Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: /7lPylNO7l0kfdbWcr+KadEvWnPiyMRY5ZoTNjuPGs0=
Subject key identifier: A0:7C:6A:98:EF:D8:6C:73:3F:52:2C:B8:10:13:19:26:B9:CF:1A:0B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7FBB1AA7055ABF4794BFE517FF52C8C7DC52F1F1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
Signing time: Tue 23 Jun 2026 20:44:46 +0000
ROA not before: Tue 23 Jun 2026 20:39:46 +0000
ROA not after: Tue 22 Jun 2027 20:44:46 +0000
asID: 34989
IP address blocks: 78.105.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bb:1a:a7:05:5a:bf:47:94:bf:e5:17:ff:52:c8:c7:dc:52:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 20:39:46 2026 GMT
Not After : Jun 22 20:44:46 2027 GMT
Subject: CN=A07C6A98EFD86C733F522CB810131926B9CF1A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:b5:14:50:a4:97:08:02:fc:fd:44:06:91:
8e:51:ec:7b:07:f0:08:c1:7c:01:e0:66:19:51:5a:
db:a2:ad:d2:47:cb:84:a9:e1:fa:e5:0b:2c:fb:f2:
c4:e6:3b:87:31:46:c7:27:83:5f:9e:8e:2b:13:e1:
a1:f1:ec:b5:4f:e8:cc:79:f0:9a:63:5f:62:8c:a8:
5d:cf:6c:c7:b2:62:be:29:e1:32:a4:02:be:f1:7b:
94:5c:ee:c2:f3:a9:cd:00:cb:3d:23:25:52:dc:4e:
8c:06:1e:05:2d:47:1e:62:00:23:15:6a:a3:8c:47:
30:9f:5e:3a:15:75:c8:32:a7:96:ca:3c:e0:e4:a2:
da:f8:1c:90:e9:a7:2f:36:b1:ef:17:e3:e6:cc:81:
4f:fa:2d:8a:ba:d2:8b:f7:4c:75:20:5f:0e:85:19:
96:c1:17:7c:47:fc:64:ef:33:db:da:fa:8d:2a:6d:
16:29:ec:f1:6a:dd:8e:11:cf:f3:62:03:20:66:9c:
eb:66:cb:c7:55:e3:8d:ad:88:49:5f:98:5a:63:01:
4b:a6:9c:db:91:f7:ce:7b:ad:5d:97:7f:b5:02:c4:
ca:de:1a:a2:32:6d:74:02:01:5b:6f:9b:63:2d:a7:
9a:46:41:7b:a7:bf:e1:a7:ce:6c:42:cb:fd:6f:42:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:6A:98:EF:D8:6C:73:3F:52:2C:B8:10:13:19:26:B9:CF:1A:0B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0b:23:33:88:76:a9:83:0f:fc:33:1e:5c:9c:23:17:ff:43:
88:f3:e3:9b:20:9c:4b:67:37:8c:af:07:06:30:41:68:fe:4b:
5e:91:7a:47:99:a2:20:1b:a1:67:80:84:9c:8d:ca:b7:76:83:
1e:bb:ae:57:91:2e:81:8d:8d:5e:8c:30:01:a2:65:3b:b5:f7:
80:4d:5a:7a:24:80:a3:e5:66:9b:6b:27:57:72:87:11:56:3c:
c8:a0:a8:38:93:eb:f7:c1:6d:c2:19:60:be:0d:6c:7f:7c:c2:
68:2e:19:bd:26:ab:2a:82:e5:94:d6:f3:fc:71:31:3a:a2:df:
0a:39:fa:f3:22:36:79:fc:77:42:c4:5b:b2:9c:83:ba:d6:98:
a9:26:9d:f2:8d:c4:16:d9:7d:af:3b:c3:47:43:ce:9a:49:7c:
ad:87:94:b6:f4:58:a1:4b:12:13:52:d8:fe:66:90:83:25:39:
ad:8e:d6:77:67:23:39:3a:ab:09:37:c2:0f:29:5f:0e:4c:4d:
7b:86:36:5f:84:a2:98:c5:c8:f0:39:9e:bc:45:ef:9b:07:f2:
0e:5b:37:cf:bd:d1:bd:f9:ff:44:ab:91:07:68:e5:0a:27:93:
b2:af:74:41:05:c0:0e:30:df:21:4f:eb:f5:48:3d:33:7e:86:
d8:b4:b1:4d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUf7sapwVav0eUv+UX/1LIx9xS8fEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MjMyMDM5NDZaFw0yNzA2MjIyMDQ0NDZaMDMxMTAvBgNV
BAMTKEEwN0M2QTk4RUZEODZDNzMzRjUyMkNCODEwMTMxOTI2QjlDRjFBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+rUUUKSXCAL8/UQGkY5R7HsH
8AjBfAHgZhlRWtuirdJHy4Sp4frlCyz78sTmO4cxRscng1+ejisT4aHx7LVP6Mx5
8JpjX2KMqF3PbMeyYr4p4TKkAr7xe5Rc7sLzqc0Ayz0jJVLcTowGHgUtRx5iACMV
aqOMRzCfXjoVdcgyp5bKPODkotr4HJDppy82se8X4+bMgU/6LYq60ov3THUgXw6F
GZbBF3xH/GTvM9va+o0qbRYp7PFq3Y4Rz/NiAyBmnOtmy8dV442tiElfmFpjAUum
nNuR9857rV2Xf7UCxMreGqIybXQCAVtvm2Mtp5pGQXunv+GnzmxCy/1vQtJrAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUoHxqmO/YbHM/Uiy4EBMZJrnPGgswHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABOafIw
DQYJKoZIhvcNAQELBQADggEBADULIzOIdqmDD/wzHlycIxf/Q4jz45sgnEtnN4yv
BwYwQWj+S16RekeZoiAboWeAhJyNyrd2gx67rleRLoGNjV6MMAGiZTu194BNWnok
gKPlZptrJ1dyhxFWPMigqDiT6/fBbcIZYL4NbH98wmguGb0mqyqC5ZTW8/xxMTqi
3wo5+vMiNnn8d0LEW7Kcg7rWmKkmnfKNxBbZfa87w0dDzppJfK2HlLb0WKFLEhNS
2P5mkIMlOa2O1ndnIzk6qwk3wg8pXw5MTXuGNl+EopjFyPA5nrxF75sH8g5bN8+9
0b35/0SrkQdo5Qonk7KvdEEFwA4w3yFP6/VIPTN+hti0sU0=
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:54 2026 by rpki-client