Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
File:                     AS50049.roa (raw, json)
Hash identifier:          HXcUF/vNFaTng4UrUq5IXku2/k56RVvUuOK+G2mUKIs=
Subject key identifier:   9E:11:5C:B7:B2:89:3D:C8:84:D9:84:8E:3F:BD:A9:CC:C0:7F:26:44
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       69651C6298BBB5CC64EA0F12DDD4BC63EAF1801F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa
Signing time:             Tue 09 Jun 2026 13:20:56 +0000
ROA not before:           Tue 09 Jun 2026 13:15:56 +0000
ROA not after:            Tue 08 Jun 2027 13:20:56 +0000
asID:                     50049
IP address blocks:        91.124.41.0/24 maxlen: 24
                          91.124.236.0/24 maxlen: 24
                          95.135.54.0/24 maxlen: 24
                          95.135.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:65:1c:62:98:bb:b5:cc:64:ea:0f:12:dd:d4:bc:63:ea:f1:80:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun  9 13:15:56 2026 GMT
            Not After : Jun  8 13:20:56 2027 GMT
        Subject: CN=9E115CB7B2893DC884D9848E3FBDA9CCC07F2644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:6b:5b:76:62:fe:2c:c5:62:09:c7:fa:d3:
                    ab:ae:20:ec:f9:64:3a:43:32:f6:5a:20:fd:5b:e4:
                    ab:b0:1c:ec:43:85:fc:62:11:67:17:92:dd:78:34:
                    1d:42:b2:68:c4:f0:53:34:16:2a:4f:da:db:b1:45:
                    02:27:6b:be:50:da:3a:74:d2:3e:2e:e6:59:a5:e7:
                    be:b9:c9:9a:45:88:99:f4:d5:6c:e7:4c:66:eb:4a:
                    58:87:e5:17:bd:19:d0:82:ca:3e:c9:83:66:95:66:
                    33:9d:48:51:a5:4b:80:d3:fb:da:6f:f9:b4:db:44:
                    79:7b:55:6c:85:bc:0e:b9:5e:1b:7e:52:bb:6e:90:
                    a1:02:f0:da:30:e5:d7:ae:43:d2:e8:47:9d:40:64:
                    dc:83:57:24:4a:25:53:33:df:77:06:93:23:f6:ff:
                    fb:8b:bf:f8:8b:4a:92:cf:29:73:ba:a0:fd:61:9c:
                    ce:17:26:d6:0c:c0:3d:45:9b:1f:c1:fb:14:db:a0:
                    51:ed:95:cd:14:fb:81:64:ab:bc:96:3d:2b:fe:c8:
                    37:76:2e:40:f2:37:16:00:ab:c9:fb:b2:46:93:8c:
                    2d:83:da:38:89:eb:11:c8:56:9a:d0:9f:db:02:81:
                    5a:a8:e0:83:49:36:ff:8d:fe:0f:09:cb:4d:87:00:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:11:5C:B7:B2:89:3D:C8:84:D9:84:8E:3F:BD:A9:CC:C0:7F:26:44
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.41.0/24
                  91.124.236.0/24
                  95.135.54.0/24
                  95.135.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:f2:e3:32:e8:9f:88:23:c1:7e:12:28:05:d7:5c:fe:cf:
         ac:4c:e7:f5:46:4c:d8:ed:1f:a9:3e:e6:8b:cc:31:70:b2:e7:
         6d:d7:d6:2a:21:c1:ed:a1:2e:f1:d0:7e:ea:3d:e3:ab:b6:f7:
         be:91:b0:97:e8:33:06:de:13:5e:46:ee:e4:c6:91:67:1d:71:
         b5:88:7d:43:a4:1c:e7:49:9f:f6:f6:62:57:67:0c:35:38:c8:
         81:18:28:bd:77:c2:c6:18:96:e6:b9:44:c1:f6:b7:40:e1:19:
         bd:18:8c:80:6c:12:fd:6d:bd:20:1b:cd:8a:fb:7c:a4:49:45:
         2e:1b:a0:03:0d:97:60:13:d3:e8:51:75:79:0c:6c:78:c9:66:
         21:a9:1e:3d:a4:83:77:19:96:e8:09:51:a7:49:3f:c0:51:a8:
         56:8f:23:d3:38:85:61:37:5b:bb:f4:51:31:37:52:bf:80:ce:
         40:c8:1f:42:d0:6d:65:b1:98:c4:e1:f5:bc:12:6d:a1:aa:dc:
         71:68:e3:3e:a9:c2:b2:cb:5d:4c:f7:32:25:1f:8c:fb:8f:ef:
         87:95:25:a2:62:e0:bd:96:2f:47:df:6d:6b:cb:56:36:aa:ea:
         9b:b7:b0:f2:00:0f:68:8a:28:45:7f:b1:5b:c9:6c:25:a0:ad:
         61:68:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:50 2026 by rpki-client