Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: UmP1kx3qHMcvhLLz2t1G8kHU7fdwaDvm5dd611YpKnQ=
Subject key identifier: 78:10:37:81:48:05:A0:D7:B1:DD:1F:75:83:51:E1:98:1D:75:6C:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 386FB57FD21FBE2F225DC08F20B7171B14460C39
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
Signing time: Tue 29 Sep 2026 07:02:33 +0000
ROA not before: Tue 29 Sep 2026 06:57:33 +0000
ROA not after: Tue 28 Sep 2027 07:02:33 +0000
asID: 30058
IP address blocks: 82.21.253.0/24 maxlen: 24
82.21.254.0/24 maxlen: 24
82.22.254.0/24 maxlen: 24
82.23.244.0/24 maxlen: 24
82.24.254.0/24 maxlen: 24
82.25.254.0/24 maxlen: 24
82.26.254.0/24 maxlen: 24
82.26.255.0/24 maxlen: 24
82.27.254.0/24 maxlen: 24
82.27.255.0/24 maxlen: 24
82.29.253.0/24 maxlen: 24
82.29.254.0/24 maxlen: 24
82.47.245.0/24 maxlen: 24
2a13:9500:10a::/48 maxlen: 48
2a13:9500:197::/48 maxlen: 48
2a13:9500:1e6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6f:b5:7f:d2:1f:be:2f:22:5d:c0:8f:20:b7:17:1b:14:46:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 29 06:57:33 2026 GMT
Not After : Sep 28 07:02:33 2027 GMT
Subject: CN=781037814805A0D7B1DD1F758351E1981D756C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:46:b9:a0:60:3e:59:62:b8:9f:ce:cf:56:
17:a9:f7:74:c4:ac:d3:29:67:94:45:52:8f:3a:c6:
5a:7f:df:9a:4e:f4:72:a5:5c:bf:2d:c4:f0:8f:61:
12:31:7d:06:9b:5b:25:2f:73:69:3c:36:af:5b:14:
8a:3b:bc:6e:1c:0e:fb:6b:72:0c:e5:f7:d1:9b:77:
e9:bc:47:dc:f5:35:c0:a8:60:b5:4f:2f:48:97:59:
d1:74:05:d7:d7:c2:86:1f:2a:4c:47:2f:1d:8c:72:
9d:bb:2d:32:56:81:a7:a5:0e:62:19:32:c6:67:cb:
53:32:2d:6c:d6:f5:83:cb:4c:ed:f9:b0:a8:39:f8:
11:a2:df:70:b1:9d:41:d5:d4:6c:27:ac:13:47:bc:
d1:1a:12:8e:ff:b2:5e:28:bb:85:e6:f7:28:98:e4:
c9:a2:6c:5e:50:c5:33:d4:a4:41:fb:68:bc:16:fa:
0f:30:b7:a0:56:6d:3a:de:9a:be:85:0e:e9:37:b8:
1c:1d:2a:68:e7:19:8d:ac:b0:1f:d0:fb:bc:07:24:
9f:30:14:8f:1b:5c:78:3b:c9:d0:64:f1:8a:f4:59:
f1:9d:20:4d:42:47:0c:e5:20:8e:47:cf:16:ae:6f:
f1:a5:7a:b1:11:88:8c:12:ef:43:93:f2:94:f2:92:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:37:81:48:05:A0:D7:B1:DD:1F:75:83:51:E1:98:1D:75:6C:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.253.0-82.21.254.255
82.22.254.0/24
82.23.244.0/24
82.24.254.0/24
82.25.254.0/24
82.26.254.0/23
82.27.254.0/23
82.29.253.0-82.29.254.255
82.47.245.0/24
IPv6:
2a13:9500:10a::/48
2a13:9500:197::/48
2a13:9500:1e6::/48
Signature Algorithm: sha256WithRSAEncryption
79:bc:f9:66:ab:f4:d7:e7:89:b1:9d:c0:4d:e5:44:ef:fb:3c:
4d:7e:5f:f7:0f:8d:2a:48:83:50:a2:ca:85:b1:56:f8:d0:7f:
50:1a:01:14:25:24:56:81:75:65:a5:95:ff:b7:f8:f2:9b:e3:
74:3b:3f:27:4b:9f:3a:f7:ee:17:ea:9f:f9:4f:68:5b:64:24:
1a:e6:36:f1:fb:bc:65:1e:f9:68:32:92:11:7d:59:c3:89:a7:
ce:45:3e:61:ae:8e:de:37:71:c0:ed:02:f7:c1:a5:81:bc:b0:
fe:bf:47:df:d4:58:f5:d8:b1:b9:76:a5:6d:d8:32:a0:cd:f2:
2b:f2:6d:e4:a9:26:13:1b:7d:8f:63:ec:61:c5:a7:3d:67:f9:
c1:b7:56:df:f2:49:62:47:fe:93:76:8f:2e:0a:de:bf:c5:00:
9d:ec:0d:d1:a7:21:51:7d:e1:bb:9c:50:d6:ce:af:71:41:f0:
e8:b3:c0:4c:e3:2b:e7:05:4c:af:c2:65:4a:09:45:5f:c7:35:
4f:74:f8:be:98:97:64:f3:2f:0a:54:e3:ed:34:36:f2:02:a9:
24:1c:6b:43:ec:dd:44:e2:a3:49:06:f8:70:ea:c5:e0:33:c5:
b6:34:da:44:ea:5c:bf:67:85:06:5f:21:6e:14:a6:9a:25:4b:
84:75:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:49:47 2026 by rpki-client