Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: zq+jz5tSan4SbPgUtwVkxrjIM7GEf+ADe+E44BM5TAU=
Subject key identifier: C1:D8:2E:53:94:F8:C5:6E:84:9D:F6:B3:B1:F7:48:05:3C:75:9B:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 709F94D288F305D00759DEC79217E77B5B348EEA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
Signing time: Fri 04 Sep 2026 11:08:28 +0000
ROA not before: Fri 04 Sep 2026 11:03:28 +0000
ROA not after: Fri 03 Sep 2027 11:08:28 +0000
asID: 30058
IP address blocks: 96.62.243.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
155.117.158.0/24 maxlen: 24
168.222.13.0/24 maxlen: 24
168.222.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9f:94:d2:88:f3:05:d0:07:59:de:c7:92:17:e7:7b:5b:34:8e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 4 11:03:28 2026 GMT
Not After : Sep 3 11:08:28 2027 GMT
Subject: CN=C1D82E5394F8C56E849DF6B3B1F748053C759B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:50:5b:6e:52:92:ce:a5:c8:5e:02:65:f3:
c9:fb:20:2f:3b:81:cc:8e:d9:ce:89:b1:3a:53:e2:
1c:60:52:d8:7e:5d:78:b6:ee:ee:d0:e0:09:5d:a5:
f6:fa:bc:19:01:45:23:69:d1:24:fd:4d:7a:71:b9:
03:9a:e6:6e:e7:5a:22:05:c0:d1:02:19:ed:2a:ec:
cf:c7:62:5e:89:91:f2:c7:6e:18:7f:8e:03:d0:c0:
0e:28:fd:ef:a4:66:fa:c1:ac:5b:35:ad:ce:ca:1a:
51:e6:8e:a5:2c:36:0f:fe:8e:a0:d4:02:3e:b8:2e:
23:48:a3:c7:0c:87:23:88:de:bf:f1:0d:f6:04:e7:
e7:2c:77:d8:6e:7a:8e:88:f3:f3:81:d0:e4:09:a9:
02:73:d4:f4:dd:9d:68:ad:ac:00:37:54:12:ac:c3:
20:b1:34:bc:d9:b7:88:37:5b:ae:a8:95:ff:63:37:
be:29:8b:7a:bc:56:0f:53:06:4f:70:fe:8b:4b:4c:
8e:72:4b:06:f7:03:78:ba:ee:7b:2c:7a:d3:7e:12:
7e:bf:a8:40:d3:e0:ff:4c:8a:5c:d5:d8:b3:30:f4:
2a:7f:9b:62:6b:7e:25:61:32:13:af:4f:28:d2:20:
33:14:21:78:98:22:2c:b4:ba:e5:32:19:84:31:9d:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D8:2E:53:94:F8:C5:6E:84:9D:F6:B3:B1:F7:48:05:3C:75:9B:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.243.0/24
148.135.187.0/24
155.117.158.0/24
168.222.13.0/24
168.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e3:8f:25:6d:37:84:6e:a4:e7:91:12:4d:c0:fb:b4:ee:4c:
b4:34:93:8f:71:20:94:15:9b:ff:6a:71:0b:4b:fd:49:a3:fd:
0b:75:02:94:90:a6:7e:ce:a4:d1:1a:ee:c6:48:52:17:cf:33:
62:da:e8:0d:53:17:b7:5e:94:aa:88:59:7a:7d:c5:3f:87:35:
88:11:67:e7:36:0a:21:b6:b7:39:62:a1:20:af:e3:c7:ba:bf:
4c:ff:d6:c8:26:38:2e:e1:fd:a0:f0:0f:1d:7c:51:53:24:04:
a4:6d:4a:83:a1:7c:74:72:2a:7c:d5:df:43:f0:59:5f:f9:02:
fb:16:39:6f:22:14:fc:22:05:35:7c:d5:f8:8c:17:ce:26:82:
91:08:2e:76:e3:79:d9:0c:90:d1:92:c5:3f:0e:62:69:8c:d9:
59:e3:1c:4a:13:34:52:4c:58:89:36:ad:e9:f0:56:f7:4c:2d:
30:9d:84:b5:ba:98:f0:7c:c5:5b:e7:71:e0:40:9c:b0:cf:6e:
8a:03:cc:98:44:9b:ac:02:0d:cd:34:0c:02:ee:3c:b4:13:68:
c3:66:d0:09:c5:e1:13:1d:3d:84:6a:06:22:0d:0e:80:5d:92:
82:76:49:21:0f:24:3a:bd:90:b9:14:18:1d:15:4a:4d:12:83:
77:43:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:52 2026 by rpki-client