Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: GxLYDi16HDWOKk0UbQgC7BtYDZpiwBt/eJwscGUnmeo=
Subject key identifier: D8:84:64:B3:F8:77:C7:87:4E:E8:5B:AE:A0:A2:32:85:63:DD:0A:50
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 66CFBB4E64AE297ACB34768D75320DADE5AF0390
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
Signing time: Sat 19 Sep 2026 22:14:14 +0000
ROA not before: Sat 19 Sep 2026 22:09:14 +0000
ROA not after: Sat 18 Sep 2027 22:14:14 +0000
asID: 5650
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
94.194.112.0/22 maxlen: 22
188.220.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cf:bb:4e:64:ae:29:7a:cb:34:76:8d:75:32:0d:ad:e5:af:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 19 22:09:14 2026 GMT
Not After : Sep 18 22:14:14 2027 GMT
Subject: CN=D88464B3F877C7874EE85BAEA0A2328563DD0A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:cc:04:8d:f6:1f:77:ec:10:0f:b1:3c:79:
f8:0a:a7:33:fb:e2:82:9a:6d:78:a1:17:8d:be:a7:
2d:e1:1d:be:2a:ec:37:7c:3a:a4:c3:be:ee:fa:4d:
28:b9:70:57:0a:cc:75:a2:b4:55:70:c8:e8:ee:95:
32:c6:10:4f:11:54:cd:cc:db:34:df:67:12:aa:85:
58:8d:61:88:cf:8e:22:ac:ef:1e:ba:96:5b:29:ab:
22:72:aa:ad:83:69:5a:71:d0:9a:c0:31:49:32:33:
81:bf:da:b1:9c:6b:db:fc:4b:07:41:93:8a:78:e3:
ba:90:f9:0e:1c:d1:bd:bc:ea:ca:ad:13:c7:4e:e0:
5b:4b:7f:c7:8a:82:c6:d6:d0:b7:5e:ca:cf:b4:bb:
61:b7:fd:82:d2:d1:1b:50:b2:b7:df:c3:f0:a9:7c:
43:11:3b:e3:d7:cb:fe:b9:d1:41:a6:83:57:4f:59:
c1:7d:1c:60:31:9f:19:fd:cb:4b:3e:24:9c:dd:00:
4d:4e:70:8d:0f:84:02:57:d2:b9:9d:ac:bb:9e:6d:
12:31:1d:9a:22:ae:f0:e6:96:14:c1:cf:18:0f:64:
41:b7:ca:41:ff:0a:92:14:e3:b0:27:f7:71:b4:3b:
4f:0e:c6:39:2c:ef:11:2b:b9:bc:fc:ec:87:0b:dd:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:64:B3:F8:77:C7:87:4E:E8:5B:AE:A0:A2:32:85:63:DD:0A:50
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
94.194.112.0/22
188.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
14:70:35:9c:96:fc:4a:df:bd:98:b9:d6:4d:e0:f4:66:c3:61:
7f:7e:36:bc:1d:4a:c3:ca:ec:88:eb:cd:4c:31:74:e4:dc:f7:
00:6b:82:41:55:bf:f6:89:f2:44:d9:87:a7:42:1a:70:95:e6:
aa:ff:b1:b4:62:15:63:ef:d3:63:ad:72:9d:09:1e:ca:c1:4f:
cb:d7:9d:e9:f3:8d:c9:62:e0:f1:83:9d:6b:20:52:10:f6:c4:
0f:9a:f6:8e:e4:bf:75:d3:28:5b:c5:43:dc:e4:69:b5:4b:b0:
87:5e:28:ee:f8:1d:39:01:32:48:69:ca:48:e1:8f:65:d1:37:
5c:91:78:c1:10:28:3c:4c:c2:54:33:1c:fe:cc:ab:e3:8c:96:
7f:95:3a:77:33:ad:1a:bf:4d:5a:1b:de:6c:b9:a4:9a:37:ad:
13:07:de:2c:75:2b:17:8e:c2:65:b6:da:5a:8e:b8:b1:7d:48:
4a:d4:f1:b7:82:75:bc:e7:20:ce:70:46:e8:34:60:c3:29:83:
20:78:61:09:b9:52:e9:df:ab:95:1c:14:a9:55:c6:a1:80:60:
1c:13:16:7c:3a:21:df:3b:02:69:40:fa:c0:28:6e:95:36:dd:
ab:e2:5b:30:bc:6c:a2:ff:1c:31:be:46:91:bf:c0:77:85:d9:
d5:23:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:13 2026 by rpki-client