Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: kJsV/el5h49XPgEfpR80VPvmeO+t71PBzrixxRfWLM4=
Subject key identifier: 8E:EE:72:7A:EF:CA:9E:F7:B3:D9:BC:1E:FC:22:E8:D4:DB:BD:6C:9E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5C37EE8A3FD05BA841A80B9211D651F0A550A6EE
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
Signing time: Mon 16 Mar 2026 15:46:48 +0000
ROA not before: Mon 16 Mar 2026 15:41:48 +0000
ROA not after: Mon 15 Mar 2027 15:46:48 +0000
asID: 30058
IP address blocks: 45.157.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:37:ee:8a:3f:d0:5b:a8:41:a8:0b:92:11:d6:51:f0:a5:50:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 16 15:41:48 2026 GMT
Not After : Mar 15 15:46:48 2027 GMT
Subject: CN=8EEE727AEFCA9EF7B3D9BC1EFC22E8D4DBBD6C9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:b5:ea:ae:66:52:8f:f7:b4:2a:05:d0:68:
bb:9e:eb:d7:6b:7d:e3:fc:8b:db:a5:1d:1d:c1:a3:
e3:98:a4:a2:49:e3:63:32:c3:19:4b:d3:4b:62:36:
07:c0:84:c9:9a:99:41:c7:4d:7d:8b:8d:9a:7e:9b:
df:d2:a1:cb:dd:31:4e:be:a3:a5:6d:b9:1b:4a:00:
1b:48:77:a0:d8:05:a3:95:e6:b0:c5:4b:10:2c:c6:
f0:83:96:5c:8d:45:6e:62:0f:69:fd:14:dc:53:40:
ab:55:87:03:22:2b:c6:ad:0c:05:9f:36:9b:cc:0e:
e4:07:32:f3:ac:7a:8e:66:e1:24:f9:a3:81:21:6d:
e0:85:c2:c0:5a:e1:87:a6:93:a4:90:f0:cc:87:e0:
c8:3d:34:e9:bc:03:43:5d:95:f9:af:7c:73:d8:44:
8e:cb:2c:9b:72:b0:e1:19:02:7c:71:38:54:6a:10:
57:e1:c3:c0:05:ab:80:7c:3d:fd:ce:73:5b:ca:01:
38:43:25:73:a0:a3:f6:bc:ee:e3:ae:06:00:70:b9:
57:88:9e:33:8f:5f:84:ad:8a:5c:e1:a5:86:39:1b:
2c:78:93:bc:d3:af:75:77:50:a3:bc:f6:f3:01:d0:
c3:fa:fe:1f:bb:fe:88:da:1d:0d:b5:7f:d8:f4:df:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:72:7A:EF:CA:9E:F7:B3:D9:BC:1E:FC:22:E8:D4:DB:BD:6C:9E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1c:9c:6d:84:e0:e8:74:64:95:be:df:20:d3:09:fc:0b:89:
80:4c:11:40:6d:f0:e4:3e:98:bb:fc:65:dd:e7:a8:0f:c7:ff:
24:78:56:01:b4:6a:97:c8:58:4f:9d:bf:22:89:59:81:b6:8a:
de:7c:5b:9b:de:eb:0d:72:5e:03:73:de:d0:b9:b4:b9:4d:e8:
37:ba:f8:df:8f:a2:35:7a:74:30:01:56:ba:1e:b5:81:3f:fb:
62:ee:9a:e2:5c:8a:b0:d6:d2:cd:49:ff:de:42:2e:06:ed:24:
e1:59:00:a9:80:ea:47:21:21:18:ec:f5:4f:cb:bc:7c:24:e4:
9a:bc:7f:9a:95:99:5b:37:03:a9:b5:55:64:18:a0:7a:7b:f0:
df:42:53:f2:f2:1d:d0:fa:8f:25:2b:f4:c2:9c:9a:44:ff:72:
fe:9f:2c:3f:16:06:cb:6b:66:12:f2:37:7e:58:fb:d4:80:35:
b9:76:4a:ac:7b:af:00:55:fe:79:2b:f0:09:3f:66:0a:6d:79:
67:a1:bd:eb:81:c5:06:fd:e1:12:c8:8b:47:14:b1:9e:f7:69:
63:bc:9e:01:e3:ee:f8:93:dc:30:23:a0:fe:86:0f:e4:4b:20:
c2:84:49:25:65:53:89:48:89:a1:2d:8c:35:4a:8b:09:e2:fe:
8e:db:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:21 2026 by rpki-client