Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: Ry/80B6BD1lRnhtyCSqBLdt0Hoequ4ttjOkWToHoB6I=
Subject key identifier: 9D:B4:4F:BD:EB:B6:80:29:19:76:0C:D9:E9:94:61:1F:09:73:69:02
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B66EAA89957E8300E556E56BB730F69DE71FA5F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
Signing time: Thu 06 Aug 2026 00:04:36 +0000
ROA not before: Wed 05 Aug 2026 23:59:36 +0000
ROA not after: Thu 05 Aug 2027 00:04:36 +0000
asID: 30058
IP address blocks: 82.21.253.0/24 maxlen: 24
82.21.254.0/24 maxlen: 24
82.22.254.0/24 maxlen: 24
82.23.244.0/24 maxlen: 24
82.24.254.0/24 maxlen: 24
82.25.254.0/24 maxlen: 24
82.26.254.0/24 maxlen: 24
82.26.255.0/24 maxlen: 24
82.27.254.0/24 maxlen: 24
82.27.255.0/24 maxlen: 24
82.29.253.0/24 maxlen: 24
82.29.254.0/24 maxlen: 24
82.47.245.0/24 maxlen: 24
2a13:9500:10a::/48 maxlen: 48
2a13:9500:197::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:66:ea:a8:99:57:e8:30:0e:55:6e:56:bb:73:0f:69:de:71:fa:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 5 23:59:36 2026 GMT
Not After : Aug 5 00:04:36 2027 GMT
Subject: CN=9DB44FBDEBB6802919760CD9E994611F09736902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:1c:10:18:9b:eb:4d:01:31:5c:9e:d9:74:
d3:45:f0:7c:96:df:68:cb:b3:d6:63:76:6e:63:19:
7b:87:03:5f:6e:f6:43:b5:63:57:70:c2:52:ef:2c:
37:c8:91:ec:c3:c5:76:13:c8:82:5b:7f:cd:d5:c4:
0b:fc:7b:5f:9b:df:c7:86:ed:d9:98:e3:bc:f8:7f:
b9:fa:4a:02:50:25:8b:bb:34:9d:eb:a1:f6:3c:46:
7e:4a:4a:9c:64:58:99:93:7a:66:db:e1:6a:15:af:
f2:9e:52:e3:42:73:9f:76:09:8f:c0:89:ef:d8:d0:
22:65:20:dc:4c:04:15:60:f3:3e:26:82:d1:63:9f:
43:94:9c:c0:35:38:42:b2:ec:09:b9:fc:99:99:18:
d1:a7:68:f6:62:ac:49:0e:a5:03:e7:b1:55:ba:1e:
90:b6:e7:35:c7:0d:a6:4c:14:6e:23:17:84:83:f9:
fc:bc:25:18:62:c7:94:a7:2c:eb:05:6f:d1:f7:f8:
31:67:b3:45:45:80:6d:a3:f9:2f:30:78:ee:1a:7d:
b5:b5:39:2b:8d:94:89:5c:51:a0:38:02:d9:ad:a0:
b7:3d:8c:c0:91:49:88:92:68:39:7a:6c:2c:9e:97:
f4:2f:48:50:c0:8c:3e:30:d2:ad:df:b8:bf:b9:de:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B4:4F:BD:EB:B6:80:29:19:76:0C:D9:E9:94:61:1F:09:73:69:02
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.253.0-82.21.254.255
82.22.254.0/24
82.23.244.0/24
82.24.254.0/24
82.25.254.0/24
82.26.254.0/23
82.27.254.0/23
82.29.253.0-82.29.254.255
82.47.245.0/24
IPv6:
2a13:9500:10a::/48
2a13:9500:197::/48
Signature Algorithm: sha256WithRSAEncryption
5a:aa:31:e4:db:1b:04:51:e7:00:43:21:f0:78:b8:b8:72:a1:
52:29:3f:d2:89:3b:90:36:aa:a1:08:40:b2:ed:48:d9:a0:a2:
d4:92:13:85:56:7b:55:d9:4d:ee:e5:cf:30:3c:7e:26:d4:b6:
dd:6d:af:b1:2d:6f:7f:98:f1:21:8b:39:a4:52:90:cb:ca:c2:
85:a1:f2:fb:42:f7:31:21:86:c6:87:e9:c0:0d:de:5c:82:3c:
c2:c7:5f:9c:20:31:43:59:11:cc:5d:9c:71:25:a8:ef:3d:c4:
37:fb:c2:be:89:aa:e4:b4:40:78:ae:f3:16:a9:5b:aa:cc:b3:
3e:8f:2a:a1:02:98:2d:68:55:d9:b7:ed:52:02:e4:d9:79:53:
bc:74:37:68:f7:8c:00:9b:7c:79:a3:e5:01:ea:76:d2:60:b6:
7c:6f:2c:e6:02:99:49:9c:04:aa:42:69:30:ae:ed:06:75:04:
f6:50:4c:b9:33:aa:6e:48:b2:0e:83:35:fb:30:da:fb:f1:a4:
1c:61:4b:31:f6:fc:5c:72:6d:86:97:0f:1f:48:f9:17:25:f9:
00:e2:09:ff:ad:75:cf:d7:e8:6a:32:ee:93:3c:65:e1:40:45:
76:f3:f0:f9:f1:a4:43:9c:c4:01:16:7d:a7:c6:85:59:d5:fe:
cf:50:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:52 2026 by rpki-client