Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: Mo2sjzK76+GyDYC4J3kzf6fnJVTMD16yB55/qFN4c28=
Subject key identifier: F5:3F:5A:EA:80:AF:0E:29:96:6E:60:3D:FC:51:78:D8:B2:F1:77:56
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 56826D9EF724A3278A30CFA2B6753D6EBB41A2F3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
Signing time: Mon 16 Mar 2026 16:08:27 +0000
ROA not before: Mon 16 Mar 2026 16:03:27 +0000
ROA not after: Mon 15 Mar 2027 16:08:27 +0000
asID: 30058
IP address blocks: 181.214.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:82:6d:9e:f7:24:a3:27:8a:30:cf:a2:b6:75:3d:6e:bb:41:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 16 16:03:27 2026 GMT
Not After : Mar 15 16:08:27 2027 GMT
Subject: CN=F53F5AEA80AF0E29966E603DFC5178D8B2F17756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:36:c9:a0:49:53:26:8a:ad:ba:29:8d:40:
3c:4c:8a:22:bf:0a:56:7e:5f:9c:d9:cb:4b:3e:f7:
d6:7c:8a:5e:82:e3:c3:18:1e:de:91:fd:90:63:4d:
9e:9d:71:5f:46:4c:34:27:84:aa:aa:94:7a:cf:e4:
1a:ab:bd:3d:f2:77:b4:98:0e:e3:ef:96:c6:81:51:
3c:a6:a9:b1:55:13:c4:f2:0c:be:aa:74:6e:aa:cf:
82:1b:a8:20:ca:49:16:6b:d1:8c:87:a0:e8:5b:10:
ab:2d:5f:28:76:82:bd:a3:ac:f7:6d:03:8b:71:3e:
8e:68:63:10:02:a5:d8:25:35:13:8d:4f:2d:e7:ba:
4d:51:02:58:49:9e:c0:01:73:27:20:b9:99:d2:b7:
58:25:a6:23:2a:0d:6b:14:9b:e4:80:16:0c:1c:90:
ca:f1:ee:0e:33:ed:05:fa:5b:68:ff:18:23:e5:85:
ea:2d:b2:a9:30:16:e9:cb:e5:0c:4c:eb:b0:ba:dc:
75:b5:e6:35:f9:a0:01:3e:a4:2f:54:d6:f6:21:1f:
a0:d7:fc:aa:e2:88:0f:d4:c7:74:d3:d8:09:02:14:
56:72:90:00:0c:9c:3d:98:1b:48:ce:d2:42:7b:20:
33:7e:70:62:ab:80:81:be:36:7f:6c:b0:e2:6f:79:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:5A:EA:80:AF:0E:29:96:6E:60:3D:FC:51:78:D8:B2:F1:77:56
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1a:d4:81:82:b0:58:b7:bf:d3:95:7a:62:2c:b5:8e:c0:69:
e3:91:c1:b2:48:7f:20:03:82:64:91:9d:17:f4:ab:d4:3b:17:
44:31:64:16:2c:c0:c0:4d:51:b1:17:a2:64:4d:7e:10:28:46:
b8:c4:44:a9:05:22:fa:f3:a9:ea:f5:66:61:c1:1b:65:06:cc:
24:fe:b6:b7:08:6e:f4:1d:02:d2:2e:c1:45:82:e1:5e:e4:26:
f7:00:4d:dd:9f:2e:db:88:d8:54:4d:5e:c7:48:76:82:31:a4:
a2:82:c6:05:f7:98:6f:e5:25:76:2e:4f:9a:28:be:49:17:3e:
da:99:5f:98:49:48:0b:1a:74:d6:87:24:de:ba:70:cb:f2:fa:
d1:a5:bc:17:f4:49:36:7c:7b:dc:a7:35:aa:4b:49:9c:05:01:
61:6c:fb:8d:1d:54:be:3d:4a:e8:bb:b4:b7:63:d2:6e:4c:85:
1a:f7:e7:23:aa:5b:96:17:34:2c:f4:86:4b:d4:a9:6e:99:01:
7f:ae:1f:d0:88:88:b6:55:bf:9d:48:d6:97:17:7e:40:1d:1c:
ba:6f:02:d1:7f:47:43:54:ef:11:3b:ee:b6:b9:f1:46:04:bd:
f6:81:67:3d:23:73:24:8e:98:cb:a3:f2:3d:89:2a:96:7d:31:
bf:bf:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:14 2026 by rpki-client