Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
File: AS50867.roa (raw, json)
Hash identifier: CR4qu1xM4UcPeA9MMeYgGp4KaLn9Tv5pBVnx+YUCHlo=
Subject key identifier: 63:43:FB:71:D5:EB:EA:2B:6D:80:7A:96:E2:FF:E0:4C:DA:91:64:D8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F07403CEEABB528ECBC09CC2A0E65A4F19A5396
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
Signing time: Sun 01 Mar 2026 00:13:13 +0000
ROA not before: Sun 01 Mar 2026 00:08:13 +0000
ROA not after: Sun 28 Feb 2027 00:13:13 +0000
asID: 50867
IP address blocks: 178.92.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:07:40:3c:ee:ab:b5:28:ec:bc:09:cc:2a:0e:65:a4:f1:9a:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 1 00:08:13 2026 GMT
Not After : Feb 28 00:13:13 2027 GMT
Subject: CN=6343FB71D5EBEA2B6D807A96E2FFE04CDA9164D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:12:3b:65:e0:1e:45:89:35:ec:ae:7f:c1:
a0:66:54:45:82:44:19:e5:d6:88:6b:8f:0e:fa:6d:
8c:56:c3:8f:4a:92:35:ed:c2:56:af:dd:e3:dc:fc:
c1:57:f4:89:45:9c:23:f2:a3:5b:7e:3f:70:a6:dd:
04:fe:03:c9:50:fd:71:d6:17:6c:f8:37:24:30:be:
8d:e6:ca:66:35:3f:12:e4:79:57:22:15:6e:90:31:
0d:f4:06:43:79:f3:f0:26:00:98:d7:b0:2a:75:42:
89:f4:68:42:b3:14:cb:b4:3b:4b:41:fc:1d:57:f1:
f5:c5:a9:c9:1e:f3:d7:ae:15:70:bf:68:85:71:09:
ab:54:49:97:a1:03:97:ee:ea:0f:c8:d9:25:2d:4b:
47:a8:b2:47:02:50:a6:95:be:00:8c:f7:96:23:ba:
cf:35:6c:fb:25:ef:25:b4:0d:e3:c3:63:80:10:fc:
b3:4b:82:e8:07:03:e7:c0:a3:fb:ce:ca:a4:e9:1d:
2a:ae:d3:eb:e8:2d:c6:7c:dd:5a:71:fa:1f:e1:d7:
a5:c7:46:9e:a7:1b:5e:55:ea:6b:ad:1a:d0:57:0b:
06:13:2c:d1:bb:1f:3c:18:a6:e6:06:12:6d:c9:d4:
39:f2:5a:64:c0:8a:52:86:c1:b3:7b:50:93:18:62:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:FB:71:D5:EB:EA:2B:6D:80:7A:96:E2:FF:E0:4C:DA:91:64:D8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.32.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1d:47:93:44:38:12:d4:d6:09:c3:f7:a3:22:b0:94:e4:53:
19:b6:56:69:40:b3:ff:06:7a:20:ae:83:49:7f:23:47:7d:00:
39:9e:4b:95:1e:29:a6:ae:bf:42:f1:fc:f9:0c:ca:15:0a:ab:
17:56:c9:a6:b5:dc:9a:52:0b:e5:81:fc:76:40:26:96:88:be:
c6:49:28:f8:39:f5:49:df:d8:e5:4f:37:d2:54:99:8f:aa:45:
96:4e:e5:2a:82:1b:5a:9d:2b:40:9b:dd:8c:97:fc:a0:a5:c2:
15:d0:a3:55:a9:1b:8e:76:65:9d:f2:a4:08:16:dd:1d:88:8d:
12:53:c9:a2:05:f8:ea:40:22:99:46:f8:00:b9:dc:a4:55:b9:
15:c2:f2:ee:3e:25:90:86:18:e0:f2:12:74:62:88:f7:a1:21:
c4:c8:45:f2:f0:3e:84:58:c3:40:41:f3:9e:97:bb:59:61:b8:
e4:34:ae:2b:b1:85:26:02:2c:a7:28:1f:95:f6:c6:4e:bf:d0:
15:5c:28:00:2a:42:b1:c3:7d:b7:9a:34:35:d6:52:c8:cc:24:
0e:bc:37:34:17:04:4f:eb:4a:5c:f5:c7:9f:86:48:6e:87:0f:
ad:d5:c3:ba:22:91:01:70:cd:20:b5:b0:df:5a:3d:db:64:5e:
2c:61:c3:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULwdAPO6rtSjsvAnMKg5lpPGaU5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAzMDEwMDA4MTNaFw0yNzAyMjgwMDEzMTNaMDMxMTAvBgNV
BAMTKDYzNDNGQjcxRDVFQkVBMkI2RDgwN0E5NkUyRkZFMDRDREE5MTY0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfBI7ZeAeRYk17K5/waBmVEWC
RBnl1ohrjw76bYxWw49KkjXtwlav3ePc/MFX9IlFnCPyo1t+P3Cm3QT+A8lQ/XHW
F2z4NyQwvo3mymY1PxLkeVciFW6QMQ30BkN58/AmAJjXsCp1Qon0aEKzFMu0O0tB
/B1X8fXFqcke89euFXC/aIVxCatUSZehA5fu6g/I2SUtS0eoskcCUKaVvgCM95Yj
us81bPsl7yW0DePDY4AQ/LNLgugHA+fAo/vOyqTpHSqu0+voLcZ83Vpx+h/h16XH
Rp6nG15V6mutGtBXCwYTLNG7HzwYpuYGEm3J1DnyWmTAilKGwbN7UJMYYu+BAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUY0P7cdXr6ittgHqW4v/gTNqRZNgwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTA4Njcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACyXCAw
DQYJKoZIhvcNAQELBQADggEBAJgdR5NEOBLU1gnD96MisJTkUxm2VmlAs/8GeiCu
g0l/I0d9ADmeS5UeKaauv0Lx/PkMyhUKqxdWyaa13JpSC+WB/HZAJpaIvsZJKPg5
9Unf2OVPN9JUmY+qRZZO5SqCG1qdK0Cb3YyX/KClwhXQo1WpG452ZZ3ypAgW3R2I
jRJTyaIF+OpAIplG+AC53KRVuRXC8u4+JZCGGODyEnRiiPehIcTIRfLwPoRYw0BB
856Xu1lhuOQ0riuxhSYCLKcoH5X2xk6/0BVcKAAqQrHDfbeaNDXWUsjMJA68NzQX
BE/rSlz1x5+GSG6HD63Vw7oikQFwzSC1sN9aPdtkXixhw60=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:02 2026 by rpki-client