Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30900.roa
File: AS30900.roa (raw, json)
Hash identifier: LBXwAv+CIbfN6DtFMAFBKdcdmFeYQ1JrbRYZe9XfB9g=
Subject key identifier: F9:FA:5E:9A:8C:2F:2C:07:7F:EC:AC:82:42:43:FC:37:99:38:74:2C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 482AECB5E9D5EEA4282926B2A58087BD1CF5329A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30900.roa
Signing time: Fri 01 Aug 2025 00:03:33 +0000
ROA not before: Thu 31 Jul 2025 23:58:33 +0000
ROA not after: Fri 31 Jul 2026 00:03:33 +0000
asID: 30900
IP address blocks: 82.21.218.0/24 maxlen: 24
82.21.248.0/24 maxlen: 24
82.22.214.0/24 maxlen: 24
82.22.223.0/24 maxlen: 24
82.22.248.0/24 maxlen: 24
82.23.202.0/24 maxlen: 24
82.23.225.0/24 maxlen: 24
82.23.238.0/24 maxlen: 24
82.24.221.0/24 maxlen: 24
82.24.237.0/24 maxlen: 24
82.24.248.0/24 maxlen: 24
82.25.213.0/24 maxlen: 24
82.25.215.0/24 maxlen: 24
82.25.235.0/24 maxlen: 24
82.25.248.0/24 maxlen: 24
82.26.248.0/24 maxlen: 24
82.26.249.0/24 maxlen: 24
82.27.249.0/24 maxlen: 24
82.29.214.0/24 maxlen: 24
82.29.235.0/24 maxlen: 24
82.29.247.0/24 maxlen: 24
82.29.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2a:ec:b5:e9:d5:ee:a4:28:29:26:b2:a5:80:87:bd:1c:f5:32:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 31 23:58:33 2025 GMT
Not After : Jul 31 00:03:33 2026 GMT
Subject: CN=F9FA5E9A8C2F2C077FECAC824243FC379938742C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:c7:50:13:5a:48:f4:48:70:51:d6:c2:fd:
a7:82:d5:6e:a7:f1:54:3d:15:e7:b1:1f:10:f6:ef:
3c:17:e1:0f:bd:a5:7d:60:bc:22:1d:23:88:de:14:
eb:42:32:6d:0f:d2:7d:1b:90:54:64:6e:9e:08:c2:
ac:19:f5:b2:97:61:72:42:ec:f1:8b:4b:d1:c3:df:
3e:95:e0:d4:e0:b8:78:aa:37:02:83:70:38:d1:e7:
41:7b:6a:5d:7c:92:76:30:52:84:7c:7b:f1:70:b2:
ba:c3:28:f1:be:cd:61:6f:2c:02:86:d7:48:93:f9:
6d:f3:c2:9f:48:99:43:bf:7d:82:aa:65:cf:e8:4a:
d9:ea:c1:cb:d1:a2:68:8e:fa:c7:97:9a:3b:8d:0b:
b9:3f:ce:13:59:de:ed:30:16:c6:d6:6c:31:7e:5f:
5d:93:80:cc:dd:c9:91:05:78:98:fe:27:e9:49:6d:
b4:30:60:3a:c5:04:01:44:ef:6d:10:ae:c8:cf:f6:
86:79:0f:af:ac:e7:4e:b1:8d:98:ab:c9:84:02:e6:
84:85:37:74:89:37:f4:01:2e:2a:57:a6:54:40:45:
bc:20:a6:8c:7c:56:7d:a9:98:4a:33:eb:dd:af:15:
e9:b4:be:6c:be:5e:83:00:5c:23:9f:87:c1:17:1a:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:5E:9A:8C:2F:2C:07:7F:EC:AC:82:42:43:FC:37:99:38:74:2C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.218.0/24
82.21.248.0/24
82.22.214.0/24
82.22.223.0/24
82.22.248.0/24
82.23.202.0/24
82.23.225.0/24
82.23.238.0/24
82.24.221.0/24
82.24.237.0/24
82.24.248.0/24
82.25.213.0/24
82.25.215.0/24
82.25.235.0/24
82.25.248.0/24
82.26.248.0/23
82.27.249.0/24
82.29.214.0/24
82.29.235.0/24
82.29.247.0-82.29.248.255
Signature Algorithm: sha256WithRSAEncryption
56:d9:19:7c:ee:38:4b:22:f7:47:1c:2d:ca:89:8e:8b:94:48:
6d:c4:b1:63:00:c4:5f:a0:b9:f6:dd:a7:a0:0a:13:08:18:e3:
09:6c:04:fb:82:ac:bc:36:c3:2f:55:2b:b5:58:7a:37:4c:91:
67:a4:dd:f6:cf:2d:59:0c:bf:a8:3d:96:0e:d8:0b:b6:4a:d1:
d1:09:2e:cb:22:1b:b7:84:32:b8:6f:7b:87:fb:b6:21:c2:4b:
f5:66:0b:a6:46:b8:8d:be:14:4b:2b:88:be:2a:2a:81:ff:f6:
c0:73:85:8a:a1:96:c7:23:85:42:0e:9d:96:e9:eb:02:51:e6:
89:c8:f7:97:1a:bd:7b:36:7c:25:8d:d2:36:8e:14:14:71:44:
84:bd:64:42:e7:05:86:41:e4:f5:02:dd:e2:3d:09:85:8a:6b:
ab:c7:96:85:7f:bb:0b:93:0a:ea:e3:11:a5:15:b7:8e:6a:cc:
8a:cf:59:26:65:91:43:0f:45:94:73:87:8b:95:47:eb:4e:49:
7e:35:a9:07:ce:1f:4e:72:4b:c2:4e:81:05:3a:c2:51:67:a4:
03:62:de:5d:08:36:82:01:9b:03:00:c6:9e:13:d4:a6:c5:51:
44:45:dc:20:e2:ce:cc:9f:c4:27:b8:20:4a:ee:50:f9:b5:7c:
30:5d:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:35 2025 by rpki-client