Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: ROWBdr73yFEFHQQMKEGikWPPIDne+1Jz0f1uwBIEK08=
Subject key identifier: 80:19:0B:58:9C:23:99:BF:91:FD:B5:96:F2:C3:1E:48:B4:77:3F:AA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0D5B87654C9FFBEA6D37235F6666A8252281646B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
Signing time: Thu 20 Aug 2026 19:37:36 +0000
ROA not before: Thu 20 Aug 2026 19:32:36 +0000
ROA not after: Thu 19 Aug 2027 19:37:36 +0000
asID: 34989
IP address blocks: 51.241.145.0/24 maxlen: 24
78.105.112.0/24 maxlen: 24
78.105.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5b:87:65:4c:9f:fb:ea:6d:37:23:5f:66:66:a8:25:22:81:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 20 19:32:36 2026 GMT
Not After : Aug 19 19:37:36 2027 GMT
Subject: CN=80190B589C2399BF91FDB596F2C31E48B4773FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:9a:40:a0:c3:81:38:91:7b:e3:03:df:ef:
99:35:57:d6:48:75:2b:2d:a7:5e:a1:af:82:a9:14:
56:b7:b6:3e:4b:1b:b5:93:5c:c7:15:57:6e:06:bc:
31:a2:78:34:f5:6b:7e:23:dd:c6:b9:d5:28:d2:5b:
98:4c:9f:12:af:82:a5:c8:15:2a:1b:26:33:7a:c8:
ba:01:af:7e:77:c9:9a:b0:83:b6:a9:1a:97:40:7f:
60:fd:1a:98:01:b8:a0:5d:90:00:87:fe:62:7d:ca:
11:24:9c:d3:89:69:bd:78:dc:98:91:ff:79:e0:60:
a0:7f:08:c2:fa:ce:86:7a:fd:64:02:a3:48:73:44:
41:d2:a2:d4:d3:1a:3d:ba:be:8d:7e:a4:c3:2f:ba:
92:52:91:a1:9b:1f:02:a6:0e:1f:7a:4b:4f:8f:b8:
6c:01:ce:47:25:3a:6d:dc:cb:34:40:d7:82:de:3e:
33:05:c5:8f:5c:d2:45:27:43:e1:f2:ca:12:55:0e:
23:57:29:04:2c:ac:93:7b:fd:de:96:12:50:20:94:
c2:34:9d:2f:53:5e:58:59:93:e0:a0:e8:3c:43:af:
24:49:a8:b9:ac:bc:23:76:7e:e3:28:10:0a:34:3d:
89:43:f4:fc:fd:d8:a1:c6:b9:c3:c0:5b:d8:67:ee:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:19:0B:58:9C:23:99:BF:91:FD:B5:96:F2:C3:1E:48:B4:77:3F:AA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.145.0/24
78.105.112.0/24
78.105.124.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c9:4a:46:ef:5d:22:d2:8c:60:b0:9e:8f:87:85:c1:59:53:
b3:14:84:42:5f:6d:aa:22:c3:69:53:95:e6:e4:fb:97:06:0d:
e7:2b:d2:0d:3c:47:83:2c:38:5c:1a:f0:26:db:7d:95:df:ac:
2e:92:20:b4:1b:b6:e6:9e:c1:dd:56:d7:2d:d9:97:a6:51:20:
a7:10:1c:1b:86:fa:72:2c:cf:6e:be:70:fe:fb:01:84:a6:81:
6f:4c:2e:59:f6:f2:4d:b6:db:60:45:45:58:49:f2:40:a3:06:
a6:1d:ef:98:51:9f:65:63:9b:c6:af:5b:97:63:29:f9:80:e5:
13:81:2a:2c:14:00:dc:8d:be:4f:be:c4:8f:c0:a2:9a:10:a6:
f4:16:c4:2d:d9:a8:fd:d5:e5:14:35:5c:39:c6:d0:f3:15:42:
88:12:65:bf:63:3d:fb:a5:61:ec:4b:d2:8c:7a:93:db:a8:63:
4c:be:7b:25:d5:43:32:11:1f:d2:98:6a:ce:e5:6e:84:09:d0:
e9:8e:b7:83:88:a8:af:c8:bc:31:4c:4f:89:7a:18:1b:98:e2:
7f:cc:a0:86:25:00:9d:14:db:28:5b:00:fb:d1:9b:24:8d:10:
33:b1:35:c8:08:be:4c:41:98:f9:31:d3:6a:48:32:04:fc:03:
ab:db:da:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:43:30 2026 by rpki-client