Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: Z0A6hFrruxussUsjDnWBFiBWTz/nbiNyrJokyACJyzc=
Subject key identifier: E7:AD:1C:FD:5B:32:DA:BA:E8:07:C5:7D:AD:60:8D:3F:F4:B2:E7:DB
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4E2E6ABF813BFF74C0DB81F86AEF769AE3273211
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
Signing time: Thu 20 Aug 2026 19:37:36 +0000
ROA not before: Thu 20 Aug 2026 19:32:36 +0000
ROA not after: Thu 19 Aug 2027 19:37:36 +0000
asID: 34989
IP address blocks: 46.236.255.0/24 maxlen: 24
82.139.228.0/24 maxlen: 24
82.139.231.0/24 maxlen: 24
82.139.232.0/24 maxlen: 24
82.139.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 07:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2e:6a:bf:81:3b:ff:74:c0:db:81:f8:6a:ef:76:9a:e3:27:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 20 19:32:36 2026 GMT
Not After : Aug 19 19:37:36 2027 GMT
Subject: CN=E7AD1CFD5B32DABAE807C57DAD608D3FF4B2E7DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:d2:cc:dd:e3:f1:27:b7:6c:36:f0:ba:c6:
a1:ef:b5:08:02:c6:2e:5e:6a:ad:de:d0:51:3e:ce:
27:f4:f2:e1:38:95:4a:f2:5d:7f:db:12:30:4d:99:
b6:fc:c3:3a:82:15:5e:18:36:aa:b7:43:73:3c:f8:
f4:35:90:58:fb:4a:ab:bc:5e:6d:a0:4d:92:d1:b2:
82:ff:41:e5:2b:64:4f:6e:eb:37:15:28:39:7d:9d:
0e:5a:5a:89:83:b7:ce:95:d2:2b:c7:a9:4d:ec:3d:
e1:a9:fb:94:83:69:0d:63:9e:bf:45:32:94:e8:17:
9d:c7:11:b5:57:3a:dd:c4:29:ca:7f:3b:22:39:f0:
3e:a4:59:81:0f:4a:fa:dc:7f:2f:63:1d:64:09:f9:
e5:52:c1:c3:6e:d0:de:05:17:6a:c5:fc:83:e7:a0:
2e:24:0c:1d:34:c1:6d:f6:16:d6:e8:3e:d6:59:30:
16:e7:77:77:65:50:74:a0:ed:2d:cf:52:35:99:a1:
53:d5:d6:dc:ca:fa:02:78:ed:a4:5d:97:52:54:c8:
6f:2b:b0:23:dc:7d:84:94:08:b8:71:cc:2c:b2:37:
7b:f9:b6:f6:fd:cc:70:2e:93:9c:bd:9f:05:93:b5:
3c:f2:9f:5f:42:99:12:7a:de:37:94:63:8e:6c:83:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:1C:FD:5B:32:DA:BA:E8:07:C5:7D:AD:60:8D:3F:F4:B2:E7:DB
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.255.0/24
82.139.228.0/24
82.139.231.0-82.139.233.255
Signature Algorithm: sha256WithRSAEncryption
01:f5:07:62:da:86:24:7b:18:bf:7d:3b:c9:e1:ec:a7:53:48:
6b:f8:de:85:b0:15:8e:cb:43:b1:f5:2d:d9:d8:49:06:0a:25:
d2:4a:e6:27:07:3f:41:23:06:ad:92:31:a4:ac:53:48:e5:83:
96:99:a4:90:3a:cc:ad:e7:80:05:16:4f:6f:61:c3:cd:6b:2c:
a5:6e:6a:05:35:fd:5e:b0:30:e6:b3:30:c4:c0:f6:43:01:e2:
58:aa:71:a1:1b:ad:4a:61:f1:28:c9:20:aa:ef:93:14:c4:c7:
e0:77:a9:77:ce:a9:32:13:61:69:b5:73:73:c7:c0:33:0b:6c:
56:7f:f1:0c:49:ab:15:df:e9:b6:f6:47:61:33:70:45:c9:c7:
9a:fc:c1:68:43:2e:e9:cd:e0:bd:4c:c7:59:35:3e:45:29:6c:
3e:8f:ba:26:7d:dc:c9:40:2a:bf:03:77:65:ff:f4:86:fe:a8:
cc:1f:e6:83:14:88:e2:8b:5f:fe:34:78:a3:aa:46:1d:0e:59:
52:aa:9d:5e:c2:51:83:5f:9a:e6:4f:b8:de:4a:07:93:d2:55:
a5:cf:9d:ec:5b:5f:17:32:d6:9c:de:30:78:23:8b:52:1e:d1:
57:0f:1a:f0:1c:02:b3:fb:e1:50:04:8a:e7:43:43:12:0a:3b:
17:56:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:06:02 2026 by rpki-client