Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          efTZ8/HqMs6jrxQgVwUjhETYE4fgma4hI6NmfLdrybM=
Subject key identifier:   FF:44:00:5B:4C:40:D1:F4:64:90:D3:B3:A3:13:51:40:93:AF:8C:82
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       27D0D3C859A5A38AB7C57A8955AFA6A972CB58FA
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa
Signing time:             Fri 05 Jun 2026 08:45:51 +0000
ROA not before:           Fri 05 Jun 2026 08:40:51 +0000
ROA not after:            Fri 04 Jun 2027 08:45:51 +0000
asID:                     50755
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d0:d3:c8:59:a5:a3:8a:b7:c5:7a:89:55:af:a6:a9:72:cb:58:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:51 2026 GMT
            Not After : Jun  4 08:45:51 2027 GMT
        Subject: CN=FF44005B4C40D1F46490D3B3A313514093AF8C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:64:a4:9d:b8:9c:b0:86:65:4b:a3:9e:cf:
                    62:1b:0a:33:46:01:69:e8:e3:b2:18:f9:89:75:47:
                    89:03:b1:f9:40:80:c7:15:42:45:0a:e7:f5:ef:a2:
                    54:80:6d:9d:77:e7:4f:5f:a6:3f:b9:57:04:6c:80:
                    8e:d8:d4:61:fe:88:8a:78:d8:c5:fc:db:4f:16:e3:
                    78:55:4f:24:2e:33:dc:27:95:0a:fc:dc:0f:b0:68:
                    89:7a:6d:e5:fe:e8:79:73:a5:4f:be:a2:d0:66:71:
                    80:62:c8:17:81:9c:71:9e:15:b5:21:a3:8f:a9:05:
                    9a:26:1d:d8:a8:a9:4e:17:4a:b4:17:f5:75:42:0b:
                    db:97:f7:04:81:ff:69:49:93:a8:f4:10:16:c3:b8:
                    a4:4e:f1:5b:99:1f:7c:3f:3e:86:e5:bc:4b:25:59:
                    c2:66:bc:03:fb:52:fd:c4:78:03:c5:fb:12:11:1b:
                    fb:85:31:23:c9:02:61:f9:05:cc:fb:36:c5:16:5d:
                    30:9b:58:c7:22:5e:9d:a6:0f:cf:0d:b7:ef:9b:5b:
                    b9:bd:dc:63:cb:ae:1a:aa:f7:0c:93:5e:98:0a:8e:
                    74:b3:e9:8a:d5:55:b9:ab:d8:63:31:82:6e:b3:8b:
                    21:64:00:07:72:c6:20:39:bb:35:f7:19:e1:07:b6:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:44:00:5B:4C:40:D1:F4:64:90:D3:B3:A3:13:51:40:93:AF:8C:82
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:52:71:9e:1b:b6:2e:3b:29:b3:ce:27:be:9c:fe:7d:e2:92:
         85:3f:37:3a:40:c2:30:0a:ce:bc:be:4a:29:67:11:09:cb:36:
         0c:19:e4:82:fb:30:44:76:cb:3f:16:da:71:9a:e2:a2:9b:cb:
         b8:a8:f9:f7:d9:cc:d0:36:92:9c:74:79:74:91:6c:66:e5:84:
         51:d1:14:65:3c:ac:e4:6d:cb:c6:f3:ff:cc:8e:40:91:aa:d8:
         8c:7a:6d:1f:d3:1b:d2:b7:72:30:a1:6b:f9:fa:4b:d8:37:23:
         5b:31:60:59:5e:9e:35:d9:e9:51:a0:6e:60:fc:4d:bf:3c:1d:
         ce:cc:0d:5a:ab:fc:39:ee:51:57:e8:ea:73:21:c5:50:f1:8b:
         48:56:33:18:c1:1c:26:fb:44:42:e9:40:41:cb:fb:5e:39:c9:
         90:d4:be:d7:9f:18:12:f5:e1:c0:ed:a8:e5:74:4f:cd:3b:63:
         4e:ae:84:96:48:5b:d4:84:ba:c0:0f:6b:7f:fa:0b:37:41:ee:
         4e:05:ca:79:09:eb:da:47:cb:d7:07:7f:17:86:90:a9:a4:0f:
         0d:f2:aa:8b:72:83:cc:a1:08:4d:9c:f7:63:29:60:dc:6b:36:
         3c:ff:b0:99:58:53:80:fe:47:75:17:b6:6f:c8:2f:88:3c:fb:
         2a:6a:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:14 2026 by rpki-client