Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: nlX8YZgUHwUud+iutz/xreqzeuKfRnrlQSX/bYeVItg=
Subject key identifier: 82:F9:10:0C:17:AF:41:28:CA:11:5A:E6:6D:45:B5:2F:B2:07:D5:D1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 12C2296F5B6C314DAB75D44ED0DF3961FD2B8C0A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
Signing time: Mon 27 Apr 2026 08:16:15 +0000
ROA not before: Mon 27 Apr 2026 08:11:15 +0000
ROA not after: Mon 26 Apr 2027 08:16:15 +0000
asID: 30058
IP address blocks: 95.135.18.0/24 maxlen: 24
95.135.24.0/24 maxlen: 24
95.135.37.0/24 maxlen: 24
178.92.92.0/24 maxlen: 24
178.93.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c2:29:6f:5b:6c:31:4d:ab:75:d4:4e:d0:df:39:61:fd:2b:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 27 08:11:15 2026 GMT
Not After : Apr 26 08:16:15 2027 GMT
Subject: CN=82F9100C17AF4128CA115AE66D45B52FB207D5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:64:9e:03:12:07:41:ab:5a:d6:ac:07:12:
e8:0e:08:4e:1a:a2:ab:a3:1a:e3:cc:0e:a9:0e:31:
ca:03:2b:0b:b7:26:95:f9:60:a1:7c:25:4e:75:67:
59:82:1c:00:3e:2c:1c:7f:8e:70:a7:61:3e:57:0f:
15:12:91:a2:66:d9:f6:62:47:93:88:4e:b8:20:de:
44:7a:35:d7:26:1b:d0:00:23:0d:4d:d1:e9:24:75:
d7:bd:53:66:7e:12:cc:34:1b:c7:c9:ff:5b:90:5c:
5e:6b:6e:b7:d8:8c:40:35:c8:79:83:23:f2:08:e4:
a2:0e:aa:6f:f1:d4:43:ed:f0:98:7a:d8:f5:85:5b:
42:00:59:0b:6d:7c:86:04:7e:49:60:f9:b0:9f:20:
58:9b:47:84:52:5d:84:e9:e1:a4:57:96:f2:65:9f:
6f:75:06:47:21:b8:c0:f9:96:c3:10:53:b6:78:09:
fb:85:23:1a:56:60:f5:8b:a8:eb:7a:97:91:0c:d7:
ec:79:87:4b:11:c7:e9:51:bd:d8:d1:41:84:2e:4f:
7f:44:44:db:68:03:c1:63:53:df:c5:d3:a0:e3:ac:
da:e8:a3:41:b5:28:6e:7d:15:cb:5c:33:24:15:80:
c2:7c:e3:8b:3e:71:81:3b:df:ab:63:58:c8:a9:16:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:10:0C:17:AF:41:28:CA:11:5A:E6:6D:45:B5:2F:B2:07:D5:D1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.18.0/24
95.135.24.0/24
95.135.37.0/24
178.92.92.0/24
178.93.160.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ad:b4:fb:80:f2:13:06:74:e6:02:96:c1:3b:24:17:22:e7:
2f:5b:1a:49:70:43:97:bc:1d:bf:1a:35:73:70:2e:72:8b:80:
c4:03:42:20:c9:86:6a:e0:8c:82:7c:5e:70:f1:8c:ac:8b:0b:
b7:61:c1:91:cb:5f:23:5d:63:53:3e:5a:7b:9b:44:09:5d:a9:
8e:28:10:9f:9d:7c:37:be:e4:0d:82:f0:55:7d:72:66:93:a9:
fa:1d:5f:dc:17:78:73:20:af:29:68:5a:ac:1a:59:a0:ef:04:
d3:f1:38:bc:cf:fe:dc:ca:3a:b1:a0:25:99:0f:4e:d8:db:61:
71:53:5e:65:fe:68:c9:d5:4c:7d:65:81:2a:8c:66:d9:83:ff:
41:f9:d0:6c:bd:18:86:2d:d7:13:3d:33:9c:8d:64:a9:ac:d7:
66:51:6f:61:31:8f:53:a8:89:72:18:fa:41:a4:b7:6e:09:22:
d9:c5:88:35:f3:12:eb:6d:d1:bf:ec:38:ba:53:be:ba:e1:9d:
9d:4c:62:7c:88:42:22:21:c6:20:46:96:b9:9e:ec:e7:9a:5b:
c1:cd:88:c5:8e:fd:08:00:1f:8a:b3:cd:ba:46:56:e6:cd:0b:
04:d8:9f:43:b8:61:95:74:45:37:5f:d6:8b:68:bd:8f:65:4e:
b9:70:d2:b4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUEsIpb1tsMU2rddRO0N85Yf0rjAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA0MjcwODExMTVaFw0yNzA0MjYwODE2MTVaMDMxMTAvBgNV
BAMTKDgyRjkxMDBDMTdBRjQxMjhDQTExNUFFNjZENDVCNTJGQjIwN0Q1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFWGSeAxIHQata1qwHEugOCE4a
oqujGuPMDqkOMcoDKwu3JpX5YKF8JU51Z1mCHAA+LBx/jnCnYT5XDxUSkaJm2fZi
R5OITrgg3kR6NdcmG9AAIw1N0ekkdde9U2Z+Esw0G8fJ/1uQXF5rbrfYjEA1yHmD
I/II5KIOqm/x1EPt8Jh62PWFW0IAWQttfIYEfklg+bCfIFibR4RSXYTp4aRXlvJl
n291BkchuMD5lsMQU7Z4CfuFIxpWYPWLqOt6l5EM1+x5h0sRx+lRvdjRQYQuT39E
RNtoA8FjU9/F06DjrNroo0G1KG59FctcMyQVgMJ844s+cYE736tjWMipFpu3AgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUgvkQDBevQSjKEVrmbUW1L7IH1dEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzAwNTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABfhxID
BABfhxgDBABfhyUDBACyXFwDBACyXaAwDQYJKoZIhvcNAQELBQADggEBAJCttPuA
8hMGdOYClsE7JBci5y9bGklwQ5e8Hb8aNXNwLnKLgMQDQiDJhmrgjIJ8XnDxjKyL
C7dhwZHLXyNdY1M+WnubRAldqY4oEJ+dfDe+5A2C8FV9cmaTqfodX9wXeHMgrylo
WqwaWaDvBNPxOLzP/tzKOrGgJZkPTtjbYXFTXmX+aMnVTH1lgSqMZtmD/0H50Gy9
GIYt1xM9M5yNZKms12ZRb2Exj1OoiXIY+kGkt24JItnFiDXzEutt0b/sOLpTvrrh
nZ1MYnyIQiIhxiBGlrme7OeaW8HNiMWO/QgAH4qzzbpGVubNCwTYn0O4YZV0RTdf
1otovY9lTrlw0rQ=
-----END CERTIFICATE-----
Generated at Wed May 13 00:09:34 2026 by rpki-client