Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: ioKGlkC40qIXahOPFsBE600UxjYE+WT3ciZ+T6To8qg=
Subject key identifier: C1:63:D4:40:DF:05:77:D3:A8:35:82:37:67:17:8C:45:45:1C:E7:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49C5FB391EC98ACA7BA6E0F16B6FF12472C3A630
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
Signing time: Mon 29 Jun 2026 18:57:38 +0000
ROA not before: Mon 29 Jun 2026 18:52:38 +0000
ROA not after: Mon 28 Jun 2027 18:57:38 +0000
asID: 34989
IP address blocks: 82.38.19.0/24 maxlen: 24
82.38.212.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.47.108.0/24 maxlen: 24
82.47.144.0/24 maxlen: 24
82.47.145.0/24 maxlen: 24
82.47.146.0/24 maxlen: 24
82.47.148.0/24 maxlen: 24
84.75.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c5:fb:39:1e:c9:8a:ca:7b:a6:e0:f1:6b:6f:f1:24:72:c3:a6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 18:52:38 2026 GMT
Not After : Jun 28 18:57:38 2027 GMT
Subject: CN=C163D440DF0577D3A835823767178C45451CE761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:be:39:9c:4f:b2:e9:53:c6:77:de:b8:47:
53:41:23:85:49:a3:1c:34:fc:d8:4f:f4:9e:e6:33:
8c:02:32:b5:e5:e4:57:50:20:19:60:8f:56:2d:37:
01:80:fe:88:d9:3c:b2:a7:9d:07:12:65:6e:88:73:
6d:06:66:8f:29:72:90:e1:c6:47:27:c8:6d:c1:cf:
ca:8a:b0:9b:eb:6a:26:00:ec:a1:9d:15:c4:38:84:
32:29:6e:3b:29:c7:4f:98:ba:ec:95:0b:92:07:40:
dd:b8:19:fb:cd:77:82:a9:aa:03:22:13:27:e4:27:
a6:6d:a0:6b:55:d4:87:58:4b:91:64:45:0c:4b:cf:
88:90:05:58:61:33:ee:8f:a5:9f:e1:02:8e:a4:74:
04:9a:69:cb:28:0e:33:45:b4:c7:9d:60:89:38:a8:
24:56:84:6c:4a:83:cb:fd:20:ef:86:ff:ee:aa:62:
b1:d2:fb:6f:cd:b4:36:7e:7e:48:fc:1a:e0:a8:c0:
6e:0b:26:5a:55:d7:49:a5:18:bb:70:f6:1c:8a:fa:
07:21:4a:14:38:39:03:dc:ef:e1:7e:b5:ad:a6:a9:
ae:a6:44:38:0d:94:a6:c5:ad:13:1f:9c:79:d9:2b:
d5:59:c9:69:0e:0b:55:b9:3f:5e:2b:59:c0:4e:ef:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:D4:40:DF:05:77:D3:A8:35:82:37:67:17:8C:45:45:1C:E7:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.19.0/24
82.38.212.0/24
82.39.170.0/24
82.47.108.0/24
82.47.144.0-82.47.146.255
82.47.148.0/24
84.75.165.0/24
Signature Algorithm: sha256WithRSAEncryption
28:09:3f:72:df:d3:48:71:87:ee:79:a5:76:14:3e:a9:6c:ea:
70:5a:17:a2:81:f9:10:4a:7b:6d:05:68:f5:f8:cc:f3:61:1e:
cd:39:be:91:10:63:9c:78:a8:79:6e:09:fd:f4:39:e2:d3:f4:
18:f6:33:f6:07:b9:ce:6f:c1:e7:f6:21:76:d3:9b:cd:51:c1:
ec:c3:0b:33:ff:fb:2e:4b:ca:92:89:a2:aa:64:99:1c:99:3b:
0b:08:8e:40:82:f6:46:f7:d1:2f:77:0a:e6:04:f6:b7:7c:ce:
c1:a5:90:bb:5d:8d:62:0f:c7:3c:8e:cd:85:1e:df:85:11:0f:
f2:15:98:3c:f0:f5:89:a4:19:e8:96:71:cc:b3:85:1d:e2:8b:
c4:fc:81:59:fa:52:75:02:89:53:ab:dc:84:a6:60:2a:63:c1:
9c:c0:01:7a:ac:5e:8d:c8:8c:c6:13:99:2d:d7:fa:b8:7b:5a:
44:5a:b5:b3:13:56:b6:4a:b3:d5:c6:e2:fe:b9:8e:9e:53:e5:
32:21:91:03:82:be:ac:4e:fd:a1:e4:90:5a:01:02:70:2e:33:
f0:b3:cd:df:d9:d7:2e:2c:b6:f3:9e:71:14:1f:31:34:16:a5:
d3:a9:af:9f:d8:14:c5:c3:97:09:38:52:16:c1:91:a5:48:b1:
f9:77:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:02:53 2026 by rpki-client