:dd:ba:20:c7:2e:30:8e:36:5d:b2:6f:c9:74:cd:11:
0b:b7:fe:8a:19:38:07:8e:81:23:52:62:38:63:bb:e8:40:cf:
84:70:ba:91:00:e2:a3:4b:1c:1e:cc:3a:5e:2d:28:7c:f0:f8:
fd:ac:84:4f:d3:f3:e1:db:be:f5:92:a5:f7:ac:64:fe:ab:ce:
8e:ce:53:09:29:df:2e:4e:f3:e3:58:e6:13:5a:81:78:b8:7f:
d6:33:ab:b4:42:e1:b2:db:05:fb:de:5e:72:c0:69:55:3c:a8:
57:4f:2b:12:fe:d9:2a:d1:ac:2c:9f:4a:1d:f6:ec:b1:f8:a6:
37:f9:99:7f:56:3f:22:12:48:3f:a4:ad:d7:39:68:48:1e:ea:
d9:9f:70:00:ae:7e:43:a1:54:d0:ca:30:ec:d8:a1:59:b3:35:
1f:e1:1f:30:12:ce:87:90:94:6b:5d:11:d4:f7:63:3e:d3:01:
59:0f:cd:35:10:c4:1b:df:3d:3c:71:00:1c:f2:cc:84:9c:b4:
3a:b1:a9:9c:a6:17:cd:91:30:0e:03:2b:a1:d4:03:b0:9c:69:
ca:07:95:ca
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUJrRpwM4PRehPHFIzT33FagYyEfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MDExNDQwMDNaFw0yNzA4MzExNDQ1MDNaMDMxMTAvBgNV
BAMTKDFEM0JEMzY0QzI4NUJFQzg1RkQ1MzJCQjU5RDM3REY2QTNFN0JDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7I8N1dbPk7nzrUeb3K93snrb
GphZrL347XKnscbOv99K0RKqF+RVjM1cxJq6v23vbUQv0Ifexw8A/FpkVvXRUWup
z3iVV4sbBqbvl1PZLqg7COI0XiAa454eotNLx3vxLav5bPpOpTDZpZMG2h0HbTWs
6m8l+cVNXDDmJSFEfFSbKtQveAGa0vJCHaZ0iyvbepq23R9BLGlbga/H60/WT2Pm
TH7NvpRVYAU05bBzY+Yk7Wx2EWBc1OVf68Y0GGeHwgHZ6NKiHZUoXp7+/mwxDlyU
52QClLpqFyF6iiZBRAAo8PTZvq558cbhVxG07lY5r+eK2E3o/+59UpQyUtY1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUHTvTZMKFvshf1TK7WdN99qPnvAMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTAwNDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBABSFckD
BABSFs0DBABSGwADBAFSLwADBABUSygDBABUS6EDBABUS/EwDQYJKoZIhvcNAQEL
BQADggEBAFdEzEEzGM4fitw2jGFWhxxa7QA1a1bG3GxxdQ9byCAXUo0swxDFtt26
IMcuMI42XbJvyXTNEQu3/ooZOAeOgSNSYjhju+hAz4RwupEA4qNLHB7MOl4tKHzw
+P2shE/T8+HbvvWSpfesZP6rzo7OUwkp3y5O8+NY5hNagXi4f9Yzq7RC4bLbBfve
XnLAaVU8qFdPKxL+2SrRrCyfSh327LH4pjf5mX9WPyISSD+krdc5aEge6tmfcACu
fkOhVNDKMOzYoVmzNR/hHzASzoeQlGtdEdT3Yz7TAVkPzTUQxBvfPTxxABzyzISc
tDqxqZymF82RMA4DK6HUA7CcacoHlco=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:43 2026 by rpki-client