Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: WaXoAjltlz8Ejsbb4Hi4qYytv3EPJdxPUiMQ7FIcgEM=
Subject key identifier: C2:A1:DF:CE:25:4F:B9:50:3C:F2:40:41:6B:D2:31:A2:04:10:9D:33
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65618ABEAA28516B6677DFFE573D74892DE3A167
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
Signing time: Thu 20 Aug 2026 18:56:25 +0000
ROA not before: Thu 20 Aug 2026 18:51:25 +0000
ROA not after: Thu 19 Aug 2027 18:56:25 +0000
asID: 34989
IP address blocks: 82.39.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 07:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:61:8a:be:aa:28:51:6b:66:77:df:fe:57:3d:74:89:2d:e3:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 20 18:51:25 2026 GMT
Not After : Aug 19 18:56:25 2027 GMT
Subject: CN=C2A1DFCE254FB9503CF240416BD231A204109D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:72:02:cf:0b:26:d2:b0:c2:a0:9f:39:f6:
9b:5d:6d:98:08:82:3d:ab:f0:08:5f:76:49:97:93:
0c:3a:f2:cd:2f:34:1c:2c:e5:1e:b1:0d:40:29:7e:
00:d5:ba:1a:c4:7f:85:e2:35:53:a7:9a:65:be:82:
5a:eb:77:c7:63:b0:f3:b2:93:2b:56:03:16:75:07:
1f:52:51:e8:25:eb:63:df:67:3e:aa:5b:71:2d:26:
5c:d8:f8:be:c1:11:a4:89:08:5c:2b:bc:2d:54:f3:
1f:6b:2d:15:47:61:66:18:f6:8d:e1:f8:2e:dd:43:
e4:63:19:32:a5:a4:48:62:63:29:d8:89:aa:ad:af:
30:1f:ec:9c:6d:eb:a0:71:dd:e6:d1:4f:71:f9:f2:
9e:b0:c6:9c:a6:76:75:4b:da:7f:61:e6:9e:24:fa:
7b:22:8f:df:6a:a8:1a:23:7f:e6:ca:17:c9:e7:b1:
0b:da:39:83:bd:86:5f:c5:45:01:e4:57:59:1c:17:
89:5c:0f:0f:a3:be:fa:1e:95:67:38:c3:75:79:be:
8b:9e:34:5b:4c:e1:9a:c3:50:64:79:d1:35:50:0e:
4c:88:9e:a7:c0:21:a5:ad:31:f1:e3:61:b9:1d:b1:
a7:8b:65:3d:30:76:6b:82:fa:af:ed:39:ab:0e:b2:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:DF:CE:25:4F:B9:50:3C:F2:40:41:6B:D2:31:A2:04:10:9D:33
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c7:a6:0a:e3:ee:d4:5e:be:e3:24:07:c0:d3:21:46:4a:33:
c9:70:e0:f2:af:fe:1a:a5:c5:08:f1:60:7f:34:a0:92:9e:fa:
b4:18:c4:3f:b3:58:fb:45:9c:16:cf:6b:c4:8f:8b:90:fd:63:
df:60:3c:d4:3e:a0:db:b6:90:3e:ff:4f:59:f8:ca:3f:94:c8:
32:5d:b0:60:d9:35:00:e6:25:09:a6:8e:a0:1f:bd:fd:7e:42:
bb:7c:02:df:58:24:c5:1a:83:3c:c4:11:bd:b1:d7:4a:e1:5a:
6c:53:20:d3:79:f7:7c:fa:2a:50:7a:0e:a3:25:6e:12:41:4a:
3d:c1:62:ef:a4:0e:7b:2c:75:62:ac:44:9e:1a:9d:e9:63:cb:
61:d2:f5:2a:aa:c0:be:38:0f:0b:90:ee:97:9d:1d:19:4e:59:
8a:1d:a5:0b:9f:30:1b:80:ed:0f:09:46:5a:79:1a:41:0b:28:
36:e4:49:da:70:80:ac:b2:74:74:38:cd:94:d5:f3:db:8f:48:
71:e1:c7:f0:e7:60:2a:ea:fe:0e:d8:6c:ec:2d:60:20:e4:08:
a7:85:d5:2a:22:6a:24:ce:56:ff:8f:4d:75:1e:59:dd:90:16:
0a:c6:8b:c9:d2:6e:fd:59:4a:6c:e3:a5:1c:7d:4a:ed:ed:b2:
71:c1:c0:fa
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUZWGKvqooUWtmd9/+Vz10iS3joWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjAxODUxMjVaFw0yNzA4MTkxODU2MjVaMDMxMTAvBgNV
BAMTKEMyQTFERkNFMjU0RkI5NTAzQ0YyNDA0MTZCRDIzMUEyMDQxMDlEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubXICzwsm0rDCoJ859ptdbZgI
gj2r8AhfdkmXkww68s0vNBws5R6xDUApfgDVuhrEf4XiNVOnmmW+glrrd8djsPOy
kytWAxZ1Bx9SUegl62PfZz6qW3EtJlzY+L7BEaSJCFwrvC1U8x9rLRVHYWYY9o3h
+C7dQ+RjGTKlpEhiYynYiaqtrzAf7Jxt66Bx3ebRT3H58p6wxpymdnVL2n9h5p4k
+nsij99qqBojf+bKF8nnsQvaOYO9hl/FRQHkV1kcF4lcDw+jvvoelWc4w3V5voue
NFtM4ZrDUGR50TVQDkyInqfAIaWtMfHjYbkdsaeLZT0wdmuC+q/tOasOsgEHAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUwqHfziVPuVA88kBBa9IxogQQnTMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJ+kw
DQYJKoZIhvcNAQELBQADggEBAH/Hpgrj7tRevuMkB8DTIUZKM8lw4PKv/hqlxQjx
YH80oJKe+rQYxD+zWPtFnBbPa8SPi5D9Y99gPNQ+oNu2kD7/T1n4yj+UyDJdsGDZ
NQDmJQmmjqAfvf1+Qrt8At9YJMUagzzEEb2x10rhWmxTINN593z6KlB6DqMlbhJB
Sj3BYu+kDnssdWKsRJ4aneljy2HS9SqqwL44DwuQ7pedHRlOWYodpQufMBuA7Q8J
Rlp5GkELKDbkSdpwgKyydHQ4zZTV89uPSHHhx/DnYCrq/g7YbOwtYCDkCKeF1Soi
aiTOVv+PTXUeWd2QFgrGi8nSbv1ZSmzjpRx9Su3tsnHBwPo=
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:10:36 2026 by rpki-client