Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34941.roa
File: AS34941.roa (raw, json)
Hash identifier: w4ImzNn9yyvfqb3fOOyU0a/lMxWRINIzdBlUiZ9binA=
Subject key identifier: 91:3F:78:A3:02:F0:08:11:1F:70:D9:B1:BE:C7:AF:31:E9:3F:1F:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 499F287BCDEC0E16CAFDF416A71828C4808D2C3A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34941.roa
Signing time: Thu 01 Oct 2026 08:02:36 +0000
ROA not before: Thu 01 Oct 2026 07:57:36 +0000
ROA not after: Thu 30 Sep 2027 08:02:36 +0000
asID: 34941
IP address blocks: 82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9f:28:7b:cd:ec:0e:16:ca:fd:f4:16:a7:18:28:c4:80:8d:2c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 1 07:57:36 2026 GMT
Not After : Sep 30 08:02:36 2027 GMT
Subject: CN=913F78A302F008111F70D9B1BEC7AF31E93F1FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:23:47:31:88:0f:58:f8:5f:03:0d:30:d9:
ea:60:1a:27:80:00:c6:f8:c2:c3:d0:a6:83:47:7e:
8c:8c:3d:f5:7a:58:cc:45:5d:9a:27:85:54:01:c8:
4d:d0:4e:47:7b:3c:49:75:a9:81:dd:e9:84:a1:f0:
cb:35:4e:4a:70:2e:95:a2:24:2d:1d:fa:8e:40:9b:
0b:0a:79:b6:a0:80:34:35:db:86:51:18:c8:6c:9b:
6e:6e:fa:5f:7e:31:4b:b2:e3:e8:b9:fd:fc:af:db:
2a:5f:f0:10:03:49:f0:ad:e5:dc:2a:81:f3:e4:e6:
37:89:7b:20:ae:8c:81:e0:b7:99:21:bb:cf:41:9c:
16:eb:8c:52:20:55:0d:ef:db:35:04:29:07:e2:19:
6c:e7:46:df:2a:a2:12:af:d6:8b:07:7d:8b:64:a6:
6e:2b:0b:c4:68:85:6b:71:2c:83:6b:3d:a0:1e:7e:
63:5f:39:d6:2b:01:bd:b5:06:50:af:64:3a:6c:67:
fa:be:85:d7:41:8f:81:f5:2d:7f:87:8d:34:c6:fa:
4a:4d:c4:04:f8:e4:2f:c2:ca:56:00:c8:b8:33:c6:
00:0e:0c:c5:1c:71:9c:86:66:e2:c0:90:7c:c4:78:
71:7a:d0:c5:c5:08:83:60:bf:8b:7c:f0:8a:0b:9c:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3F:78:A3:02:F0:08:11:1F:70:D9:B1:BE:C7:AF:31:E9:3F:1F:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.162.0/23
Signature Algorithm: sha256WithRSAEncryption
38:a1:ac:bc:19:95:35:44:a2:3c:23:4e:6e:2d:ff:76:ca:84:
25:df:0a:ef:ae:1f:71:87:9a:75:42:02:16:b7:5f:8f:57:0b:
bc:48:b4:ac:ed:eb:38:6b:9a:18:ed:e1:63:e2:1f:d8:97:9e:
1c:4a:74:1b:13:66:f6:a6:98:a8:ef:c5:72:81:23:9a:fa:6a:
e5:65:b6:8c:cc:4e:81:59:9f:bf:d6:0e:df:a0:a5:c8:69:3c:
bf:90:6f:9b:c4:a0:09:d6:10:11:30:8d:15:0f:44:58:5b:f2:
9b:24:0d:ac:ec:90:d0:97:81:08:f4:ce:ad:aa:e2:bd:6d:d4:
ba:a5:42:9b:a2:91:6e:cc:bc:7d:eb:a3:46:26:dc:73:38:a3:
bd:37:58:80:02:c8:21:05:44:5f:87:ff:0b:96:25:ed:ae:7d:
87:4b:a8:db:e0:d2:de:8f:8f:44:1a:c7:7a:c7:47:7a:4e:48:
75:22:b7:94:af:6f:0c:40:4f:11:89:9a:7e:49:99:03:8c:81:
21:75:82:ca:7c:bd:01:46:26:87:4d:7e:1c:ec:41:73:2a:72:
4a:27:a1:fc:19:ea:0b:87:8d:34:73:3a:af:05:de:4d:5e:73:
73:31:3b:af:68:b8:51:69:c8:60:0d:cd:e3:66:57:25:b6:0d:
e7:c5:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:53 2026 by rpki-client