Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: 8jZRG/1QugOj01Zs7yUb1iV26qJZ+ZAgzT0Bsl4y+sg=
Subject key identifier: BB:BC:7B:A2:D4:EA:24:50:5B:4F:D7:3B:DD:6B:83:B2:FA:0E:4D:D1
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 63BFE10EA5E842567665E0F73BF42FEB1EEE1519
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
Signing time: Sun 04 Oct 2026 00:05:17 +0000
ROA not before: Sun 04 Oct 2026 00:00:17 +0000
ROA not after: Sun 03 Oct 2027 00:05:17 +0000
asID: 34989
IP address blocks: 46.236.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bf:e1:0e:a5:e8:42:56:76:65:e0:f7:3b:f4:2f:eb:1e:ee:15:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 4 00:00:17 2026 GMT
Not After : Oct 3 00:05:17 2027 GMT
Subject: CN=BBBC7BA2D4EA24505B4FD73BDD6B83B2FA0E4DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:86:47:6a:cf:e6:fa:ee:a4:a3:85:66:59:
f7:e5:33:33:3b:40:fd:c2:10:5f:d3:ce:55:d9:9c:
f9:70:79:f2:e4:f1:0c:09:69:bc:94:03:11:31:41:
e5:ec:8a:c4:8a:98:b8:61:6c:79:c6:ca:52:50:71:
b6:e6:24:16:6f:6a:19:76:b5:67:60:41:ff:74:a7:
ec:cc:2b:04:b6:c1:99:82:bf:17:b7:25:44:fb:ff:
26:23:b7:36:f2:44:76:ac:2c:da:14:44:90:00:ac:
80:71:c8:35:6e:1b:b4:a0:2c:4e:d4:20:25:82:4d:
a4:f6:94:4b:c4:ce:55:2d:f2:5c:d1:e5:c1:cc:7d:
24:f4:9c:0d:b6:cc:d7:5f:d6:55:35:f0:b5:93:f3:
4f:b8:46:4b:de:59:b6:94:e2:0e:ba:7c:e0:c0:c9:
e6:5a:f3:dd:31:b1:a3:82:4e:45:5a:c5:b9:49:f7:
8f:b1:36:99:57:11:15:59:53:ad:a3:e5:70:67:c1:
33:ea:25:95:0e:57:4f:4a:fd:15:52:46:84:9d:d5:
42:41:03:4f:14:a7:3c:58:31:c2:2a:a9:55:da:aa:
33:00:26:06:7f:28:02:6a:a6:f2:9c:59:e8:f5:b1:
00:62:dc:1b:40:be:85:64:c4:71:5b:38:4c:3a:3d:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:7B:A2:D4:EA:24:50:5B:4F:D7:3B:DD:6B:83:B2:FA:0E:4D:D1
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:e0:21:93:be:b6:76:32:7c:ed:bd:55:8c:07:86:00:36:
c3:ee:b1:98:56:7e:0f:60:9e:81:b7:41:90:9d:73:42:a9:90:
41:a9:3b:e7:a4:51:7a:4d:48:f9:5e:46:fb:01:35:fc:3e:a2:
6b:cb:67:fc:c8:25:8b:32:56:58:c0:8b:87:36:f4:6d:5e:0c:
62:63:74:08:b9:95:15:14:3d:3c:6f:0e:25:e2:9a:91:ac:ce:
aa:7d:63:88:d6:75:c0:24:40:61:76:15:7d:7f:00:84:0d:03:
32:ae:37:48:03:bd:ea:d0:38:1e:74:02:6b:e0:ee:d4:33:50:
be:d9:68:89:90:c6:b1:40:43:1d:cf:04:c9:32:71:69:06:2b:
a0:68:15:8c:ea:8f:24:15:90:bd:f5:06:c7:9b:9e:da:be:84:
b3:4d:f4:c1:1b:69:50:c5:ca:bd:e2:36:78:d3:aa:eb:c3:0f:
60:93:78:7e:4c:70:f4:43:f7:a9:26:dd:51:ee:52:c8:ec:7e:
0e:9e:3c:fd:d7:0a:9f:10:59:56:3e:7d:9d:80:06:9e:1c:b8:
e2:ff:04:08:4a:81:73:32:0b:f7:4e:0f:fc:c0:fe:37:c3:35:
ec:22:80:0b:6b:a1:f8:4a:10:6b:73:be:87:1b:88:3b:5e:4c:
a4:25:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:51:15 2026 by rpki-client