Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: FDA8A+IrgjoSo32wLT3pohQZnmUNTgHdlA/+JfKKdXM=
Subject key identifier: 93:73:0A:A5:C2:E8:B7:46:BA:43:38:80:26:32:40:57:8F:69:EC:2C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 383B1C490F676AA61F6D65DA3914DDD30473C1FC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
Signing time: Thu 04 Jun 2026 07:38:41 +0000
ROA not before: Thu 04 Jun 2026 07:33:41 +0000
ROA not after: Thu 03 Jun 2027 07:38:41 +0000
asID: 5650
IP address blocks: 51.146.32.0/22 maxlen: 22
51.146.48.0/22 maxlen: 22
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
188.220.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3b:1c:49:0f:67:6a:a6:1f:6d:65:da:39:14:dd:d3:04:73:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 07:33:41 2026 GMT
Not After : Jun 3 07:38:41 2027 GMT
Subject: CN=93730AA5C2E8B746BA433880263240578F69EC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:79:c4:de:13:3b:4f:44:2e:41:30:49:2f:
a2:55:35:03:c9:95:51:4a:b2:0a:3c:8a:73:d5:44:
60:ff:2e:fd:2a:90:ab:73:68:83:31:3f:e4:8d:1c:
69:f5:9d:cd:60:62:c1:1d:bc:42:f3:c5:97:37:26:
ba:6e:85:bf:11:24:14:1e:ff:94:18:10:e4:68:6f:
06:cb:7d:ca:c0:f8:45:d7:63:8e:94:7a:2f:2a:57:
77:48:30:58:cf:40:a1:53:92:ce:6c:49:0a:74:19:
90:b3:51:2b:9e:ff:c2:08:91:08:d5:e3:5c:9a:6b:
78:f4:5f:d9:b1:85:91:38:50:f8:84:a7:7e:19:85:
b0:e7:83:61:4b:d8:83:c0:c8:19:be:82:89:96:46:
cb:ca:12:42:3d:4e:a7:be:34:a5:37:1c:fd:7e:07:
43:3b:df:a5:eb:e8:ba:e0:c3:f0:36:2c:1a:0c:8c:
f4:40:0b:39:03:8c:60:17:e0:72:03:55:6b:8c:4d:
f6:ee:2d:28:ce:00:3e:15:14:42:3f:aa:e9:de:7a:
67:46:68:60:dc:b7:c2:c6:eb:e6:96:16:bd:18:79:
60:bc:96:72:f2:fc:f6:69:1a:da:74:f8:42:25:c2:
52:8b:ad:3e:ab:7f:75:bf:ff:c9:64:37:e9:6f:af:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:0A:A5:C2:E8:B7:46:BA:43:38:80:26:32:40:57:8F:69:EC:2C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.32.0/22
51.146.48.0/22
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
188.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
44:93:94:35:24:d2:34:2a:91:ae:bf:a4:c4:99:95:e4:c5:a5:
3d:ea:58:af:f6:88:34:f3:5f:61:10:d4:c2:13:d3:0c:05:f3:
64:cd:5b:e1:99:f3:28:d2:0c:97:fb:69:aa:97:22:b3:22:7d:
0e:aa:72:08:45:8f:2d:83:0d:14:39:21:37:2f:09:36:7f:07:
53:3b:c6:f6:5f:11:f3:93:cb:2e:5f:58:7b:cb:fa:55:de:18:
fb:df:7f:29:06:a2:49:36:e4:5d:ee:78:f3:d3:ef:dc:78:86:
9e:c4:f2:80:46:4d:ff:a2:a9:37:92:2f:56:d2:b1:1a:83:90:
3f:0c:99:04:37:3f:b5:7c:9c:98:7e:e1:22:2f:6c:b7:f1:9c:
fc:2d:01:10:9a:8d:15:29:04:da:11:11:8e:8c:c3:23:80:33:
58:f9:0d:ab:27:28:c7:52:03:1a:0d:eb:b0:3b:83:30:62:4c:
b7:12:2c:95:fc:59:4c:ff:60:e2:9f:b9:47:6f:b0:64:01:54:
c2:81:36:0a:f5:9a:cc:e6:1a:39:f2:8f:e7:f9:a4:16:33:b6:
9f:c6:6e:17:f3:44:06:64:50:aa:db:18:b4:8f:0e:8f:94:4e:
d4:55:24:ec:a6:58:74:c2:8d:7f:df:4c:a4:f5:27:6c:66:ae:
30:58:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:46:13 2026 by rpki-client