Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: mjRMJ2hfwuPGma+rJ2XVeTfO+Rf02UI9AkEFfspUl4U=
Subject key identifier: 27:E0:F2:CF:75:5B:25:FC:A2:57:7C:3F:4B:22:CC:35:78:3E:DF:68
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 284F3DF7C215D1BC18484A68CF9D85D7984368C8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
Signing time: Mon 28 Sep 2026 00:06:20 +0000
ROA not before: Mon 28 Sep 2026 00:01:20 +0000
ROA not after: Mon 27 Sep 2027 00:06:20 +0000
asID: 30058
IP address blocks: 51.146.28.0/22 maxlen: 24
51.146.180.0/22 maxlen: 24
51.241.12.0/22 maxlen: 24
51.241.24.0/22 maxlen: 24
51.241.32.0/22 maxlen: 24
51.241.152.0/22 maxlen: 24
51.241.172.0/22 maxlen: 24
51.241.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:3d:f7:c2:15:d1:bc:18:48:4a:68:cf:9d:85:d7:98:43:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 28 00:01:20 2026 GMT
Not After : Sep 27 00:06:20 2027 GMT
Subject: CN=27E0F2CF755B25FCA2577C3F4B22CC35783EDF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:0d:8f:22:2c:bd:47:ef:3d:ea:0e:89:7f:
cc:ac:61:28:bd:26:bc:64:66:69:22:20:48:9b:fc:
84:cb:7a:2e:29:ea:9e:ef:d2:69:7d:1b:64:53:2d:
1c:43:9b:48:11:1e:5b:b9:f3:b6:f6:45:ca:ec:55:
c9:2b:a5:16:80:a2:21:21:e7:ae:16:87:4b:28:c1:
eb:b9:8b:b1:47:9d:6f:88:dc:81:f1:cf:ae:bc:d4:
13:a2:37:6c:6f:8c:3e:1b:fe:5c:67:06:29:25:fa:
6e:3a:20:0a:59:33:d3:01:d6:d0:50:1e:1f:aa:a2:
1a:95:87:25:0c:10:6f:6f:ad:66:78:77:d1:06:f9:
b2:e7:99:4d:97:b5:1b:f3:43:58:85:69:e5:02:47:
43:4e:09:e5:c1:99:4f:80:95:c6:2b:5a:a7:f5:74:
cd:9c:91:55:cd:bb:f1:b3:ce:e2:c6:2f:31:4f:c0:
9f:7d:e2:59:2b:55:73:c5:d1:d3:89:57:c9:f8:b8:
df:28:10:b8:22:d5:d8:52:31:22:c6:ea:6c:2b:fa:
8d:08:04:4c:ed:1b:0c:49:41:72:0f:69:ba:bc:06:
51:b8:98:39:92:cb:92:b2:45:0b:1d:67:d9:9f:db:
62:4a:b5:5e:83:2e:b3:cd:66:d2:c5:81:52:a3:c1:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:F2:CF:75:5B:25:FC:A2:57:7C:3F:4B:22:CC:35:78:3E:DF:68
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.28.0/22
51.146.180.0/22
51.241.12.0/22
51.241.24.0/22
51.241.32.0/22
51.241.152.0/22
51.241.172.0/22
51.241.224.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c0:c6:fa:44:57:3f:19:c6:0a:84:6a:de:ef:6e:8e:1b:f1:
e0:df:de:a8:9d:e2:2d:c0:4c:ca:f2:6f:95:2a:40:9a:8c:0d:
fd:8f:d3:8a:d0:62:e8:a1:1e:9e:96:39:f1:16:d0:f3:f7:0a:
bc:55:91:44:ab:3f:29:ac:fb:e4:c3:27:c0:9d:3c:3d:34:04:
26:d5:d3:61:37:44:c1:8b:6c:29:00:53:97:52:43:ef:0a:f9:
3a:02:6f:86:27:87:56:17:fa:7c:47:b8:79:e3:8e:8c:1e:f8:
b7:47:a9:d8:3d:54:c0:3b:7e:36:ba:7c:ea:24:1f:af:62:51:
e0:c9:d7:b8:3e:c0:d4:a8:f0:0c:5d:b6:47:67:09:07:98:10:
cd:75:0c:0f:b2:1f:4f:f5:28:58:6d:76:67:54:6a:c4:ba:e9:
0b:9c:39:11:63:a5:92:0d:c8:91:79:d0:ed:f7:34:21:01:f9:
e0:94:11:b8:fc:3a:08:f0:f5:d7:d8:aa:85:4e:d5:06:2b:84:
9e:47:5a:f3:56:10:d3:d0:a1:99:1f:a6:0f:39:24:c4:fb:be:
5f:c8:84:bf:cf:67:f8:45:ea:fb:bd:3f:9a:4a:fa:f5:13:96:
da:cc:f3:79:5d:43:8c:58:6e:a3:31:75:b4:6d:86:25:46:62:
eb:34:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:24 2026 by rpki-client