Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30633.roa
File: AS30633.roa (raw, json)
Hash identifier: ZSAH2/KvKsM2mc06wbF98CYsEXYJ93NaMYMV8HdfGcE=
Subject key identifier: 7E:6E:EA:B8:7A:E0:F8:8D:EE:9F:0E:8F:F7:C5:19:FE:1F:6B:4F:29
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3CD41DAC92351B4A5668BC95B5C4EC4A92961C58
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30633.roa
Signing time: Fri 22 Aug 2025 08:54:13 +0000
ROA not before: Fri 22 Aug 2025 08:49:13 +0000
ROA not after: Fri 21 Aug 2026 08:54:13 +0000
asID: 30633
IP address blocks: 91.124.141.0/24 maxlen: 24
91.124.146.0/24 maxlen: 24
91.124.253.0/24 maxlen: 24
92.113.1.0/24 maxlen: 24
92.113.3.0/24 maxlen: 24
92.113.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d4:1d:ac:92:35:1b:4a:56:68:bc:95:b5:c4:ec:4a:92:96:1c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 22 08:49:13 2025 GMT
Not After : Aug 21 08:54:13 2026 GMT
Subject: CN=7E6EEAB87AE0F88DEE9F0E8FF7C519FE1F6B4F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:de:09:e3:e3:65:75:b3:db:62:d8:56:ae:
14:51:d0:c1:2c:e7:67:7f:c2:34:f8:58:59:4d:7c:
a7:de:76:42:cd:d3:6e:0b:10:18:2d:a6:48:96:04:
56:d0:96:a9:cc:a0:ec:4e:d1:72:ed:dc:9c:3f:4d:
26:db:3f:0d:6b:f7:e7:42:44:39:67:6b:90:85:90:
d3:7c:b0:cd:d3:a1:fe:ca:05:2e:86:94:3e:3f:19:
ca:c8:c2:3c:c0:5b:ee:e0:bc:6b:3d:52:4e:e1:34:
b8:f1:44:86:ac:64:3b:30:53:b5:33:bf:66:08:7b:
0c:36:29:d3:83:c0:96:2b:b6:65:77:32:eb:e3:89:
c2:5f:bc:98:e3:b1:ca:ba:39:a8:ac:b6:a9:a6:e4:
ff:d2:2c:54:98:4c:54:d1:6b:96:f9:1f:35:b0:24:
e9:09:96:4c:3e:89:d1:64:f0:af:6c:ef:9a:e5:0d:
97:2e:ba:6f:50:07:ea:eb:34:a7:fb:f4:69:b1:3e:
4f:6a:f2:a1:28:88:95:3d:98:75:c4:51:06:a0:76:
d8:d3:2f:7a:ec:f3:64:8e:37:e9:17:09:8e:38:53:
ff:20:82:61:f2:1b:ef:15:36:9c:a7:23:b1:e6:b8:
3f:0f:36:c9:8f:6c:e3:ca:94:42:12:b1:e9:e6:e2:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:EA:B8:7A:E0:F8:8D:EE:9F:0E:8F:F7:C5:19:FE:1F:6B:4F:29
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.141.0/24
91.124.146.0/24
91.124.253.0/24
92.113.1.0/24
92.113.3.0/24
92.113.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:13:e3:57:bf:6b:68:5e:e1:bd:70:7d:de:83:64:1b:c1:cb:
ec:01:cb:80:40:06:88:6b:0f:12:60:bc:f7:c6:83:37:24:35:
84:ad:18:21:5c:f3:c7:66:36:47:24:4e:79:f3:0f:f0:39:2e:
07:e5:01:88:5b:92:5e:65:3c:82:75:cc:94:05:af:ec:4b:59:
99:f7:8d:de:b0:cd:6e:d5:7e:f1:88:33:0b:08:aa:74:71:c8:
08:32:81:ca:3e:59:74:a0:28:a7:da:ff:fd:ee:18:c1:46:68:
2e:8a:70:cd:f4:7c:b7:8e:43:3f:fd:98:df:44:1e:b2:cf:c2:
eb:6c:6d:0d:94:b7:39:31:09:06:ba:df:4f:5c:e9:47:92:de:
29:d7:54:18:85:89:d4:e8:38:fe:37:73:a4:81:02:27:1e:5d:
d6:08:c3:73:6f:3e:49:00:54:51:05:6c:3b:86:c0:4a:34:57:
ca:1b:d4:90:ad:d9:25:d1:0f:8f:65:0b:7f:f0:20:2e:f1:7f:
df:48:4e:f4:75:d7:8d:3b:04:11:7d:5c:44:d2:04:9e:34:6b:
9c:76:81:e8:5f:50:06:bf:83:ae:8f:af:d8:18:53:12:3e:15:
3f:7e:d2:9e:c9:f7:29:a1:bf:df:97:76:68:b3:53:cf:eb:6f:
b3:ce:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:17:46 2025 by rpki-client