Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: gCDL+4wex6Gp6wcL1ZoNe3jXBHWhBL9WMfNeOylFA64=
Subject key identifier: 96:BB:CF:71:D7:71:C8:A6:04:DD:06:CF:AE:AE:74:7A:44:EB:00:D6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65DA537104AE33F30A635868446C43264174212A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
Signing time: Tue 21 Jul 2026 07:34:03 +0000
ROA not before: Tue 21 Jul 2026 07:29:03 +0000
ROA not after: Tue 20 Jul 2027 07:34:03 +0000
asID: 30058
IP address blocks: 82.21.1.0/24 maxlen: 24
82.21.253.0/24 maxlen: 24
82.21.254.0/24 maxlen: 24
82.22.254.0/24 maxlen: 24
82.23.244.0/24 maxlen: 24
82.24.254.0/24 maxlen: 24
82.25.254.0/24 maxlen: 24
82.26.78.0/23 maxlen: 24
82.26.254.0/24 maxlen: 24
82.26.255.0/24 maxlen: 24
82.27.254.0/24 maxlen: 24
82.27.255.0/24 maxlen: 24
82.29.253.0/24 maxlen: 24
82.29.254.0/24 maxlen: 24
82.41.41.0/24 maxlen: 24
82.47.245.0/24 maxlen: 24
2a13:9500:10a::/48 maxlen: 48
2a13:9500:197::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:da:53:71:04:ae:33:f3:0a:63:58:68:44:6c:43:26:41:74:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 07:29:03 2026 GMT
Not After : Jul 20 07:34:03 2027 GMT
Subject: CN=96BBCF71D771C8A604DD06CFAEAE747A44EB00D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:b7:d0:4a:51:1e:82:d9:46:25:d3:2a:78:
f5:56:f3:8a:e0:88:4d:72:52:2c:d1:e6:b8:c7:1a:
59:42:96:d9:de:10:92:70:c8:0e:15:7f:4f:d4:d2:
83:20:24:d6:96:33:5a:58:14:aa:c2:f1:1f:6d:65:
32:d5:c2:52:ec:ae:91:40:cf:d9:b8:e7:89:df:08:
f8:12:9f:8c:16:db:3e:7a:15:dd:30:c5:84:75:74:
88:a4:06:30:1a:c4:4d:b6:68:f3:6e:76:05:dd:ef:
86:c3:6a:de:5b:42:8b:ac:8b:6e:5d:b8:10:02:e1:
61:ef:bd:1d:1a:37:b7:92:01:f1:9c:78:65:cd:bb:
fd:31:56:60:f1:a8:18:5e:ce:ab:3d:10:f4:21:cb:
93:5a:74:77:9b:55:71:38:63:f6:08:ae:f7:76:76:
49:e2:93:6b:94:9b:36:98:99:d6:a2:c4:34:49:20:
09:7d:da:76:c8:2d:72:8f:bd:4a:e2:c3:1e:f5:c0:
4b:3b:fe:56:14:33:c5:92:03:fd:a1:5e:c4:cf:7a:
f4:e2:a0:60:fe:ff:95:bb:93:f0:79:96:5a:f4:e8:
b5:42:5b:9b:ad:39:71:83:7a:78:6d:4c:ec:89:aa:
c4:4a:ea:71:b7:6e:82:6f:92:50:a6:2c:eb:a6:89:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:CF:71:D7:71:C8:A6:04:DD:06:CF:AE:AE:74:7A:44:EB:00:D6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.1.0/24
82.21.253.0-82.21.254.255
82.22.254.0/24
82.23.244.0/24
82.24.254.0/24
82.25.254.0/24
82.26.78.0/23
82.26.254.0/23
82.27.254.0/23
82.29.253.0-82.29.254.255
82.41.41.0/24
82.47.245.0/24
IPv6:
2a13:9500:10a::/48
2a13:9500:197::/48
Signature Algorithm: sha256WithRSAEncryption
58:b5:11:2d:b1:6b:8e:36:4c:9f:df:4c:89:f3:50:a2:de:9b:
39:b2:3a:a7:23:80:c4:14:7b:75:dc:d6:0c:44:6d:84:75:0d:
6d:fd:0c:c4:90:19:c3:ee:bb:67:5e:4d:5c:d3:e3:84:62:81:
07:96:6f:41:e5:9a:c6:fc:0d:5d:75:0b:45:d6:78:bc:ff:93:
97:b7:82:4e:c9:61:43:bb:10:17:8b:9d:38:0a:3d:5b:95:8a:
f4:71:7e:1e:da:42:d0:44:5c:a6:1e:99:04:2f:29:de:1b:10:
34:ec:6b:b6:98:02:f2:36:94:a8:47:92:47:76:03:bc:b5:8e:
09:3c:8f:9b:75:a6:c3:c6:1e:c8:d6:c6:f2:f6:a9:8a:98:64:
b1:8e:bc:8f:9b:b4:bb:43:5a:1a:1e:79:04:3a:31:bc:ff:bd:
66:f1:b6:84:16:25:4e:07:c3:10:6f:ef:43:09:d1:ff:cd:44:
b5:71:bb:2e:dd:fe:88:c3:80:57:10:6b:59:29:b9:c0:90:ff:
39:f6:b9:7f:d6:59:8b:5a:2f:e6:7e:76:4e:39:b8:78:42:d6:
11:13:ca:bc:3d:fb:e9:39:a3:a1:e7:b4:5b:cf:e9:3d:c7:4b:
cd:14:a1:87:0c:53:2c:c4:74:6d:7b:c0:32:d1:dd:a4:d6:eb:
3b:9d:7c:fe
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUZdpTcQSuM/MKY1hoRGxDJkF0ISowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjEwNzI5MDNaFw0yNzA3MjAwNzM0MDNaMDMxMTAvBgNV
BAMTKDk2QkJDRjcxRDc3MUM4QTYwNEREMDZDRkFFQUU3NDdBNDRFQjAwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lLfQSlEegtlGJdMqePVW84rg
iE1yUizR5rjHGllCltneEJJwyA4Vf0/U0oMgJNaWM1pYFKrC8R9tZTLVwlLsrpFA
z9m454nfCPgSn4wW2z56Fd0wxYR1dIikBjAaxE22aPNudgXd74bDat5bQousi25d
uBAC4WHvvR0aN7eSAfGceGXNu/0xVmDxqBhezqs9EPQhy5NadHebVXE4Y/YIrvd2
dknik2uUmzaYmdaixDRJIAl92nbILXKPvUriwx71wEs7/lYUM8WSA/2hXsTPevTi
oGD+/5W7k/B5llr06LVCW5utOXGDenhtTOyJqsRK6nG3boJvklCmLOumiYZBAgMB
AAGjggJ2MIICcjAdBgNVHQ4EFgQUlrvPcddxyKYE3QbPrq50ekTrANYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzAwNTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgYsGCCsGAQUFBwEHAQH/BHwwejBeBAIAATBYAwQAUhUB
MAwDBABSFf0DBABSFf4DBABSFv4DBABSF/QDBABSGP4DBABSGf4DBAFSGk4DBAFS
Gv4DBAFSG/4wDAMEAFId/QMEAFId/gMEAFIpKQMEAFIv9TAYBAIAAjASAwcAKhOV
AAEKAwcAKhOVAAGXMA0GCSqGSIb3DQEBCwUAA4IBAQBYtREtsWuONkyf30yJ81Ci
3ps5sjqnI4DEFHt13NYMRG2EdQ1t/QzEkBnD7rtnXk1c0+OEYoEHlm9B5ZrG/A1d
dQtF1ni8/5OXt4JOyWFDuxAXi504Cj1blYr0cX4e2kLQRFymHpkELyneGxA07Gu2
mALyNpSoR5JHdgO8tY4JPI+bdabDxh7I1sby9qmKmGSxjryPm7S7Q1oaHnkEOjG8
/71m8baEFiVOB8MQb+9DCdH/zUS1cbsu3f6Iw4BXEGtZKbnAkP859rl/1lmLWi/m
fnZOObh4QtYRE8q8PfvpOaOh57Rbz+k9x0vNFKGHDFMsxHRte8Ay0d2k1us7nXz+
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:56:41 2026 by rpki-client