Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS30456.roa
File: AS30456.roa (raw, json)
Hash identifier: xgMvQBT1+Yrw4EKTSExOz327fRz0sl212egkPtLVXrI=
Subject key identifier: 61:88:71:F6:61:70:8D:02:B4:86:C1:25:06:D5:9C:E9:57:10:02:43
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 577A8B1A4FA4C4C9647E3F87ACF47B3DEB0AED79
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS30456.roa
Signing time: Tue 07 Oct 2025 19:08:02 +0000
ROA not before: Tue 07 Oct 2025 19:03:02 +0000
ROA not after: Tue 06 Oct 2026 19:08:02 +0000
asID: 30456
IP address blocks: 85.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7a:8b:1a:4f:a4:c4:c9:64:7e:3f:87:ac:f4:7b:3d:eb:0a:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 7 19:03:02 2025 GMT
Not After : Oct 6 19:08:02 2026 GMT
Subject: CN=618871F661708D02B486C12506D59CE957100243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:ee:09:97:04:79:a1:ee:e1:c6:e9:6e:a0:
73:70:15:40:22:8e:5e:f7:a3:f6:e9:25:ff:14:78:
6a:84:f9:8e:ab:2f:7d:96:cf:70:77:4e:5a:50:cd:
5e:62:56:60:34:82:93:4b:6d:98:22:2c:bb:aa:e5:
23:8f:b2:69:d5:24:ec:3d:f3:60:8d:b7:16:7e:52:
c8:d4:27:7c:c7:8e:77:9f:89:c0:98:56:d5:9e:ba:
92:af:6c:53:ec:ba:ff:f2:46:95:b5:ca:46:a3:19:
0f:d2:04:98:b0:86:a4:c0:26:6d:cb:74:e4:7c:fc:
05:07:bd:08:2f:58:ff:23:66:07:83:9f:29:98:24:
ef:e9:12:b0:59:ac:28:80:f2:f9:03:4d:9f:89:54:
e1:3b:f0:8a:f0:52:b6:b6:a9:04:50:65:8a:fd:ce:
e8:70:60:6e:e3:46:52:18:b4:b9:73:fb:d6:7c:b6:
ec:cd:44:f3:f3:66:24:93:a7:e4:aa:1e:44:dc:1b:
a5:bb:0a:1e:9c:fb:0f:8b:7b:79:5f:e3:ad:e5:47:
ce:33:fc:8d:e8:5a:cf:48:8e:f1:e5:30:d4:9b:64:
c1:cc:04:3a:99:67:e1:16:db:3c:69:e9:4f:e2:ea:
3e:53:ab:3f:d2:25:d7:34:e2:21:35:37:3e:25:4d:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:71:F6:61:70:8D:02:B4:86:C1:25:06:D5:9C:E9:57:10:02:43
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS30456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:33:e8:e7:af:de:dd:e5:8a:b9:ce:9c:d0:47:49:9b:b8:82:
19:dd:5a:ec:7c:0c:85:08:9f:f1:06:fe:64:b1:e4:9f:ad:9f:
63:21:fc:d5:ef:d1:52:46:ee:eb:66:7e:8a:69:da:fe:61:a5:
7e:08:9f:5e:ae:11:e6:d6:9b:9b:7f:47:b3:57:49:2a:5d:d5:
e3:e1:aa:c9:7f:50:59:f6:d5:68:54:1c:10:bc:ef:96:75:bd:
24:f1:68:5e:1f:03:7d:46:b3:db:47:cd:a2:5e:ba:a7:77:5a:
42:c4:47:57:c5:5e:29:83:aa:56:19:4b:12:56:85:1f:52:37:
38:9d:7e:25:5e:01:77:43:32:a6:32:01:96:ed:d5:c8:0d:02:
8b:33:4c:44:1c:cc:49:46:8a:64:75:5c:47:62:31:cc:13:97:
b4:f4:b4:2a:56:6d:5f:e1:7c:d0:d9:17:10:74:ae:6e:17:e3:
47:c3:55:4b:a2:ce:a2:0c:7f:cf:12:12:00:6a:26:80:36:d4:
0b:11:55:11:2b:4d:25:f2:62:60:b2:e9:d1:70:97:17:f1:3d:
20:8d:8e:f9:3f:78:74:f1:8a:74:e1:72:1f:b8:ec:33:4a:fb:
3d:8f:b1:96:66:98:18:54:a0:cb:7f:f4:b7:14:27:b8:71:b3:
6b:e0:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:35 2025 by rpki-client