Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: sXe4NBt+D5kDU9k5rm0Qw5h8jNCd1VxkcfKt2osV8ko=
Subject key identifier: DC:6A:F5:40:79:E0:A0:B2:5F:E8:81:64:D6:8A:4B:46:AC:74:E5:D2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 054009470F4C369C53DD1C598FDF1DBDD641854D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS34989.roa
Signing time: Tue 25 Aug 2026 22:24:10 +0000
ROA not before: Tue 25 Aug 2026 22:19:10 +0000
ROA not after: Tue 24 Aug 2027 22:24:10 +0000
asID: 34989
IP address blocks: 143.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 00:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:40:09:47:0f:4c:36:9c:53:dd:1c:59:8f:df:1d:bd:d6:41:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 25 22:19:10 2026 GMT
Not After : Aug 24 22:24:10 2027 GMT
Subject: CN=DC6AF54079E0A0B25FE88164D68A4B46AC74E5D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:94:1e:89:42:21:f4:10:93:90:c4:43:46:e5:
f4:59:ba:11:3b:9e:76:fb:3c:ed:da:77:65:65:67:
93:62:c5:8a:5d:fb:cb:9c:65:13:54:6c:65:b8:cb:
73:07:ed:9c:3e:ec:78:16:9e:5e:89:ee:04:31:c7:
40:bf:12:ee:23:89:64:1c:ce:e5:0c:70:6e:43:6a:
fd:b2:bf:51:92:00:3b:a3:1a:11:c6:41:20:0a:8f:
d6:d9:2f:39:7d:5a:f4:91:90:9e:fe:ef:b8:dc:11:
55:0e:72:d8:c9:93:4b:64:2b:67:9d:07:4f:0f:d4:
82:96:ba:ba:9d:4d:8a:c5:fa:9b:88:66:47:fa:ca:
22:73:09:ee:c3:af:a7:b7:f3:b1:aa:d3:50:ae:63:
8a:4e:e0:77:03:b0:57:ac:c4:70:a6:20:33:26:5d:
9c:94:cb:2d:f8:5b:93:6d:67:b9:93:95:48:91:26:
92:b1:33:ab:44:7e:4c:ed:6c:37:ea:44:cd:01:e8:
1a:3b:18:20:60:7f:52:10:e7:4f:ff:a9:04:0a:e2:
16:63:66:f0:44:04:10:bf:71:57:db:95:db:40:d1:
a9:08:9a:fd:f6:b1:d8:89:0c:ad:92:43:47:c0:cd:
77:8f:51:07:76:75:6f:15:9e:d7:25:e4:4b:49:c1:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:F5:40:79:E0:A0:B2:5F:E8:81:64:D6:8A:4B:46:AC:74:E5:D2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.11.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:19:cd:12:97:8c:b4:cf:ee:f5:07:72:ae:cc:a1:13:2f:5b:
38:a5:ad:bc:13:5a:14:e9:e0:d5:0a:37:04:d2:48:f6:a9:0d:
8f:8e:98:0f:27:1f:30:05:f9:e3:8f:5c:70:b7:c5:49:e0:a6:
3d:4e:b5:d0:a2:c4:97:62:c4:a8:2a:2c:db:92:ae:37:28:13:
8f:9e:91:1c:de:26:c3:98:54:56:26:08:d4:5e:8f:7a:bc:ef:
ee:ce:b7:55:93:4f:5b:16:50:cd:71:e4:07:eb:b8:22:ae:06:
0f:d4:1d:e2:b1:9a:d5:54:f1:89:55:a7:14:d6:6c:7e:61:6c:
21:26:db:70:8b:e8:df:d0:68:f9:8f:a4:bd:69:d9:45:9d:39:
aa:ce:52:03:b1:0d:a3:3a:64:d5:f6:ec:e7:62:50:1e:a1:31:
12:d2:6d:ac:b9:25:6b:3a:4a:5e:22:33:5c:67:ad:7b:0a:10:
6d:c9:a0:1c:5a:19:24:e1:7b:0d:ff:e3:d4:7f:fb:b5:0b:50:
f1:95:a7:20:7f:03:14:30:e9:0e:54:2d:25:d9:6b:ff:bd:82:
07:f7:7a:8f:c3:d1:0a:49:79:f4:32:40:c9:58:40:d0:bd:79:
6e:fe:e0:2b:9c:1f:5f:65:29:47:df:0f:65:6d:fd:ac:49:68:
67:82:12:70
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBUAJRw9MNpxT3RxZj98dvdZBhU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MjUyMjE5MTBaFw0yNzA4MjQyMjI0MTBaMDMxMTAvBgNV
BAMTKERDNkFGNTQwNzlFMEEwQjI1RkU4ODE2NEQ2OEE0QjQ2QUM3NEU1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3lB6JQiH0EJOQxENG5fRZuhE7
nnb7PO3ad2VlZ5NixYpd+8ucZRNUbGW4y3MH7Zw+7HgWnl6J7gQxx0C/Eu4jiWQc
zuUMcG5Dav2yv1GSADujGhHGQSAKj9bZLzl9WvSRkJ7+77jcEVUOctjJk0tkK2ed
B08P1IKWurqdTYrF+puIZkf6yiJzCe7Dr6e387Gq01CuY4pO4HcDsFesxHCmIDMm
XZyUyy34W5NtZ7mTlUiRJpKxM6tEfkztbDfqRM0B6Bo7GCBgf1IQ50//qQQK4hZj
ZvBEBBC/cVfbldtA0akImv32sdiJDK2SQ0fAzXePUQd2dW8Vntcl5EtJwfzPAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU3Gr1QHngoLJf6IFk1opLRqx05dIwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFAsw
DQYJKoZIhvcNAQELBQADggEBAKsZzRKXjLTP7vUHcq7MoRMvWzilrbwTWhTp4NUK
NwTSSPapDY+OmA8nHzAF+eOPXHC3xUngpj1OtdCixJdixKgqLNuSrjcoE4+ekRze
JsOYVFYmCNRej3q87+7Ot1WTT1sWUM1x5AfruCKuBg/UHeKxmtVU8YlVpxTWbH5h
bCEm23CL6N/QaPmPpL1p2UWdOarOUgOxDaM6ZNX27OdiUB6hMRLSbay5JWs6Sl4i
M1xnrXsKEG3JoBxaGSThew3/49R/+7ULUPGVpyB/AxQw6Q5ULSXZa/+9ggf3eo/D
0QpJefQyQMlYQNC9eW7+4CucH19lKUffD2Vt/axJaGeCEnA=
-----END CERTIFICATE-----
Generated at Fri Sep 4 09:23:51 2026 by rpki-client