Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: pxzHMKEsYhJKSqL5pDs1mDsLYk7Xjk45zZ3qFVifhig=
Subject key identifier: B5:59:F4:39:7B:65:DE:90:60:9A:AA:01:AD:B5:01:E0:59:E1:B2:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1457C2832128B52F01EADF305D706EFBF79F8099
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
Signing time: Fri 17 Jul 2026 08:12:17 +0000
ROA not before: Fri 17 Jul 2026 08:07:17 +0000
ROA not after: Fri 16 Jul 2027 08:12:17 +0000
asID: 30058
IP address blocks: 96.62.243.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
155.117.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:57:c2:83:21:28:b5:2f:01:ea:df:30:5d:70:6e:fb:f7:9f:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 08:07:17 2026 GMT
Not After : Jul 16 08:12:17 2027 GMT
Subject: CN=B559F4397B65DE90609AAA01ADB501E059E1B280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:0d:be:da:a9:84:bd:8f:e7:93:33:98:d2:
3f:2f:d7:a2:c9:61:f2:c7:e3:63:c5:b2:86:fa:a4:
f4:d2:bc:d8:93:fc:f0:30:76:84:b7:24:97:7e:0c:
00:c9:16:1b:2c:0e:cb:12:8e:b9:df:c7:2f:2c:e5:
fa:87:78:53:e4:0a:ef:1a:b6:5f:eb:2d:84:66:e9:
bf:a7:36:0a:08:1d:28:e3:f2:3b:d4:76:77:24:46:
d9:70:dd:5c:49:e8:3d:9a:43:3a:84:75:4b:be:44:
19:bf:80:0d:90:1b:d4:44:61:08:2f:1a:7b:0d:d9:
3b:34:06:0d:7d:b9:11:b0:fe:c8:dc:a7:8a:b8:52:
ef:fc:c2:6f:31:6e:fb:ef:48:e2:ae:c9:a5:8c:3f:
1c:94:2b:df:44:3a:8c:99:70:83:e4:95:8d:ad:88:
59:2d:5e:9b:6c:78:6d:ab:2f:77:e3:12:4b:76:7a:
f5:ad:2e:a3:72:93:0b:39:8e:07:ee:5e:28:ff:6f:
3b:8d:ae:b8:bb:4c:2f:d1:33:7f:4f:71:49:25:37:
fa:34:72:44:02:fe:ac:fa:0f:d5:4d:86:52:f5:10:
1f:9d:d8:b0:ba:53:90:da:ac:40:69:36:61:e3:26:
4b:7a:c3:ca:99:98:aa:a2:41:e5:d5:03:c1:df:fb:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:F4:39:7B:65:DE:90:60:9A:AA:01:AD:B5:01:E0:59:E1:B2:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.243.0/24
148.135.187.0/24
155.117.147.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9a:cc:18:88:3e:4a:53:7e:90:3d:ee:77:dd:91:bf:5c:a3:
c6:b9:07:6e:e9:0b:2b:b1:75:53:57:d4:f3:04:2b:bf:12:50:
13:81:df:d1:05:13:d1:b2:dc:9a:a8:d8:9d:c7:a5:97:4e:96:
fc:6c:f5:3a:8a:50:aa:da:f6:ec:d2:d8:7a:44:ee:2b:c1:b0:
e5:ca:23:ab:8e:89:bb:db:4e:35:c5:b9:6f:c7:81:0c:b8:67:
e8:70:48:99:44:3c:82:6f:80:0c:d9:b6:6e:a1:e8:60:30:5d:
d2:93:15:68:9a:d9:31:79:43:8d:63:8d:58:d4:0c:9d:1d:ba:
2d:72:a2:be:a9:65:d6:3b:28:5d:22:f3:80:86:3e:1e:42:59:
a8:3f:37:7c:0b:d0:24:4f:14:cd:ca:ca:07:52:cd:c5:ca:74:
14:cb:f2:6e:9f:37:a5:54:a4:6f:ef:5d:d5:55:73:ad:28:bc:
64:19:c5:54:a4:53:ef:ab:d9:9a:8e:f1:83:72:d4:74:3a:03:
fd:ea:de:7a:c9:1c:c9:5e:f7:5e:32:45:c7:c2:2d:34:a7:2f:
b4:33:76:48:77:45:2d:a8:50:e1:bd:4a:a5:90:45:55:4c:c0:
77:3c:eb:f9:cf:69:fe:10:eb:ba:22:00:f3:81:d4:2a:55:3c:
4e:ee:af:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:27 2026 by rpki-client