Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34872.roa
File: AS34872.roa (raw, json)
Hash identifier: oeLgAaPCojGplGdUiDJNaPMbgr5vZYGx9xUpLxnCAUE=
Subject key identifier: B6:82:F3:97:F5:40:E0:66:BA:06:E4:A9:72:DB:71:30:52:2D:14:38
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2BDF6B8E05CA29DA725DB324A71976ACC86DCF59
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34872.roa
Signing time: Thu 25 Jun 2026 14:35:22 +0000
ROA not before: Thu 25 Jun 2026 14:30:22 +0000
ROA not after: Thu 24 Jun 2027 14:35:22 +0000
asID: 34872
IP address blocks: 78.105.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:df:6b:8e:05:ca:29:da:72:5d:b3:24:a7:19:76:ac:c8:6d:cf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 25 14:30:22 2026 GMT
Not After : Jun 24 14:35:22 2027 GMT
Subject: CN=B682F397F540E066BA06E4A972DB7130522D1438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:53:d9:f6:40:ce:b1:9f:8b:87:7b:ab:f2:
01:a5:2c:cb:84:75:4a:b1:77:36:86:62:4b:fd:88:
65:20:1c:ee:71:ed:00:37:f3:4f:0f:17:fc:e7:6a:
ef:47:48:f8:a1:02:d2:9e:2f:22:b8:2c:37:6a:24:
1a:3d:35:a3:59:5a:ca:e8:5b:1d:b1:7d:36:7c:46:
2d:76:31:bc:c6:0d:64:98:7f:bb:90:80:83:c1:86:
79:7d:d2:ed:c9:3a:e4:9e:a6:3e:cd:5b:03:4d:5e:
60:52:e9:3f:56:8b:9c:88:2f:79:6f:33:84:e0:33:
39:97:ee:e7:49:05:8d:69:b4:3a:d8:d1:9a:73:9f:
0b:77:b7:05:d3:94:be:3a:cf:a0:68:d0:f0:6e:1b:
83:12:7d:88:2f:87:02:0f:c3:c8:07:d1:58:38:25:
bf:9f:a3:62:79:82:42:97:56:f6:92:58:2d:b2:a4:
4b:1a:17:43:4c:38:82:93:a5:3e:3f:7a:7b:c3:db:
a2:7f:89:20:86:58:8a:31:25:f0:ea:9e:f9:e8:57:
f9:1a:34:0a:83:88:26:f4:98:af:87:98:17:da:7a:
a8:a5:c0:d6:c8:00:86:2e:c3:a4:f0:b3:3d:a5:dd:
23:d1:e4:a8:20:98:08:e5:53:5e:3c:91:e4:91:39:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:F3:97:F5:40:E0:66:BA:06:E4:A9:72:DB:71:30:52:2D:14:38
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.214.0/24
Signature Algorithm: sha256WithRSAEncryption
20:02:00:e3:d8:4e:33:73:5d:53:f5:20:73:5f:18:76:9e:7e:
3d:c4:46:00:6b:40:da:9f:ad:a6:7c:6e:e5:d5:02:4d:19:df:
68:60:8a:f4:61:ce:9a:1d:a1:cc:4d:24:05:d2:07:e6:6c:df:
ca:96:cd:82:ad:18:21:00:51:e7:80:13:75:76:97:9f:2a:7b:
64:5a:00:05:2d:0f:a6:01:33:8f:53:1c:cb:ca:c1:63:eb:e1:
9b:89:6f:80:9e:46:60:78:f6:bb:cd:02:5e:1b:81:8a:68:81:
a5:84:38:cc:1c:72:20:78:48:4b:3a:35:12:db:e0:1c:ae:25:
33:f7:6a:25:4a:df:97:1a:53:4f:8d:0f:9a:6e:0f:6b:bc:07:
7b:0a:56:38:da:4a:59:79:32:6c:cb:c7:8f:bc:e2:10:02:f3:
97:89:a9:2a:56:4e:a0:c1:f8:06:21:b7:30:a0:4c:8b:c9:ea:
19:7e:b6:34:9f:20:18:0a:55:73:d7:01:1e:bd:72:84:5c:27:
76:2e:54:bf:0b:48:c5:e9:16:e6:6a:c9:31:f2:8a:74:b6:25:
7e:2a:98:98:11:60:47:78:97:f1:7c:ea:c9:d5:0f:e3:56:b9:
e4:52:87:8a:1e:9a:d0:f6:a1:a4:e7:57:3e:38:8d:57:17:c3:
e6:39:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:33 2026 by rpki-client