Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: 4wZbGEyBMu3RnyAy8ZLeGKWgeXY1KWc2GlxhsR+naV8=
Subject key identifier: B3:0A:33:44:FF:52:97:62:8E:D6:D9:C2:FA:4E:3A:E1:C7:A8:22:06
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 24C843291C6E7CA4DF14E02EA067A38AC8715522
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
Signing time: Thu 20 Aug 2026 18:56:24 +0000
ROA not before: Thu 20 Aug 2026 18:51:24 +0000
ROA not after: Thu 19 Aug 2027 18:56:24 +0000
asID: 34989
IP address blocks: 155.117.16.0/24 maxlen: 24
167.148.123.0/24 maxlen: 24
168.222.15.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c8:43:29:1c:6e:7c:a4:df:14:e0:2e:a0:67:a3:8a:c8:71:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 20 18:51:24 2026 GMT
Not After : Aug 19 18:56:24 2027 GMT
Subject: CN=B30A3344FF5297628ED6D9C2FA4E3AE1C7A82206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:9b:db:e9:81:14:e6:31:54:8e:66:3b:bb:
bb:7d:59:6f:3f:22:36:79:8e:07:b4:ca:d5:76:25:
9f:f3:24:73:02:65:af:93:69:9c:a6:d5:1c:7a:54:
1a:c1:6b:43:8c:e8:77:d2:14:91:63:5d:51:44:a7:
d2:21:80:1b:66:6d:33:5a:3a:42:11:29:94:30:1c:
91:a2:62:08:8b:f2:c5:ff:60:a9:ec:b1:83:61:77:
b6:b9:b1:77:1e:a2:98:bb:f8:8e:17:cf:e9:60:64:
74:00:32:36:25:fc:33:9b:40:37:b9:da:bc:10:8e:
a4:16:12:c6:1a:8b:e9:d6:1f:bb:dd:1a:0a:ad:7c:
82:f1:a2:75:b4:36:71:ec:1e:f5:cf:b3:2f:38:d9:
a5:00:f8:38:4c:b5:76:ce:77:c6:75:57:46:46:2a:
e3:e2:94:df:4f:78:5d:35:b8:c6:21:67:45:df:9e:
16:48:db:76:42:f7:5b:ee:d5:62:0e:ac:e2:f5:f9:
e8:07:24:55:c0:60:18:cf:d7:22:e2:0f:2a:c9:15:
eb:13:42:0d:89:c3:cb:3f:68:8e:51:b5:b8:d1:07:
82:80:0b:4c:21:37:27:5c:85:06:5c:0f:a0:ec:f2:
5e:5e:92:b0:71:73:08:b5:af:48:d3:61:0a:cf:67:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:33:44:FF:52:97:62:8E:D6:D9:C2:FA:4E:3A:E1:C7:A8:22:06
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.16.0/24
167.148.123.0/24
168.222.15.0/24
168.222.61.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:52:ea:c1:2a:13:e3:b2:1f:ea:9b:27:30:f2:b2:82:c6:
39:ce:9f:bf:8c:72:93:1c:0e:ec:80:34:4e:09:a5:29:c8:77:
f2:4b:8c:05:6a:1b:47:19:e3:32:28:91:7f:3e:8a:39:84:37:
60:2e:1f:96:d1:d3:fb:b9:ae:37:f4:f8:0a:1d:bb:14:2b:ad:
2a:27:28:57:f2:d1:8e:f0:b5:dd:f5:20:6b:30:51:9d:87:01:
18:03:be:55:90:4e:92:6e:19:6d:12:ec:a2:3f:f3:a7:21:26:
b5:98:5f:13:e8:7f:8e:c0:ff:e2:5f:f3:7c:d4:e1:6f:9c:a2:
cf:be:e3:8c:d3:1a:87:89:2b:f8:8e:88:81:c4:15:98:ee:d1:
53:15:85:d9:b5:ce:64:94:27:52:f8:2a:0c:10:e9:f3:ed:74:
e7:eb:22:8f:62:57:4f:6b:b9:38:b4:30:d6:4a:c3:7a:ab:7d:
b1:49:49:a3:b7:a1:0f:b3:4d:2e:d5:dc:f3:e9:bf:0a:df:41:
39:5a:4d:75:45:aa:c1:17:1c:0c:83:be:d4:db:31:ff:f6:ae:
8e:f9:c9:11:0b:1e:70:e5:0e:13:62:5f:0d:f5:ca:27:e5:53:
ab:10:69:77:7d:aa:21:a9:54:2a:20:79:88:b3:fb:32:03:8e:
00:83:56:eb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUJMhDKRxufKTfFOAuoGejishxVSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MjAxODUxMjRaFw0yNzA4MTkxODU2MjRaMDMxMTAvBgNV
BAMTKEIzMEEzMzQ0RkY1Mjk3NjI4RUQ2RDlDMkZBNEUzQUUxQzdBODIyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ppvb6YEU5jFUjmY7u7t9WW8/
IjZ5jge0ytV2JZ/zJHMCZa+TaZym1Rx6VBrBa0OM6HfSFJFjXVFEp9IhgBtmbTNa
OkIRKZQwHJGiYgiL8sX/YKnssYNhd7a5sXceopi7+I4Xz+lgZHQAMjYl/DObQDe5
2rwQjqQWEsYai+nWH7vdGgqtfILxonW0NnHsHvXPsy842aUA+DhMtXbOd8Z1V0ZG
KuPilN9PeF01uMYhZ0XfnhZI23ZC91vu1WIOrOL1+egHJFXAYBjP1yLiDyrJFesT
Qg2Jw8s/aI5RtbjRB4KAC0whNydchQZcD6Ds8l5ekrBxcwi1r0jTYQrPZx6ZAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUswozRP9Sl2KO1tnC+k464ceoIgYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACbdRAD
BACnlHsDBACo3g8DBACo3j0wDQYJKoZIhvcNAQELBQADggEBAJEWUurBKhPjsh/q
mycw8rKCxjnOn7+McpMcDuyANE4JpSnId/JLjAVqG0cZ4zIokX8+ijmEN2AuH5bR
0/u5rjf0+AoduxQrrSonKFfy0Y7wtd31IGswUZ2HARgDvlWQTpJuGW0S7KI/86ch
JrWYXxPof47A/+Jf83zU4W+cos++44zTGoeJK/iOiIHEFZju0VMVhdm1zmSUJ1L4
KgwQ6fPtdOfrIo9iV09ruTi0MNZKw3qrfbFJSaO3oQ+zTS7V3PPpvwrfQTlaTXVF
qsEXHAyDvtTbMf/2ro75yRELHnDlDhNiXw31yiflU6sQaXd9qiGpVCogeYiz+zID
jgCDVus=
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:10:32 2026 by rpki-client