Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30644.roa
File: AS30644.roa (raw, json)
Hash identifier: uURuXcMl2HyxpKA+nQXJWdJ1J8fwgfUwozktbS4v2TQ=
Subject key identifier: 83:20:E0:D9:8B:58:E9:69:C3:4E:B6:2F:A4:E5:DD:35:84:AD:24:F6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1DE62631A3D7F5209BCA0AB8AC180AC48D988122
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30644.roa
Signing time: Thu 14 May 2026 13:34:16 +0000
ROA not before: Thu 14 May 2026 13:29:16 +0000
ROA not after: Thu 13 May 2027 13:34:16 +0000
asID: 30644
IP address blocks: 84.75.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e6:26:31:a3:d7:f5:20:9b:ca:0a:b8:ac:18:0a:c4:8d:98:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 14 13:29:16 2026 GMT
Not After : May 13 13:34:16 2027 GMT
Subject: CN=8320E0D98B58E969C34EB62FA4E5DD3584AD24F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:88:3f:82:d8:bc:b6:d5:8a:58:63:90:85:
49:84:38:41:47:78:42:e8:01:a0:d9:05:0d:c6:19:
45:ec:9f:16:0c:c4:96:32:20:2b:dc:ed:8d:8d:20:
f5:73:cd:14:d2:67:74:3d:42:19:b0:12:fb:4d:3f:
4d:51:68:ef:61:ff:24:81:a2:85:2f:c2:9d:a3:fe:
09:da:f8:7e:61:f8:0a:f1:87:fd:f1:12:6b:e8:b0:
12:63:15:e8:bc:9b:fe:0f:5a:2f:64:9d:6c:13:d8:
29:03:0b:22:58:36:a5:14:4b:fb:85:d1:42:58:5c:
23:82:0a:05:8e:b5:7a:52:99:a7:3b:71:39:13:ba:
91:2b:05:c1:9d:77:d1:3e:7e:86:c3:62:2e:7c:c6:
54:f9:05:57:b0:ce:8e:ad:4e:6d:a6:b8:bf:2a:06:
4a:a1:c5:da:f0:f3:f6:ca:30:2f:c8:32:96:e0:2c:
fd:97:f6:f1:ec:11:a6:d1:1a:2c:ae:85:99:d4:46:
c5:55:9e:aa:e0:e5:fb:85:20:e5:6e:d8:2b:63:24:
30:56:b0:46:99:35:f2:1a:77:2f:b5:c4:97:d4:39:
27:30:5b:23:4b:5b:4e:81:4c:6b:56:c6:75:72:5f:
46:03:80:42:9f:51:4d:13:2e:19:f7:cd:6f:1c:a7:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:E0:D9:8B:58:E9:69:C3:4E:B6:2F:A4:E5:DD:35:84:AD:24:F6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.159.0/24
Signature Algorithm: sha256WithRSAEncryption
46:da:1a:fc:69:97:1c:42:c6:cb:e0:5b:7c:84:39:83:20:b6:
5c:2b:5c:9b:0f:d0:e7:c9:2a:11:d8:b9:25:38:91:bd:f8:58:
9c:dd:21:6f:21:8d:d4:4f:d0:a1:ad:c5:d9:89:5a:1d:07:69:
10:d9:32:42:84:92:f1:61:d9:cb:07:cf:5a:e6:10:e7:24:0c:
f7:fb:92:26:24:56:1b:47:7e:d0:1d:c9:da:54:1f:2c:cd:56:
10:ac:97:11:ba:4a:82:74:6b:41:6b:7a:f3:fc:76:b3:a5:42:
69:f0:8f:d1:96:1e:04:5e:03:2c:43:44:50:7a:7b:d8:7f:77:
82:8c:07:31:a3:bb:00:c0:b3:fd:8b:d0:10:17:52:6e:6c:52:
a6:b4:41:79:94:0f:5b:dd:dd:99:eb:d9:25:3a:54:fc:db:c9:
37:e4:e9:bb:5f:5e:93:46:7f:90:13:55:1e:a0:d7:d4:14:dd:
46:7c:94:03:e8:42:57:33:c2:56:3e:3c:c6:23:3b:f2:38:82:
a1:60:36:30:83:9a:16:69:eb:dc:75:4c:14:d8:e8:fb:fc:8e:
0a:c1:b2:c9:01:37:e2:3b:b6:d5:6e:df:75:66:5d:5e:d1:fe:
02:1b:d5:49:b7:48:99:03:8a:d2:11:b6:00:a8:8b:8d:1e:cc:
87:fc:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:35 2026 by rpki-client