Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: gCRNVvRBC8oTa+OEddIM9/SNMJXOXUX5VCw1PSmh7pg=
Subject key identifier: 7A:E6:DD:E0:F6:AD:51:08:25:12:92:CA:F9:EF:F4:EB:95:3D:8A:8F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 28A69AFC88EA99778E9BDA2442AB9A6E0367D7E9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
Signing time: Tue 16 Jun 2026 00:06:36 +0000
ROA not before: Tue 16 Jun 2026 00:01:36 +0000
ROA not after: Tue 15 Jun 2027 00:06:36 +0000
asID: 30058
IP address blocks: 181.214.124.0/24 maxlen: 24
181.215.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a6:9a:fc:88:ea:99:77:8e:9b:da:24:42:ab:9a:6e:03:67:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 16 00:01:36 2026 GMT
Not After : Jun 15 00:06:36 2027 GMT
Subject: CN=7AE6DDE0F6AD5108251292CAF9EFF4EB953D8A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:03:b4:e8:8e:a2:a3:ff:cf:b5:1a:16:9d:
90:1e:98:33:f7:11:30:7c:c1:1c:4a:58:26:e0:81:
f6:0f:e8:9c:91:48:27:65:0a:ea:f6:d5:e5:05:7c:
e8:3b:97:79:0c:5d:6e:b3:60:5d:03:b5:b3:0c:f9:
73:57:72:ea:84:87:2d:6a:fa:2e:c9:b5:ec:26:4c:
dc:3b:86:89:2c:fa:9e:e1:a7:29:40:ff:7e:71:72:
00:a0:ad:30:3b:09:23:41:a0:fe:93:ae:f2:60:56:
8f:19:0a:82:42:2a:f8:f3:c4:0a:93:3b:ba:60:11:
4f:c6:8c:fe:d9:f5:d3:3f:58:6d:59:bd:3b:eb:00:
eb:2b:26:fe:2d:20:71:35:05:93:5c:03:0c:91:d1:
2f:da:e8:9d:53:cf:b6:93:88:6c:b9:3d:37:6d:f2:
4b:b7:9f:d4:66:00:04:e8:90:81:ea:d4:41:cf:c0:
99:11:36:2f:7e:91:8b:fb:14:31:88:77:d6:e8:10:
97:26:69:b4:9c:14:13:ef:cb:bf:79:6b:6f:06:f3:
57:21:58:c4:42:52:af:0f:8b:e7:6b:66:38:3a:08:
09:7d:4f:3a:74:55:54:a2:92:82:59:6f:da:c7:f8:
34:c9:e7:ac:bc:6d:a5:50:9e:92:95:f2:bc:1c:fb:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:DD:E0:F6:AD:51:08:25:12:92:CA:F9:EF:F4:EB:95:3D:8A:8F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.124.0/24
181.215.109.0/24
Signature Algorithm: sha256WithRSAEncryption
22:36:ba:ff:88:89:7d:67:c1:f8:f0:b3:42:77:a1:88:56:f8:
0c:79:6d:67:fc:cf:28:8c:4c:42:19:16:c7:c0:9b:c7:6d:b2:
54:bb:2b:e6:65:7c:2e:b1:f6:04:e3:9a:1a:1f:ce:2e:5e:4c:
47:4d:27:2c:6b:a1:81:a8:ae:0f:62:10:2e:0c:22:95:b3:80:
0e:97:ce:45:7d:2d:62:6a:ec:9c:09:44:b8:77:82:a2:9c:3f:
9b:4f:c1:92:79:e5:72:89:3a:fa:92:b6:8d:3f:e9:63:21:60:
0b:ca:4c:34:eb:fa:15:9f:99:89:d4:92:c3:1b:b5:73:37:e4:
bd:21:d8:f0:c2:99:e9:d3:4c:5d:96:df:0e:ba:84:f4:d8:20:
13:b0:81:84:0f:a2:ec:f8:cd:12:bc:32:d6:24:cb:5c:68:a1:
9b:94:62:86:83:08:72:0a:41:ca:af:15:4f:9e:40:65:e1:0f:
ef:1c:56:7f:b1:81:e7:5b:2c:c1:d3:66:59:e9:ba:6f:b2:df:
67:b3:08:9f:c6:b4:a9:fa:e5:db:82:6b:d8:dc:5c:f7:c3:f8:
db:cf:96:bf:ab:c6:76:e3:8a:c3:da:c4:f5:bb:9f:65:77:3b:
4e:32:2f:c3:20:0d:0d:5c:2c:fa:b5:69:1a:93:ba:2f:91:b6:
e4:e4:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:39:24 2026 by rpki-client