Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS50473.roa
File: AS50473.roa (raw, json)
Hash identifier: +81VamnKy6OwuCId4BgNcOY9hDQ3csMBlG1VBDxyUgY=
Subject key identifier: F9:03:B7:87:84:D2:47:2C:FF:64:A7:6E:E0:3E:46:6F:FA:EA:7F:D7
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 622DF70999AF58509A4DC4F95E0F048D7A379192
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS50473.roa
Signing time: Tue 10 Nov 2026 04:58:33 +0000
ROA not before: Tue 10 Nov 2026 04:53:33 +0000
ROA not after: Tue 09 Nov 2027 04:58:33 +0000
asID: 50473
IP address blocks: 177.29.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2d:f7:09:99:af:58:50:9a:4d:c4:f9:5e:0f:04:8d:7a:37:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 10 04:53:33 2026 GMT
Not After : Nov 9 04:58:33 2027 GMT
Subject: CN=F903B78784D2472CFF64A76EE03E466FFAEA7FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:fd:bd:9f:64:1e:d5:89:68:a4:df:ea:6e:
6a:5c:65:d4:26:eb:87:fe:83:a4:01:e1:f5:18:1a:
41:84:ff:fd:db:d0:ae:72:26:ae:8a:4d:c5:ea:16:
ed:82:00:4c:05:e7:fa:6c:2c:0c:7c:79:cb:75:e2:
ee:98:cf:6a:a8:88:01:6c:03:d1:f2:9d:ec:67:e7:
78:11:57:02:a6:2f:99:d2:19:81:d1:c2:2e:7e:3c:
8e:a2:cf:e4:59:3e:99:54:7b:d4:77:59:5a:48:39:
be:7b:0c:3f:06:eb:c1:12:67:54:6d:bc:7c:2c:f4:
61:25:07:ac:78:82:38:4e:42:b6:aa:7e:b6:70:e0:
04:3f:62:4d:d2:17:93:2f:f7:4f:7a:32:19:65:b3:
be:46:e3:ac:1f:c0:3a:c4:fd:8d:9d:b1:17:c3:99:
18:01:e6:25:b3:35:d1:27:71:d6:49:55:6c:ef:e3:
38:38:29:5e:a8:8c:df:47:bd:cc:e4:c1:3e:18:6b:
38:6e:eb:01:b5:fa:6c:1a:70:e2:84:52:f9:fd:95:
e8:34:39:27:11:42:87:9c:af:2d:ba:a0:99:6b:65:
7f:4b:6b:25:e6:41:ca:44:93:66:5b:41:ab:23:50:
77:bd:15:86:32:28:cc:cb:9e:87:6e:7d:e9:ae:74:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:B7:87:84:D2:47:2C:FF:64:A7:6E:E0:3E:46:6F:FA:EA:7F:D7
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS50473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:c2:ca:c2:ab:99:49:08:9e:86:cd:fd:39:33:5b:2c:16:
dd:b5:3a:e1:72:79:16:f1:49:3d:12:58:3f:d0:0c:88:89:7a:
6c:d6:d6:b0:43:6f:e5:b7:ac:74:7f:65:17:c0:9e:f2:57:68:
c1:3d:04:40:03:8d:86:2a:d4:83:b6:bb:66:54:c2:dd:24:b1:
3f:ee:fa:36:91:fd:04:9a:f9:51:8a:ed:bc:34:33:9e:01:0f:
e0:24:0e:54:fb:43:dd:cf:f8:94:5b:c5:1c:ef:61:05:1d:65:
76:13:93:3b:d9:05:7d:0d:a2:ad:4f:a7:26:2c:ef:c0:f0:b7:
bd:0a:8b:f8:a9:48:a5:53:0d:f5:f3:38:f2:fe:24:c1:88:0b:
0a:a7:5e:4c:ea:5d:5c:a1:86:ad:f5:57:89:fa:27:30:67:86:
11:c2:5d:2e:2b:08:7b:b6:79:04:bc:a7:b9:f2:38:92:c6:c3:
17:14:92:b7:f8:aa:84:16:05:64:67:c9:19:1e:79:ad:e6:db:
1a:eb:ab:b4:09:e1:83:0e:94:5f:42:7e:01:1a:8b:00:6b:52:
0d:8f:22:b6:6b:9e:2a:f0:a8:f4:54:d3:13:4b:59:95:97:cf:
ac:13:b8:4c:1f:c5:7d:20:1f:30:ce:0f:8b:46:ab:c4:63:a3:
79:f6:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:58 2026 by rpki-client