Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: IYOUAsmsI8fn3pBYhHoWuLSQkvhcKlNtWJD+YX69Zoo=
Subject key identifier: CD:45:E3:28:FE:7A:9B:F8:95:B0:16:3D:B6:75:5A:3C:96:E2:CE:20
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 53DF9C45F1EC5D7149EBB970F116FB00E29D00E7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
Signing time: Mon 11 May 2026 12:37:53 +0000
ROA not before: Mon 11 May 2026 12:32:53 +0000
ROA not after: Mon 10 May 2027 12:37:53 +0000
asID: 30058
IP address blocks: 51.241.12.0/22 maxlen: 24
51.241.24.0/22 maxlen: 24
51.241.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:df:9c:45:f1:ec:5d:71:49:eb:b9:70:f1:16:fb:00:e2:9d:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 11 12:32:53 2026 GMT
Not After : May 10 12:37:53 2027 GMT
Subject: CN=CD45E328FE7A9BF895B0163DB6755A3C96E2CE20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:14:c4:58:4d:79:53:3f:c0:88:dd:5a:80:72:
3f:be:c4:e8:21:2e:60:8c:31:ca:22:94:12:b2:9f:
48:73:73:c7:99:40:4c:ae:d4:48:12:87:91:30:df:
90:73:cc:ba:6a:6d:10:ba:db:b7:8e:7e:ee:a7:08:
20:1a:4e:b2:bd:66:cf:9e:bf:c7:77:82:4b:3f:61:
2a:31:b9:3a:63:50:67:99:59:07:de:eb:d0:f2:eb:
a6:54:22:29:1b:c0:71:7a:60:e6:b6:c3:6f:f1:87:
87:cd:80:ae:58:36:63:75:28:b4:5f:c8:20:2e:51:
23:87:35:da:d4:a9:da:2e:5e:07:35:7a:e2:fd:b2:
a0:b8:13:da:ad:75:00:b3:ca:83:dd:55:e1:45:12:
e9:76:90:25:b5:46:7d:00:27:0a:bc:4f:c9:02:12:
60:a5:ef:2e:d5:e2:17:59:16:d1:e0:2b:30:19:41:
a8:f4:b8:17:f4:dc:b7:6c:12:64:34:de:eb:71:2f:
d2:ae:2d:5d:ad:62:23:43:13:6a:3d:00:47:5b:bb:
fa:4a:8f:1c:d9:ee:d7:81:4d:06:a1:d2:1b:a9:2d:
d8:07:d3:6d:40:60:23:08:45:1c:2c:4a:0c:21:27:
ee:5c:56:a5:1e:1e:eb:0a:9e:46:d9:95:e2:d9:ea:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:E3:28:FE:7A:9B:F8:95:B0:16:3D:B6:75:5A:3C:96:E2:CE:20
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.12.0/22
51.241.24.0/22
51.241.32.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b6:ff:5c:a8:6d:62:1e:cc:59:4d:f6:23:16:29:92:75:ce:
03:3a:0f:65:bd:d6:75:6d:e2:d0:87:3f:15:d2:3e:bd:19:3d:
b0:ae:05:e6:0f:9a:7b:a6:e0:77:d7:28:a2:15:44:0a:23:8b:
52:dc:1e:34:fc:c4:8a:91:d4:3b:b0:18:25:95:f0:3c:09:52:
16:dd:25:d6:8c:5f:7b:9b:13:84:8a:5e:f1:ca:42:8e:ee:ea:
3e:a1:14:7b:9e:48:56:f2:af:4c:8c:ea:63:ec:1a:3d:49:d7:
b4:78:80:a2:84:e8:7f:d7:53:f4:8b:ab:42:ae:60:16:4d:54:
7a:44:7d:bf:e6:9a:2b:c6:37:91:fb:fd:3f:27:5f:51:25:07:
2b:2c:40:15:9d:72:0c:98:ed:b7:db:2a:ca:26:e5:63:a0:cf:
45:38:89:70:99:1a:d1:93:01:ef:b1:4c:e1:e7:13:c9:b1:03:
ab:48:a7:64:f7:00:f7:04:8d:01:66:82:4c:c0:51:dc:a8:f8:
9c:80:ae:21:96:53:86:fe:03:02:32:cd:31:74:2f:ee:57:88:
73:d4:cf:ec:94:cc:db:6a:52:bc:25:29:8b:03:ac:50:18:79:
d6:e4:5e:92:d7:c1:20:b0:ed:1b:2c:06:c0:de:83:5e:66:e4:
86:56:d8:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:18 2026 by rpki-client