Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: gGonQ+IPrR9CFHvad9B3z7uP0cf16umZ2xzkcTxDfoA=
Subject key identifier: 07:8F:F0:97:C3:57:E0:28:41:81:61:66:24:85:65:3A:02:53:70:C7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2C6D859502525643EF200F099DC2222E302845AC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
Signing time: Wed 29 Apr 2026 19:09:03 +0000
ROA not before: Wed 29 Apr 2026 19:04:03 +0000
ROA not after: Wed 28 Apr 2027 19:09:03 +0000
asID: 34989
IP address blocks: 155.117.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:6d:85:95:02:52:56:43:ef:20:0f:09:9d:c2:22:2e:30:28:45:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 29 19:04:03 2026 GMT
Not After : Apr 28 19:09:03 2027 GMT
Subject: CN=078FF097C357E028418161662485653A025370C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:75:a4:6f:ee:ce:9c:e6:77:77:13:08:ee:
1f:1b:3d:42:05:b4:99:fd:fa:f5:5d:93:7d:1e:f9:
eb:a3:5c:3b:3f:d0:e9:31:7b:74:7b:04:fb:b2:bb:
1a:b3:b6:dc:63:df:71:ee:fa:15:0b:6c:7c:a5:f0:
5b:92:f6:44:1e:2a:af:f5:8a:d0:21:86:85:74:67:
9f:4b:c6:35:5a:6e:a7:28:49:4e:43:46:93:97:bd:
b1:5e:d3:9b:49:ee:5b:ee:85:c8:5c:b5:09:2f:b2:
bf:df:36:2f:93:dd:ad:cc:46:6e:1c:94:10:c4:85:
32:99:f1:f2:2b:12:28:53:fc:c4:7b:38:58:22:2e:
71:3c:df:e9:c2:77:67:ba:56:da:64:f6:08:71:76:
d9:63:6b:a1:4d:f4:16:6e:e5:7f:4a:6f:7c:63:cb:
f1:ab:b0:53:ae:25:84:c2:28:c1:02:20:3f:0e:86:
aa:d4:dc:74:b5:fd:20:82:15:65:d8:52:68:01:11:
91:6e:d1:91:6b:cc:3c:a0:33:d0:6a:90:70:9d:0e:
76:f3:2e:50:58:dc:76:bd:b7:67:90:eb:af:7d:4e:
62:28:7d:34:bd:d4:4d:28:ca:9a:aa:b7:88:c7:8b:
0a:5e:05:5f:65:a3:ea:4a:b1:65:93:bb:bc:33:f0:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:F0:97:C3:57:E0:28:41:81:61:66:24:85:65:3A:02:53:70:C7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.184.0/24
Signature Algorithm: sha256WithRSAEncryption
39:88:78:25:80:95:7f:ee:2d:f6:e8:c6:5c:d8:c1:73:e9:6a:
f3:0c:5b:50:82:22:30:74:a7:62:95:da:e2:19:41:20:be:bf:
5a:df:59:f3:b6:c4:c9:47:54:8c:39:56:5f:83:6d:b6:ba:22:
70:76:50:8a:96:8c:d6:08:cc:2b:f8:74:28:df:e1:1c:c2:16:
10:e3:9c:90:ce:c6:95:c8:b9:25:fe:9d:e7:74:50:91:9d:a9:
13:ec:42:42:16:6d:31:79:26:79:8e:00:87:11:e1:55:73:48:
2e:ba:fe:6a:73:d3:b2:2f:0c:75:32:a8:4b:a4:f1:4c:47:51:
b9:76:16:2b:b6:5a:8b:1c:9b:0e:5e:4f:9c:4b:29:0c:f6:98:
12:f2:30:cf:22:3d:dc:b5:08:e8:f4:67:28:4e:7a:53:81:f3:
13:b8:7d:4c:a8:8c:22:f2:43:90:db:16:51:62:4d:8d:5a:b3:
4f:59:9b:cc:c3:5f:f9:c4:c8:17:1a:dc:f6:72:28:90:68:20:
82:2e:67:66:11:3f:9e:8e:df:82:7f:66:4a:6e:81:2f:05:4b:
2f:2e:ca:d8:4f:87:5b:37:8d:f9:24:3f:ec:7a:61:ae:c5:16:
e3:66:45:6f:41:14:8b:1c:3e:af:48:82:59:50:a2:5a:29:c4:
9f:f7:93:75
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULG2FlQJSVkPvIA8JncIiLjAoRawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MjkxOTA0MDNaFw0yNzA0MjgxOTA5MDNaMDMxMTAvBgNV
BAMTKDA3OEZGMDk3QzM1N0UwMjg0MTgxNjE2NjI0ODU2NTNBMDI1MzcwQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DXWkb+7OnOZ3dxMI7h8bPUIF
tJn9+vVdk30e+eujXDs/0Okxe3R7BPuyuxqzttxj33Hu+hULbHyl8FuS9kQeKq/1
itAhhoV0Z59LxjVabqcoSU5DRpOXvbFe05tJ7lvuhchctQkvsr/fNi+T3a3MRm4c
lBDEhTKZ8fIrEihT/MR7OFgiLnE83+nCd2e6Vtpk9ghxdtlja6FN9BZu5X9Kb3xj
y/GrsFOuJYTCKMECID8OhqrU3HS1/SCCFWXYUmgBEZFu0ZFrzDygM9BqkHCdDnbz
LlBY3Ha9t2eQ6699TmIofTS91E0oypqqt4jHiwpeBV9lo+pKsWWTu7wz8LpbAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUB4/wl8NX4ChBgWFmJIVlOgJTcMcwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACbdbgw
DQYJKoZIhvcNAQELBQADggEBADmIeCWAlX/uLfboxlzYwXPpavMMW1CCIjB0p2KV
2uIZQSC+v1rfWfO2xMlHVIw5Vl+Dbba6InB2UIqWjNYIzCv4dCjf4RzCFhDjnJDO
xpXIuSX+ned0UJGdqRPsQkIWbTF5JnmOAIcR4VVzSC66/mpz07IvDHUyqEuk8UxH
Ubl2Fiu2Woscmw5eT5xLKQz2mBLyMM8iPdy1COj0ZyhOelOB8xO4fUyojCLyQ5Db
FlFiTY1as09Zm8zDX/nEyBca3PZyKJBoIIIuZ2YRP56O34J/ZkpugS8FSy8uythP
h1s3jfkkP+x6Ya7FFuNmRW9BFIscPq9IgllQolopxJ/3k3U=
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:27 2026 by rpki-client