Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          Dkhz5K2vBpsqq+Gu8r5NO7oCNXjFNN2rGmLyqyaE1dA=
Subject key identifier:   83:18:CD:96:68:02:7F:82:52:F3:F0:51:2D:7B:75:71:FA:03:09:EE
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       410CB5717A01FA61431931C42F69E0E847D5F726
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30058.roa
Signing time:             Wed 07 Oct 2026 11:03:06 +0000
ROA not before:           Wed 07 Oct 2026 10:58:06 +0000
ROA not after:            Wed 06 Oct 2027 11:03:06 +0000
asID:                     30058
IP address blocks:        79.180.24.0/22 maxlen: 22
                          79.180.40.0/22 maxlen: 22
                          79.180.52.0/22 maxlen: 22
                          79.180.60.0/22 maxlen: 22
                          79.180.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:b5:71:7a:01:fa:61:43:19:31:c4:2f:69:e0:e8:47:d5:f7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  7 10:58:06 2026 GMT
            Not After : Oct  6 11:03:06 2027 GMT
        Subject: CN=8318CD9668027F8252F3F0512D7B7571FA0309EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:f0:09:f3:01:19:82:ff:fe:28:ac:95:b8:
                    f9:c7:51:89:c9:35:58:97:48:85:84:64:53:4e:9e:
                    4e:1d:7a:a3:d1:ef:d6:f2:aa:2b:74:d6:7b:17:cf:
                    7a:d4:ec:e1:61:b1:dd:0b:62:f1:9b:a5:65:cb:62:
                    8a:16:d0:67:5d:72:35:99:28:85:2f:7d:35:7f:10:
                    94:e3:49:1f:fe:31:ae:5f:d9:2e:a5:87:b4:3e:11:
                    6d:50:c8:5d:1d:36:7b:02:55:fd:d6:d5:4d:a1:6d:
                    47:27:2d:bd:db:59:d6:24:0b:4b:63:22:d2:8d:a5:
                    e3:e8:84:e1:9f:9d:84:03:b6:f6:c8:d1:44:dd:2c:
                    a7:f2:48:40:2b:b8:54:a9:36:c1:ce:9f:2f:05:34:
                    45:f4:fe:58:b9:1b:44:b2:0c:90:b7:4d:74:be:c1:
                    2b:68:cb:4b:c2:17:77:42:1b:74:a2:9a:38:5c:4b:
                    66:a3:61:ad:7b:52:0c:17:ec:86:6b:7d:06:11:c8:
                    b2:ae:82:38:68:dc:7b:94:48:bd:8a:71:39:e9:0f:
                    2c:c1:a0:cd:2d:35:87:02:de:8c:4c:e5:c1:71:55:
                    b8:b5:58:f4:17:ad:56:cb:1b:6a:44:4f:2c:b6:8e:
                    a0:86:e1:8a:30:2e:51:36:57:b0:57:c7:49:60:e0:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:CD:96:68:02:7F:82:52:F3:F0:51:2D:7B:75:71:FA:03:09:EE
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.24.0/22
                  79.180.40.0/22
                  79.180.52.0/22
                  79.180.60.0/22
                  79.180.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:3f:e7:1c:7e:fa:1a:18:a7:00:00:88:4c:ac:2a:68:ee:
         df:9b:6c:3e:6e:fc:4c:db:dd:12:10:19:28:28:b7:4e:08:a1:
         51:61:92:0d:12:76:43:69:17:79:20:3f:c9:ec:ca:53:02:11:
         f6:a0:7c:3b:05:93:33:26:41:ae:c9:26:08:81:b1:af:b3:c1:
         45:0b:34:f6:6d:6a:f3:3d:6f:88:aa:87:0f:c6:96:4a:a0:00:
         16:92:49:5e:2f:6e:5d:de:c0:93:de:bc:e6:cb:cf:f7:85:f8:
         18:76:e8:58:87:24:a2:b3:8c:45:ec:e0:c6:5f:9e:a5:9a:78:
         dd:49:ef:e2:5a:ca:46:17:43:56:3b:5e:1b:16:3d:14:70:a3:
         65:eb:15:25:23:4a:28:3d:b5:0c:b8:c8:6f:d5:1a:c7:d6:e5:
         ca:4d:20:29:9d:e9:9d:57:29:71:5f:75:54:c2:8d:49:9f:e4:
         49:83:57:13:f3:ac:68:cb:30:db:69:80:95:4e:a2:ff:17:d6:
         2f:4e:1a:26:bc:c3:88:35:e9:38:ed:5b:cd:f9:92:6b:a7:99:
         46:b1:a2:4b:fc:9f:0d:3b:32:75:5c:f0:7e:88:f4:a0:d1:92:
         82:71:f5:71:64:71:5e:12:e6:2a:6c:38:83:83:4b:4c:68:75:
         9a:59:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:40 2026 by rpki-client