Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
File:                     AS50049.roa (raw, json)
Hash identifier:          foN+5rWNNGSRf2equbnPva83dlFb8YUThS35G22j9m8=
Subject key identifier:   40:95:A3:3F:6A:F2:33:BD:94:77:88:44:FE:08:81:7F:06:3E:EB:8A
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       2949DDE3727651FDD1D1B9B239EDBB220C026227
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
Signing time:             Sat 19 Sep 2026 21:15:27 +0000
ROA not before:           Sat 19 Sep 2026 21:10:27 +0000
ROA not after:            Sat 18 Sep 2027 21:15:27 +0000
asID:                     50049
IP address blocks:        51.146.6.0/24 maxlen: 24
                          51.241.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:dd:e3:72:76:51:fd:d1:d1:b9:b2:39:ed:bb:22:0c:02:62:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Sep 19 21:10:27 2026 GMT
            Not After : Sep 18 21:15:27 2027 GMT
        Subject: CN=4095A33F6AF233BD94778844FE08817F063EEB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:58:9e:fb:be:73:52:42:57:13:7e:af:29:
                    03:a9:16:15:90:79:df:63:6d:61:21:4a:64:57:76:
                    00:e9:31:68:cd:cc:12:30:fd:7b:e0:cc:9f:d9:43:
                    11:cc:b8:f6:00:ec:86:ad:5b:58:a4:5b:d9:aa:54:
                    56:e1:ad:d7:e5:2a:4f:ac:75:a8:2e:b7:a6:36:5a:
                    30:21:d0:49:3d:c8:d8:6f:42:8e:38:a6:d3:71:c9:
                    37:c5:28:5e:7a:ee:ef:f2:0a:6a:5f:48:28:9a:db:
                    27:14:dd:71:2b:37:c6:01:94:c4:b7:a4:ef:39:23:
                    1f:73:4b:e0:1b:6d:23:92:56:b4:60:4c:12:77:b3:
                    a7:1e:da:41:f8:aa:fe:d5:5c:2f:97:d2:4b:57:8f:
                    1f:65:98:ea:8a:cc:47:07:79:f4:9c:74:70:9a:f2:
                    0b:88:a6:c3:b0:ee:20:ef:04:84:aa:b8:21:54:e7:
                    5d:c5:b0:94:bc:20:8c:4c:33:ee:11:f0:39:a4:a1:
                    68:ba:2b:38:39:4e:8f:b0:c4:b5:32:a0:ed:2a:e0:
                    fc:65:1f:05:08:bc:1d:50:79:2e:c2:ec:21:46:eb:
                    82:a1:43:33:5d:d4:a5:f4:e3:fc:ad:1d:70:6a:cd:
                    15:40:32:ba:65:66:e9:11:51:37:cb:3a:a0:1e:f9:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:A3:3F:6A:F2:33:BD:94:77:88:44:FE:08:81:7F:06:3E:EB:8A
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.6.0/24
                  51.241.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:b3:77:5b:e0:25:87:09:0a:57:c5:8d:b4:e8:3d:cc:73:
         2c:b9:fd:c0:51:20:4a:c0:a4:40:d4:fe:d1:7b:ab:39:fc:fa:
         b5:22:6a:1f:32:29:a5:32:66:d6:7a:f5:1f:fa:cd:5d:93:e9:
         f6:39:9f:58:aa:9d:e5:05:d3:f0:3c:b0:ff:0a:3e:b4:5e:33:
         09:a3:85:02:08:42:8d:8a:1e:c8:53:e7:f6:a6:50:54:38:c2:
         7d:2f:02:88:58:86:66:c4:70:2b:2d:4f:e4:3e:e2:08:0a:65:
         34:a5:fb:ab:fe:fc:85:8c:a7:e3:14:66:43:82:c7:2b:63:4a:
         ce:44:36:91:40:1a:99:62:46:cb:c7:85:4a:19:e6:10:1c:94:
         29:8a:bf:7d:fe:62:d1:5b:5a:aa:62:c0:1b:fb:55:4c:2d:65:
         10:69:00:1e:88:37:f4:69:af:ad:95:01:0a:ba:33:d0:02:7e:
         6d:98:16:ec:fb:2a:5a:bb:81:84:24:5b:4f:f1:9d:6f:ee:31:
         b1:5a:c8:07:e4:5a:38:a6:be:3f:1d:58:43:7a:e7:9f:2b:76:
         b6:26:e8:9e:72:68:ad:4c:d1:82:7a:9f:64:98:73:2d:7e:65:
         69:56:16:f0:93:08:30:04:27:df:bc:cb:39:83:4e:e3:8b:ac:
         89:0c:e5:72
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKUnd43J2Uf3R0bmyOe27IgwCYicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTkyMTEwMjdaFw0yNzA5MTgyMTE1MjdaMDMxMTAvBgNV
BAMTKDQwOTVBMzNGNkFGMjMzQkQ5NDc3ODg0NEZFMDg4MTdGMDYzRUVCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKmVie+75zUkJXE36vKQOpFhWQ
ed9jbWEhSmRXdgDpMWjNzBIw/XvgzJ/ZQxHMuPYA7IatW1ikW9mqVFbhrdflKk+s
dagut6Y2WjAh0Ek9yNhvQo44ptNxyTfFKF567u/yCmpfSCia2ycU3XErN8YBlMS3
pO85Ix9zS+AbbSOSVrRgTBJ3s6ce2kH4qv7VXC+X0ktXjx9lmOqKzEcHefScdHCa
8guIpsOw7iDvBISquCFU513FsJS8IIxMM+4R8DmkoWi6Kzg5To+wxLUyoO0q4Pxl
HwUIvB1QeS7C7CFG64KhQzNd1KX04/ytHXBqzRVAMrplZukRUTfLOqAe+SHpAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUQJWjP2ryM72Ud4hE/giBfwY+64owHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNTAwNDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAzkgYD
BAAz8YcwDQYJKoZIhvcNAQELBQADggEBAGjJs3db4CWHCQpXxY206D3Mcyy5/cBR
IErApEDU/tF7qzn8+rUiah8yKaUyZtZ69R/6zV2T6fY5n1iqneUF0/A8sP8KPrRe
MwmjhQIIQo2KHshT5/amUFQ4wn0vAohYhmbEcCstT+Q+4ggKZTSl+6v+/IWMp+MU
ZkOCxytjSs5ENpFAGpliRsvHhUoZ5hAclCmKv33+YtFbWqpiwBv7VUwtZRBpAB6I
N/Rpr62VAQq6M9ACfm2YFuz7Klq7gYQkW0/xnW/uMbFayAfkWjimvj8dWEN6558r
drYm6J5yaK1M0YJ6n2SYcy1+ZWlWFvCTCDAEJ9+8yzmDTuOLrIkM5XI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:19 2026 by rpki-client