Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: Pxjfhef9ULXTtPnGS41bPUkSXGsXYbMcXWU/K4vzcCE=
Subject key identifier: 47:E9:AC:9C:B5:ED:94:FA:8B:4D:8C:02:3C:A6:C8:C9:AB:1A:B4:47
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1472EC9A4E3FE6C0AF7D8EF57ED198BFBFFF2A33
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
Signing time: Tue 09 Jun 2026 10:08:09 +0000
ROA not before: Tue 09 Jun 2026 10:03:09 +0000
ROA not after: Tue 08 Jun 2027 10:08:09 +0000
asID: 30058
IP address blocks: 51.146.24.0/22 maxlen: 24
51.146.28.0/22 maxlen: 24
51.146.180.0/22 maxlen: 24
51.194.194.0/24 maxlen: 24
51.241.12.0/22 maxlen: 24
51.241.24.0/22 maxlen: 24
51.241.32.0/22 maxlen: 24
51.241.152.0/22 maxlen: 24
51.241.172.0/22 maxlen: 24
51.241.176.0/22 maxlen: 24
51.241.224.0/22 maxlen: 24
51.241.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:72:ec:9a:4e:3f:e6:c0:af:7d:8e:f5:7e:d1:98:bf:bf:ff:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 9 10:03:09 2026 GMT
Not After : Jun 8 10:08:09 2027 GMT
Subject: CN=47E9AC9CB5ED94FA8B4D8C023CA6C8C9AB1AB447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:0b:ca:af:2f:c6:25:5f:3c:7b:82:6d:cf:
a6:e5:72:1d:ff:b1:7c:49:34:d8:e4:3e:db:14:b0:
4b:63:10:a6:31:58:13:e5:6e:71:f8:82:3f:29:55:
cf:76:90:ee:ee:8b:f5:01:68:fb:4c:2e:1d:53:a1:
7a:da:79:a8:b5:1e:6f:57:c3:ef:69:f7:6e:49:f9:
53:4e:eb:6c:81:41:cf:72:f9:77:3c:50:d9:21:02:
4a:11:1c:43:d6:05:ab:d8:ce:e3:ce:7a:0d:80:00:
80:2c:a6:74:a3:75:31:10:d1:22:07:14:72:0b:7f:
6c:4d:cc:aa:06:29:09:9c:19:c0:a2:18:a1:d6:33:
4d:41:1b:ff:0f:18:e4:3e:51:7f:ee:aa:5e:7a:84:
79:df:6c:1b:d9:23:b8:48:58:ca:f3:eb:23:d5:99:
06:1c:91:16:cb:7d:84:b2:8b:94:5a:c6:2c:9b:db:
cf:44:3e:c2:5e:a5:22:23:67:dc:69:f1:0d:df:13:
f1:58:ba:1a:f5:9f:9b:29:b7:10:b9:02:d7:34:f5:
58:53:33:37:20:05:f0:09:d9:13:46:26:ee:1e:66:
00:cb:85:c8:af:d9:cb:f1:b2:e2:a2:c7:f0:73:37:
65:df:0a:a2:3c:ce:50:b9:4b:2f:b5:4d:74:c9:35:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:AC:9C:B5:ED:94:FA:8B:4D:8C:02:3C:A6:C8:C9:AB:1A:B4:47
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.24.0/21
51.146.180.0/22
51.194.194.0/24
51.241.12.0/22
51.241.24.0/22
51.241.32.0/22
51.241.152.0/22
51.241.172.0-51.241.179.255
51.241.224.0/22
51.241.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9e:25:aa:1f:b0:a7:9d:ea:c8:43:6b:c6:1a:12:47:aa:b4:
dd:09:7c:ed:65:89:9d:0e:1b:7f:28:c1:b9:0c:a2:3a:94:d8:
14:19:d1:e8:7a:30:4a:17:b3:4a:3c:86:50:1f:4d:ed:a8:fa:
11:a7:c7:be:05:8c:fd:dc:81:b9:40:8d:21:9f:7b:3b:75:16:
9a:9b:8a:3a:70:80:cb:8d:7f:64:82:b6:c4:b0:91:36:3e:f0:
bc:be:a5:15:ca:a9:c4:42:d6:47:fd:06:ea:c1:57:e9:01:9d:
7e:5e:9c:60:41:f3:bf:23:4f:23:83:a7:44:9e:e7:34:3c:92:
a9:47:d5:0f:78:4c:45:b6:6d:87:30:b9:1c:df:47:8a:0c:2f:
34:2a:01:3a:81:cd:31:0d:00:24:7e:84:8d:cb:03:32:5d:42:
dd:8e:8b:97:80:b5:af:14:88:59:d3:0d:ca:24:64:95:c2:11:
56:26:28:3a:e8:d1:79:d5:2f:b0:f3:1a:fe:80:36:82:6c:2f:
0f:9c:1f:66:8a:e1:60:87:bd:48:c8:24:40:4c:ef:56:0b:fc:
ad:0b:5a:a6:a4:7a:82:af:b3:43:4c:c0:fe:39:9b:c6:82:c2:
5f:b1:99:25:40:73:ae:f4:71:ca:f0:d9:bb:4d:03:f5:d6:fb:
95:72:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:46 2026 by rpki-client