
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa
File: AS30042.roa (raw, json)
Hash identifier: KVmfywjSmvsRoUewhLwHIu0ZtMjKE0tVsGkMcS5lGDk=
Subject key identifier: 88:F3:75:C1:D1:74:E3:6A:68:1C:3B:71:55:6A:DD:49:8C:7C:9B:25
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 10BF7A236F813F7B9F70088F0910B17E58B08989
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa
Signing time: Mon 05 Oct 2026 06:12:58 +0000
ROA not before: Mon 05 Oct 2026 06:07:58 +0000
ROA not after: Mon 04 Oct 2027 06:12:58 +0000
asID: 30042
IP address blocks: 79.180.32.0/23 maxlen: 24
79.182.2.0/24 maxlen: 24
79.182.54.0/24 maxlen: 24
79.182.125.0/24 maxlen: 24
79.183.8.0/24 maxlen: 24
79.183.46.0/24 maxlen: 24
79.183.255.0/24 maxlen: 24
109.64.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bf:7a:23:6f:81:3f:7b:9f:70:08:8f:09:10:b1:7e:58:b0:89:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:07:58 2026 GMT
Not After : Oct 4 06:12:58 2027 GMT
Subject: CN=88F375C1D174E36A681C3B71556ADD498C7C9B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:20:16:45:12:97:ba:62:ec:88:5b:c4:88:
16:c5:6a:3b:84:92:09:4b:5a:25:c1:93:82:ce:dc:
a6:94:fc:bf:8e:65:57:d7:e2:85:45:59:8f:69:7c:
c8:59:2d:db:d8:09:4a:6e:01:72:c4:b5:0b:6b:49:
0b:e5:9d:e7:6e:7c:36:63:73:6b:38:a0:dc:08:80:
b2:88:6a:da:e3:f8:56:f8:87:f2:1b:cd:a9:1d:6b:
b7:86:34:f1:3a:24:97:ed:3e:8c:68:65:10:ce:c6:
9c:91:51:50:8b:dc:35:f9:59:3d:87:f2:7c:64:35:
71:ff:52:c9:36:8c:47:8d:e6:e2:68:dc:9a:12:c4:
ff:7c:5d:ac:e8:a9:e6:22:08:9e:c6:79:3d:43:f9:
17:9e:d1:67:12:32:b1:1a:b2:42:9d:73:89:be:7f:
a1:be:72:62:5a:c6:d8:94:41:26:3f:42:02:a7:54:
5f:21:09:0b:c0:96:ce:37:71:5d:fd:cc:0d:56:36:
4a:ca:08:56:33:a7:3d:2d:9a:19:38:68:5c:0b:c8:
7b:b8:79:0c:73:fa:d2:f4:39:b1:89:3b:df:58:2e:
ad:a9:a8:d5:23:95:0a:33:02:5e:3a:69:29:cd:77:
94:e1:65:e3:c3:2f:f7:59:cc:32:20:d4:19:19:d4:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:75:C1:D1:74:E3:6A:68:1C:3B:71:55:6A:DD:49:8C:7C:9B:25
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.32.0/23
79.182.2.0/24
79.182.54.0/24
79.182.125.0/24
79.183.8.0/24
79.183.46.0/24
79.183.255.0/24
109.64.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b3:f9:8d:fb:34:9e:ed:ba:c9:e7:b1:74:01:5a:7c:be:2f:
50:6a:5b:82:90:f2:b0:fe:6e:1d:a1:c1:ab:5e:c4:04:7b:ea:
81:92:aa:1a:d9:4c:56:05:5a:f4:25:2b:e7:5d:7b:1d:73:5a:
a7:b8:20:e4:74:5e:c4:8c:82:47:b3:f7:fa:e6:6a:5b:35:48:
47:c8:24:7b:4e:d0:74:06:70:b5:84:2b:06:f5:fb:85:66:7b:
59:23:07:4f:2e:67:40:21:bc:96:e2:95:e0:75:da:20:a1:57:
9c:e5:99:f5:c2:d5:9f:4a:80:cb:21:42:b6:d7:a4:5e:75:01:
9d:e6:e4:8f:3f:de:d3:34:34:4e:83:37:d0:fd:e9:80:e1:77:
52:36:93:73:76:37:76:f7:f9:f5:58:dd:b1:8b:d2:e5:7c:9c:
2e:d9:d5:88:47:2d:4c:bb:e8:0b:62:7d:5a:4b:e7:f6:10:c5:
8f:b0:2e:b3:21:4b:a1:b9:c8:93:47:67:67:8b:55:a2:d9:dd:
89:10:a4:0a:25:9c:1e:4d:55:42:a8:0e:d4:69:b4:b9:f6:88:
47:1f:5c:1a:48:30:8c:dc:81:9b:6b:04:52:83:6b:5b:a1:ca:
36:88:65:7c:8b:78:90:5f:16:d8:51:f3:30:12:a1:90:35:9a:
c8:de:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:43 2026 by rpki-client