Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
File: AS50673.roa (raw, json)
Hash identifier: uZuBP1RStjou3ZRcs2vcsCY7qg/63/z9TFi3bAetUHI=
Subject key identifier: 71:8C:18:22:78:44:A5:78:F6:DB:B7:1B:86:77:93:81:D7:B9:10:F5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3A47AAD2A3E2CC76DE0192777D10B3ADA4842DE4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
Signing time: Fri 04 Sep 2026 09:49:32 +0000
ROA not before: Fri 04 Sep 2026 09:44:32 +0000
ROA not after: Fri 03 Sep 2027 09:49:32 +0000
asID: 50673
IP address blocks: 147.78.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:47:aa:d2:a3:e2:cc:76:de:01:92:77:7d:10:b3:ad:a4:84:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 4 09:44:32 2026 GMT
Not After : Sep 3 09:49:32 2027 GMT
Subject: CN=718C18227844A578F6DBB71B86779381D7B910F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:b0:77:16:2e:9a:a3:31:8b:2f:e1:6e:81:
a0:e7:2e:44:b7:67:ed:d4:0d:65:39:da:5f:da:ac:
0e:44:14:be:44:47:00:e5:8d:a3:86:f7:66:b0:9e:
43:b5:87:b1:e5:13:96:77:fb:88:6f:f5:06:ba:c2:
4f:e8:2f:09:f7:44:12:21:cd:a4:b1:94:da:5e:9f:
1b:75:ef:21:3a:78:3b:bd:2a:bf:65:22:ce:7c:b1:
6e:93:44:bc:d2:35:73:5b:04:1a:74:c5:76:20:65:
b7:b0:cd:0e:80:7b:19:00:93:31:f9:37:08:31:73:
53:cb:d8:50:a3:f4:23:fa:3b:3c:80:0d:d5:2e:89:
b6:b2:69:7f:21:88:c6:d3:ac:d7:a4:08:41:b5:df:
56:c4:3a:49:4e:4d:7e:a2:10:45:d6:af:5c:7f:f4:
74:b7:54:a8:00:a9:fe:5f:e8:53:05:3a:6a:f2:d5:
a8:c2:94:f9:13:55:61:54:7a:b0:91:62:0a:2d:72:
10:bf:4e:f6:60:dc:7d:f8:70:96:86:3e:c9:e6:38:
b4:35:24:09:68:3c:2a:31:7c:9a:27:5a:ee:c9:ea:
b5:08:4f:b1:3c:aa:82:1d:6f:62:9a:5f:da:7f:aa:
88:11:1a:2c:13:3b:0d:9b:b1:ca:2d:80:68:bb:d3:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:18:22:78:44:A5:78:F6:DB:B7:1B:86:77:93:81:D7:B9:10:F5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f7:83:27:81:fb:f4:ec:9e:bc:2c:c3:33:0d:a5:e1:4e:9b:
95:59:6e:86:ca:49:dd:25:e1:85:82:e8:fc:02:44:6e:3a:c8:
1b:e7:a1:78:36:41:cf:71:55:5c:72:ca:53:d4:eb:3a:bc:21:
88:8f:47:e9:af:4c:cd:b1:66:15:7a:93:44:15:3a:25:95:64:
f9:cb:2e:cd:70:a2:dd:9e:1c:c3:03:2d:24:34:b0:03:32:00:
71:aa:0f:8c:53:e4:09:7f:6c:78:7f:5d:7c:d9:76:42:35:4d:
99:4c:9b:6c:d0:e5:1a:b2:bc:5f:24:00:4a:f9:17:eb:2f:77:
74:57:f5:53:da:d1:0d:b1:4a:2a:b5:5d:50:8e:a3:98:37:05:
81:0a:9c:b2:20:57:1a:e1:f4:4f:f3:e8:85:bf:b8:e4:bf:5f:
3d:b6:13:05:16:53:00:9d:e2:2c:2b:6b:10:a1:03:9c:ea:7d:
17:ca:27:d3:6f:43:ef:99:ea:4d:74:6b:73:2d:72:ec:02:d5:
f3:c8:27:a2:8e:79:74:ca:1e:72:83:4c:12:6c:cb:aa:36:88:
2d:e0:b7:5b:00:45:4f:96:68:70:7b:d6:02:a0:da:f6:ab:1b:
b2:0e:98:2c:46:b6:0c:88:b8:46:c9:36:1d:e6:21:22:3b:b9:
61:86:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:05:53 2026 by rpki-client