Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: e7/pKT7XmvRhVDCXBSV4+j/XE1qnIawXX0+ZLeUw86c=
Subject key identifier: 7E:45:E5:54:D4:E2:19:75:3A:98:B5:D0:B7:3D:CF:DE:8A:BD:7F:0E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4EBF5A8983A554099E8A7CD3555557036BDD3427
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
Signing time: Wed 20 May 2026 10:11:58 +0000
ROA not before: Wed 20 May 2026 10:06:58 +0000
ROA not after: Wed 19 May 2027 10:11:58 +0000
asID: 30058
IP address blocks: 51.146.24.0/22 maxlen: 24
51.146.28.0/22 maxlen: 24
51.146.180.0/22 maxlen: 24
51.241.12.0/22 maxlen: 24
51.241.24.0/22 maxlen: 24
51.241.32.0/22 maxlen: 24
51.241.152.0/22 maxlen: 24
51.241.172.0/22 maxlen: 24
51.241.176.0/22 maxlen: 24
51.241.224.0/22 maxlen: 24
51.241.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 05:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:bf:5a:89:83:a5:54:09:9e:8a:7c:d3:55:55:57:03:6b:dd:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 20 10:06:58 2026 GMT
Not After : May 19 10:11:58 2027 GMT
Subject: CN=7E45E554D4E219753A98B5D0B73DCFDE8ABD7F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:1a:03:e3:27:f5:c8:42:fb:1e:09:1d:3b:
9f:f4:30:46:44:d5:46:f0:ef:83:4a:bf:ac:dc:75:
01:4b:de:d1:31:ec:d4:0a:c1:05:a5:bf:a5:c8:a2:
14:4c:65:27:83:76:3f:37:31:a5:e7:9d:0c:dd:90:
b9:25:7b:67:df:5b:38:6b:3e:dd:48:9e:f1:06:b7:
ef:ba:47:ac:5f:ab:b7:98:47:20:86:99:da:a9:b3:
69:38:7a:2c:af:63:2b:58:0c:ee:46:5f:c4:ab:82:
1f:6f:46:fe:a5:48:b9:f6:a6:71:3d:73:94:aa:7f:
f0:cd:c5:fe:6b:2e:10:58:d1:88:c6:58:ae:8a:f3:
98:6b:be:7a:8f:17:a2:81:26:b3:2a:dc:e3:92:ae:
8f:c2:5f:0f:c0:e9:59:fa:47:6a:0e:f1:4a:b7:73:
32:95:87:0d:94:d7:1e:60:e2:bd:c4:82:2c:01:f1:
1e:71:bf:d5:18:46:f3:0a:62:fa:f0:e9:03:09:80:
66:b1:a9:94:a9:3a:09:ce:26:55:d2:2a:31:37:0a:
e5:60:73:05:15:20:6c:34:14:8e:dd:8c:92:2d:05:
32:18:ea:ff:48:22:44:70:e8:40:91:00:bc:02:e8:
de:f1:57:fa:f4:9d:d8:a0:04:1a:ee:67:b5:c2:a3:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:E5:54:D4:E2:19:75:3A:98:B5:D0:B7:3D:CF:DE:8A:BD:7F:0E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.24.0/21
51.146.180.0/22
51.241.12.0/22
51.241.24.0/22
51.241.32.0/22
51.241.152.0/22
51.241.172.0-51.241.179.255
51.241.224.0/22
51.241.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:eb:85:3a:62:8c:d5:82:02:74:2b:ec:3f:0a:14:9d:5e:5e:
be:18:d3:3e:06:c9:5d:84:67:b5:b6:ca:86:07:b8:3b:fa:f9:
1c:47:cf:a3:2d:9d:c0:74:7f:52:9a:fa:9d:da:1c:03:a9:43:
9a:33:c2:41:f2:1f:4e:9f:99:de:ee:95:8a:a2:cb:09:3f:1e:
1e:c3:6f:9a:69:92:db:a8:8e:12:cd:52:85:89:79:c3:34:d3:
7f:12:48:69:4a:74:5f:fb:cd:52:fb:a1:17:da:4a:c8:f7:cf:
10:a3:e5:f7:37:d2:28:70:aa:a6:85:25:cb:ae:35:0c:4d:26:
fc:47:63:51:81:e6:4a:33:eb:4a:59:81:96:52:1c:80:dd:8f:
94:e7:a1:7a:14:a2:85:44:36:56:10:e3:aa:a1:2a:db:b3:e2:
25:c4:f0:1c:fb:84:7b:9c:a7:5c:91:da:f1:8d:1a:f2:ba:85:
bb:81:5e:1b:46:a4:1e:cf:15:b6:1f:11:67:37:1c:ce:1a:93:
51:2f:77:90:bd:d0:8c:25:90:b0:3d:86:af:84:11:c5:66:03:
d6:27:03:0a:dd:d6:0f:5e:c7:a3:f4:c8:b1:30:67:17:57:4e:
9b:7c:4e:ad:98:3a:04:2a:73:79:6d:8f:fb:b6:ab:56:80:68:
fd:ec:cd:1f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTr9aiYOlVAmeinzTVVVXA2vdNCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MjAxMDA2NThaFw0yNzA1MTkxMDExNThaMDMxMTAvBgNV
BAMTKDdFNDVFNTU0RDRFMjE5NzUzQTk4QjVEMEI3M0RDRkRFOEFCRDdGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9hoD4yf1yEL7HgkdO5/0MEZE
1Ubw74NKv6zcdQFL3tEx7NQKwQWlv6XIohRMZSeDdj83MaXnnQzdkLkle2ffWzhr
Pt1InvEGt++6R6xfq7eYRyCGmdqps2k4eiyvYytYDO5GX8Srgh9vRv6lSLn2pnE9
c5Sqf/DNxf5rLhBY0YjGWK6K85hrvnqPF6KBJrMq3OOSro/CXw/A6Vn6R2oO8Uq3
czKVhw2U1x5g4r3EgiwB8R5xv9UYRvMKYvrw6QMJgGaxqZSpOgnOJlXSKjE3CuVg
cwUVIGw0FI7djJItBTIY6v9IIkRw6ECRALwC6N7xV/r0ndigBBruZ7XCo1+jAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUfkXlVNTiGXU6mLXQtz3P3oq9fw4wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzAwNTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMEQEAgABMD4DBAMzkhgD
BAIzkrQDBAIz8QwDBAIz8RgDBAIz8SADBAIz8ZgwDAMEAjPxrAMEAjPxsAMEAjPx
4AMEAjPx+DANBgkqhkiG9w0BAQsFAAOCAQEAm+uFOmKM1YICdCvsPwoUnV5evhjT
PgbJXYRntbbKhge4O/r5HEfPoy2dwHR/Upr6ndocA6lDmjPCQfIfTp+Z3u6ViqLL
CT8eHsNvmmmS26iOEs1ShYl5wzTTfxJIaUp0X/vNUvuhF9pKyPfPEKPl9zfSKHCq
poUly641DE0m/EdjUYHmSjPrSlmBllIcgN2PlOehehSihUQ2VhDjqqEq27PiJcTw
HPuEe5ynXJHa8Y0a8rqFu4FeG0akHs8Vth8RZzcczhqTUS93kL3QjCWQsD2Gr4QR
xWYD1icDCt3WD17Ho/TIsTBnF1dOm3xOrZg6BCpzeW2P+7arVoBo/ezNHw==
-----END CERTIFICATE-----
Generated at Sat May 30 11:47:38 2026 by rpki-client