Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa
File: AS30860.roa (raw, json)
Hash identifier: tzZrIDBO8BsOKC56GLAoOoV5kii4MPO0BGRHDUXNrDI=
Subject key identifier: 35:40:66:F8:4D:09:3A:0F:74:17:37:C7:7B:F3:ED:0B:1D:73:09:E9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2E39A541D1357E96391C4B566E6441FE27BC1DAB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa
Signing time: Thu 12 Nov 2026 11:49:41 +0000
ROA not before: Thu 12 Nov 2026 11:44:41 +0000
ROA not after: Thu 11 Nov 2027 11:49:41 +0000
asID: 30860
IP address blocks: 46.203.159.0/24 maxlen: 24
46.203.186.0/24 maxlen: 24
92.112.135.0/24 maxlen: 24
92.112.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:39:a5:41:d1:35:7e:96:39:1c:4b:56:6e:64:41:fe:27:bc:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 12 11:44:41 2026 GMT
Not After : Nov 11 11:49:41 2027 GMT
Subject: CN=354066F84D093A0F741737C77BF3ED0B1D7309E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:c3:a4:91:24:59:9a:97:69:a6:1c:e2:20:
e0:bb:26:cb:97:6e:83:cd:cc:47:e5:56:05:b6:9b:
eb:a3:e5:1c:2d:cf:87:fd:8f:f6:4a:67:f1:aa:ce:
b9:58:2d:f8:3f:21:4e:60:09:6d:ed:c7:53:96:99:
92:3f:31:c4:90:84:e0:d9:f3:0a:38:45:36:c2:e4:
f4:81:c4:28:09:d2:00:b8:7e:c4:85:42:96:b2:ad:
4a:99:f4:24:55:c9:f6:3f:17:97:9e:3c:37:f6:7b:
3b:a7:a4:2a:e1:80:09:e3:51:fd:87:38:ae:f1:11:
c1:0b:88:95:70:2e:69:75:0e:14:34:ff:b1:81:cf:
f6:e4:01:5b:59:d5:ff:20:97:94:4b:fd:e2:f8:c5:
b2:e9:ff:3c:f4:32:22:f1:4e:0d:5b:64:a5:42:4b:
06:3d:a7:86:8a:ad:9d:25:c4:a1:74:0f:92:4a:0d:
1b:97:b8:5b:72:e2:66:9e:d9:4f:d5:c9:94:e5:fd:
67:be:6d:e6:76:34:d8:37:c1:3f:05:b8:72:ca:3a:
54:a9:53:f5:47:e6:9b:73:3d:3e:32:f0:7b:3b:c6:
a7:3a:3c:50:43:b3:84:b7:bd:6d:f6:89:40:57:46:
17:f2:c1:da:f0:cd:26:01:e1:73:11:65:d5:45:ee:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:66:F8:4D:09:3A:0F:74:17:37:C7:7B:F3:ED:0B:1D:73:09:E9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.159.0/24
46.203.186.0/24
92.112.135.0/24
92.112.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:58:b5:e7:9d:8f:86:0b:b0:eb:ba:0f:c1:98:99:b7:d4:e2:
06:19:ce:be:38:a1:21:ea:8f:c0:8a:ac:e6:d7:3a:18:1a:7d:
98:96:6c:f3:a8:d0:8c:32:58:12:ac:ea:19:42:69:0c:45:a0:
8b:13:71:f8:10:70:d2:dd:f3:cf:e4:a0:99:12:72:48:56:be:
18:6f:e4:23:6f:c8:91:a4:ca:68:e9:ce:ff:30:1a:f9:79:9f:
e5:1a:3c:d6:8d:50:63:75:e3:98:ec:14:d0:aa:4b:38:de:d2:
ef:f5:2c:4f:a7:7e:64:ef:aa:6b:77:a2:45:cf:76:12:b0:24:
a4:78:0d:e2:e8:37:43:37:a3:40:14:67:ae:e2:41:45:63:d4:
30:bb:0b:3b:47:6d:0e:14:0f:46:81:3d:26:df:b9:98:a5:bc:
f0:09:2b:5b:c9:26:5a:66:a7:98:2f:5f:81:84:1a:f1:31:20:
bc:2a:7f:e7:42:b9:94:86:6f:64:6b:6a:76:23:10:63:58:8d:
92:95:95:31:fe:10:11:4d:39:d7:31:39:c8:e1:a7:57:05:7d:
95:b9:ce:40:7a:2b:68:20:ca:f8:a8:d8:5a:a2:b3:79:d4:e3:
dd:22:76:c7:5f:73:0a:bb:69:ab:c9:c5:0f:91:81:5b:07:ab:
ba:63:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:41:35 2026 by rpki-client