Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50919.roa
File:                     AS50919.roa (raw, json)
Hash identifier:          ZO1300A/HHT/DhYlDPIobwLmK8uulyREGw97TsiZinQ=
Subject key identifier:   97:74:B8:0B:DC:AE:69:D8:28:04:17:E1:1B:A8:21:F8:07:4E:94:7E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       19E3C2F6F0017AD8A832950058A2B1CF8D66D0E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50919.roa
Signing time:             Fri 05 Jun 2026 12:25:54 +0000
ROA not before:           Fri 05 Jun 2026 12:20:54 +0000
ROA not after:            Fri 04 Jun 2027 12:25:54 +0000
asID:                     50919
IP address blocks:        82.29.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:c2:f6:f0:01:7a:d8:a8:32:95:00:58:a2:b1:cf:8d:66:d0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun  5 12:20:54 2026 GMT
            Not After : Jun  4 12:25:54 2027 GMT
        Subject: CN=9774B80BDCAE69D8280417E11BA821F8074E947E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:14:b4:0b:3d:8e:8e:a0:9c:98:ca:ac:ad:
                    bd:a9:3e:37:7c:f8:d1:15:62:d4:2a:e5:e3:44:ac:
                    84:95:c8:70:4b:54:43:11:b2:d2:ee:09:fc:83:3b:
                    de:ff:3d:1c:c3:69:73:ee:d8:9c:1a:cc:2e:97:7a:
                    7a:0a:40:1c:70:0f:28:ef:a6:f2:4c:76:2e:0c:ec:
                    da:67:0f:ae:d8:e0:ce:dd:16:93:07:cc:81:12:7b:
                    27:7f:32:f7:32:1e:88:26:10:66:30:f8:f8:f6:c6:
                    0c:00:f8:eb:8e:3e:29:b0:7b:ed:bf:04:68:c1:1b:
                    c8:bc:18:77:ac:0d:fb:45:d3:4f:c5:d6:d0:b8:80:
                    8b:bf:df:4e:52:4d:66:03:5a:37:b1:68:cb:d8:38:
                    57:95:ee:1b:39:45:02:62:b6:18:47:f4:78:2e:a7:
                    22:79:0a:e8:98:b9:b7:7f:c0:c1:cf:5c:9f:2d:ed:
                    a5:28:18:3a:a5:37:52:cf:90:d1:5d:18:f0:66:ab:
                    1f:0e:6f:c5:d4:d4:ab:08:fe:27:f0:95:3e:11:ef:
                    a7:07:09:c6:b2:d1:ad:ae:9c:3f:a8:d3:d7:02:03:
                    67:83:cf:e6:0a:e0:72:c6:9c:5a:5a:8e:37:00:69:
                    22:d7:91:05:7c:86:84:27:66:af:e6:29:0e:c3:d8:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:B8:0B:DC:AE:69:D8:28:04:17:E1:1B:A8:21:F8:07:4E:94:7E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.29.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:70:c4:d6:02:2d:a1:86:4b:32:f2:07:2f:f1:f1:4e:72:
         ed:4b:87:ac:bf:1d:61:8e:9e:8e:e1:55:3f:8d:5d:f3:93:e8:
         bd:22:51:2a:63:fd:39:3b:98:f3:ae:92:5a:00:1f:5c:df:2b:
         e2:89:c4:42:f4:85:1c:07:0a:f0:02:8d:68:4a:33:1a:c6:7d:
         b9:7b:d1:7f:dd:97:e5:c8:6c:30:f8:cd:e2:a5:9f:aa:0a:99:
         12:8d:91:f2:01:3b:45:f4:72:98:05:4b:8e:ef:7e:a1:6d:42:
         76:db:50:74:eb:3f:27:fe:43:87:1f:38:20:2a:7c:89:93:de:
         aa:c4:aa:dd:bf:b3:cc:b9:59:64:df:53:2c:77:e2:e8:39:10:
         fc:9f:ab:b4:de:07:4e:1e:45:58:75:18:f2:d0:7a:ce:3b:d2:
         32:6a:f1:4a:70:22:56:3f:09:d9:6b:43:98:4d:53:3c:48:ea:
         fe:4a:ce:43:7b:b6:5a:39:eb:e9:e3:ca:92:c6:eb:07:cd:c6:
         a5:d9:6d:5e:8e:43:89:2a:4c:42:40:28:c1:ee:71:ad:e6:6a:
         d6:c8:67:c2:cf:fb:b8:2e:4d:98:d5:2b:c4:51:80:c1:78:3c:
         36:29:56:5f:02:27:5d:e7:05:45:2e:fe:cc:8d:0f:5e:d9:d5:
         ff:43:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:52 2026 by rpki-client