Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: 9WsaChqzVvkfACMt5y7MNPaJ9s7cHuUWQeqqCSjPAqw=
Subject key identifier: 4C:5A:5F:CF:CB:3C:E7:62:5E:CD:EB:33:32:AD:6C:9A:23:DC:54:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 52ED1DA5547817DC32A01BC9D72D53D0640BFD12
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
Signing time: Thu 25 Jun 2026 10:46:16 +0000
ROA not before: Thu 25 Jun 2026 10:41:16 +0000
ROA not after: Thu 24 Jun 2027 10:46:16 +0000
asID: 30058
IP address blocks: 82.21.1.0/24 maxlen: 24
82.21.253.0/24 maxlen: 24
82.21.254.0/24 maxlen: 24
82.22.254.0/24 maxlen: 24
82.23.244.0/24 maxlen: 24
82.24.254.0/24 maxlen: 24
82.25.25.0/24 maxlen: 24
82.25.254.0/24 maxlen: 24
82.26.78.0/23 maxlen: 24
82.26.254.0/24 maxlen: 24
82.26.255.0/24 maxlen: 24
82.27.254.0/24 maxlen: 24
82.27.255.0/24 maxlen: 24
82.29.253.0/24 maxlen: 24
82.29.254.0/24 maxlen: 24
82.41.41.0/24 maxlen: 24
82.47.245.0/24 maxlen: 24
2a13:9500:10a::/48 maxlen: 48
2a13:9500:197::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ed:1d:a5:54:78:17:dc:32:a0:1b:c9:d7:2d:53:d0:64:0b:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 25 10:41:16 2026 GMT
Not After : Jun 24 10:46:16 2027 GMT
Subject: CN=4C5A5FCFCB3CE7625ECDEB3332AD6C9A23DC5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:3d:17:3c:79:ba:00:7f:6d:17:e3:6e:44:
bb:6f:1d:ba:64:b0:9c:20:05:b0:bb:cb:29:8f:1f:
42:a7:c8:d9:b0:60:1a:7b:13:f1:81:7a:18:6a:e8:
3a:fb:7d:10:24:ae:09:9a:29:b8:d4:66:3c:74:87:
6f:77:26:0a:54:11:33:03:ab:41:cc:64:b1:47:a2:
48:c1:a7:b8:a8:92:00:7b:e9:0d:06:c4:4c:69:65:
71:26:15:d2:cc:e1:72:96:31:25:a3:da:29:f4:da:
02:58:c3:e6:b4:73:a8:73:39:fd:0e:a3:3a:d7:61:
78:50:55:b3:fa:1e:95:7a:9c:a8:d2:2e:24:4f:bb:
92:a4:b9:7b:b4:ea:0c:20:91:44:ae:c1:2b:7f:61:
45:0f:c5:be:62:1f:10:fe:22:e2:0c:39:c2:28:b7:
ac:ff:1e:ea:b5:57:5f:e0:ba:5f:61:2c:dd:8b:ce:
46:34:2a:fa:b9:ac:57:ba:62:ff:0b:a4:50:53:9e:
e0:69:5c:03:d6:29:15:f9:96:ed:ac:95:a7:06:5c:
06:2b:5c:fc:b1:39:b0:6a:f8:87:a9:b8:7b:65:75:
9b:25:02:98:6b:1a:4a:2e:a7:a8:7d:38:b4:2f:5f:
c5:8a:f1:9e:da:98:b5:ca:d8:99:14:17:08:0a:c9:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:5F:CF:CB:3C:E7:62:5E:CD:EB:33:32:AD:6C:9A:23:DC:54:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.1.0/24
82.21.253.0-82.21.254.255
82.22.254.0/24
82.23.244.0/24
82.24.254.0/24
82.25.25.0/24
82.25.254.0/24
82.26.78.0/23
82.26.254.0/23
82.27.254.0/23
82.29.253.0-82.29.254.255
82.41.41.0/24
82.47.245.0/24
IPv6:
2a13:9500:10a::/48
2a13:9500:197::/48
Signature Algorithm: sha256WithRSAEncryption
89:27:27:0f:27:01:9b:96:ce:06:a0:17:21:36:03:d6:f4:dd:
8a:91:0d:f2:51:f6:26:2f:3f:58:9c:3c:fb:54:3f:3e:59:08:
e3:c4:88:1d:2a:a8:56:cf:34:be:e9:74:46:8a:a2:dd:09:22:
01:53:0f:e0:3f:ae:34:be:9b:f9:45:58:a4:3f:ea:38:d3:b1:
bc:c1:f8:f0:93:f0:1e:aa:77:25:82:50:73:b4:81:2f:6b:be:
53:5f:b5:df:aa:49:8b:fe:5a:33:09:60:cc:17:e6:d8:df:48:
af:5d:fc:48:0b:a0:af:04:81:78:82:62:85:73:2e:ea:38:fc:
ac:1a:fb:7f:98:92:11:2d:c8:11:32:c1:45:c2:c7:8f:42:a7:
dd:9e:07:0f:04:6b:0c:95:90:69:41:6e:29:b3:48:38:3e:23:
af:e3:b6:9b:e9:f4:3b:c8:33:fa:06:c5:cd:b5:e8:c2:d2:8a:
d0:94:1a:b5:43:15:13:e8:1a:5f:9a:b3:0a:79:40:4d:fd:7c:
01:d4:12:02:68:77:7a:4f:4f:71:01:f5:df:e9:95:f5:dc:f1:
1f:82:ce:3f:39:b8:00:7b:6b:b9:6b:97:af:36:95:78:f4:f0:
18:e7:84:20:fd:de:57:3c:2d:1d:c5:c3:c7:63:0d:0f:b5:1b:
86:93:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:17 2026 by rpki-client