Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: B1wLjoi7G+j+sluT9CZUn0WDRSgbfIRDV6urJzz5/Cw=
Subject key identifier: A1:93:88:95:55:39:FE:BA:C5:6D:5F:09:FC:D5:84:FC:20:6E:C5:2C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 771F3EA62B729162856AB048C71107CBD1882842
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
Signing time: Fri 04 Sep 2026 11:08:26 +0000
ROA not before: Fri 04 Sep 2026 11:03:26 +0000
ROA not after: Fri 03 Sep 2027 11:08:26 +0000
asID: 30058
IP address blocks: 181.214.124.0/24 maxlen: 24
181.215.109.0/24 maxlen: 24
181.215.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1f:3e:a6:2b:72:91:62:85:6a:b0:48:c7:11:07:cb:d1:88:28:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 4 11:03:26 2026 GMT
Not After : Sep 3 11:08:26 2027 GMT
Subject: CN=A19388955539FEBAC56D5F09FCD584FC206EC52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:7e:a5:b7:07:b2:81:ff:74:83:33:bf:3f:
b3:07:54:4a:d7:39:be:63:17:50:1d:99:b2:13:e9:
90:c5:2d:dc:1e:f9:c3:60:19:9e:88:14:a0:68:39:
ca:d7:1f:26:9c:b0:ef:06:5b:f4:25:62:c9:c2:70:
c8:b4:4d:c1:c1:15:e5:3f:66:c4:6b:6a:d1:b2:34:
76:02:62:2d:3f:d3:73:c2:e7:cb:eb:8e:77:7c:72:
d8:9f:31:b2:6b:16:7c:38:5c:b7:43:ed:eb:4d:6b:
21:52:43:b4:af:15:c2:2e:39:27:34:49:12:ba:0c:
03:9a:8f:ef:b5:d0:7b:9c:67:74:78:84:f2:4d:9d:
ea:68:24:eb:56:87:12:8c:21:6f:1e:0c:9d:dd:8d:
d9:e6:a0:74:2b:a7:8b:28:7d:3b:ea:84:35:c0:17:
fe:a8:20:0d:ad:e9:2c:cc:f1:fa:03:fd:f5:b2:84:
f6:1d:88:34:cd:33:e5:27:66:ce:bb:25:43:f8:fa:
38:64:4d:16:c4:d3:63:3c:78:80:6e:46:27:87:b2:
6d:fb:36:6d:b0:4d:1d:a1:35:3d:2d:c1:f8:04:d1:
40:bb:e2:b5:4d:cd:48:06:70:4f:e5:e7:ce:10:95:
43:96:0f:6a:07:01:12:af:bd:92:94:25:e5:e0:92:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:88:95:55:39:FE:BA:C5:6D:5F:09:FC:D5:84:FC:20:6E:C5:2C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.124.0/24
181.215.109.0/24
181.215.111.0/24
Signature Algorithm: sha256WithRSAEncryption
43:48:e3:2b:d8:73:4e:9e:01:1c:4d:06:f0:a6:7c:0e:4c:ef:
b4:4c:9d:b1:35:18:bc:73:eb:81:7d:58:98:7f:fb:d1:c5:79:
b8:d7:5f:00:d5:b0:1a:8a:27:8d:e7:7a:30:8d:79:99:6a:ed:
66:e4:23:7f:68:28:80:cc:45:66:eb:75:c6:e0:a3:85:88:cb:
3c:30:ce:22:7c:71:ed:e0:b1:6a:4c:eb:4b:f4:4d:6d:7f:32:
c8:b2:89:b3:4d:a6:6f:37:88:50:09:ac:45:1b:1b:91:d4:2f:
73:b0:49:f9:2c:de:8d:86:dd:6b:76:f8:55:bb:99:a9:82:62:
f2:f9:6b:a5:6a:fb:8a:96:ee:33:13:fe:27:6d:a2:e7:ff:ea:
39:f2:3e:31:f4:36:97:04:75:5a:ab:95:df:31:0f:f0:43:76:
36:d5:41:fb:29:ff:56:03:ad:7f:7f:cd:9e:ff:6f:4d:11:10:
6e:f6:b6:1b:62:72:49:58:5e:58:3d:b3:8c:70:1f:a5:e1:38:
b9:95:78:be:0e:21:30:95:fc:66:ad:c0:db:e2:87:94:6a:af:
bd:5a:f4:7d:78:4e:33:5d:b9:0b:87:6d:23:0f:b9:34:86:64:
51:23:e3:9c:ff:f5:8a:b0:29:fe:34:6b:12:61:b8:a6:38:5d:
e9:a7:95:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:25:20 2026 by rpki-client