Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: gthWKS9trWBLZTaqhwB+lYIvkEQUxYTEGBhM7HmsAec=
Subject key identifier: 11:E6:AD:0B:61:93:49:8A:75:F4:CF:90:7B:31:D6:17:BE:C0:50:42
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3D73441F113C8C78BE74D87BEF3CF4F8208CF9F6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS34989.roa
Signing time: Wed 29 Apr 2026 19:08:52 +0000
ROA not before: Wed 29 Apr 2026 19:03:52 +0000
ROA not after: Wed 28 Apr 2027 19:08:52 +0000
asID: 34989
IP address blocks: 181.215.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:73:44:1f:11:3c:8c:78:be:74:d8:7b:ef:3c:f4:f8:20:8c:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 29 19:03:52 2026 GMT
Not After : Apr 28 19:08:52 2027 GMT
Subject: CN=11E6AD0B6193498A75F4CF907B31D617BEC05042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:5f:43:05:19:42:6b:96:17:e5:fc:9f:80:
b9:ae:e6:85:36:86:98:fa:63:8c:60:3b:75:fa:a2:
a1:e1:f4:5e:54:5a:d2:f8:df:7b:9d:bf:cd:a7:8b:
16:00:d0:8f:d1:63:f8:7c:6c:48:f8:c0:86:7c:ca:
99:9c:42:94:a5:bc:be:32:7d:3a:fa:88:72:86:1b:
e3:fd:1a:b8:f1:52:af:d4:fb:0e:cd:7c:86:a7:49:
4f:f4:2e:6f:7d:51:31:e1:a3:d6:ba:09:6c:19:34:
5d:52:72:bf:56:9f:0e:89:6d:14:9a:00:d2:76:85:
52:a5:76:84:9f:39:cb:74:e9:e6:67:ba:f6:55:23:
0c:6a:04:d1:66:11:23:d9:78:8b:65:78:3f:80:61:
73:e5:da:45:06:16:b3:d0:1e:6f:a4:69:97:e3:fd:
b3:bc:46:18:ac:95:9b:d7:73:21:80:1b:05:02:ec:
41:da:b8:ee:9e:25:3b:ef:14:52:4a:9f:cc:74:d2:
97:82:0f:99:fd:80:15:2c:fe:7e:00:6a:80:44:10:
a9:8f:47:3a:e1:00:a8:2a:e0:fd:8c:57:bc:29:86:
59:eb:c7:bd:25:ee:5f:09:2b:05:67:93:c0:e3:95:
a3:a8:ff:1d:5a:62:bd:ad:4e:60:29:60:4a:ca:98:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:AD:0B:61:93:49:8A:75:F4:CF:90:7B:31:D6:17:BE:C0:50:42
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.95.0/24
Signature Algorithm: sha256WithRSAEncryption
62:90:a8:9e:e4:a5:bf:f2:0e:57:20:28:10:bc:22:db:59:42:
ac:22:17:72:8e:44:3a:85:62:08:b1:03:e9:27:a6:52:ab:87:
b3:8e:31:43:3a:d5:86:8b:7c:fc:ff:22:c7:e6:ea:e2:aa:c1:
86:d6:b5:2b:cb:53:97:90:ef:49:61:98:06:83:1f:9a:1b:18:
de:fd:ac:b8:76:19:2d:29:07:b9:d0:eb:a6:3a:4e:ff:f1:b6:
42:fd:37:d4:ff:24:48:1a:84:12:27:65:f9:69:28:79:36:c9:
f2:c1:69:ff:a2:18:d4:a3:fa:40:60:b2:1b:88:8d:bf:48:19:
a8:9c:0b:ca:29:39:76:40:ce:52:df:58:b4:ff:aa:27:dc:9e:
75:c4:1d:ff:2c:38:b8:ae:29:18:75:f7:78:11:d5:48:a9:69:
80:b1:d1:4e:ae:aa:f3:af:2b:18:ab:f8:ca:f6:b4:35:2d:8d:
bf:9e:31:49:5f:48:bf:3e:51:66:c9:05:a9:8e:c4:4e:f4:01:
14:17:2c:63:ad:a1:26:ae:91:8d:c3:30:d7:20:94:93:04:14:
76:93:ff:ea:bb:09:ca:3b:49:67:49:dc:a8:50:a3:de:f1:81:
77:c1:b5:34:d5:f0:f3:d6:4b:de:93:94:fa:25:10:bf:c9:ef:
b9:ca:4a:f3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUPXNEHxE8jHi+dNh77zz0+CCM+fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MjkxOTAzNTJaFw0yNzA0MjgxOTA4NTJaMDMxMTAvBgNV
BAMTKDExRTZBRDBCNjE5MzQ5OEE3NUY0Q0Y5MDdCMzFENjE3QkVDMDUwNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDiV9DBRlCa5YX5fyfgLmu5oU2
hpj6Y4xgO3X6oqHh9F5UWtL433udv82nixYA0I/RY/h8bEj4wIZ8ypmcQpSlvL4y
fTr6iHKGG+P9GrjxUq/U+w7NfIanSU/0Lm99UTHho9a6CWwZNF1Scr9Wnw6JbRSa
ANJ2hVKldoSfOct06eZnuvZVIwxqBNFmESPZeItleD+AYXPl2kUGFrPQHm+kaZfj
/bO8RhislZvXcyGAGwUC7EHauO6eJTvvFFJKn8x00peCD5n9gBUs/n4AaoBEEKmP
RzrhAKgq4P2MV7wphlnrx70l7l8JKwVnk8DjlaOo/x1aYr2tTmApYErKmLgzAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUEeatC2GTSYp19M+QezHWF77AUEIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzQ5ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1118w
DQYJKoZIhvcNAQELBQADggEBAGKQqJ7kpb/yDlcgKBC8IttZQqwiF3KORDqFYgix
A+knplKrh7OOMUM61YaLfPz/Isfm6uKqwYbWtSvLU5eQ70lhmAaDH5obGN79rLh2
GS0pB7nQ66Y6Tv/xtkL9N9T/JEgahBInZflpKHk2yfLBaf+iGNSj+kBgshuIjb9I
GaicC8opOXZAzlLfWLT/qifcnnXEHf8sOLiuKRh193gR1UipaYCx0U6uqvOvKxir
+Mr2tDUtjb+eMUlfSL8+UWbJBamOxE70ARQXLGOtoSaukY3DMNcglJMEFHaT/+q7
Cco7SWdJ3KhQo97xgXfBtTTV8PPWS96TlPolEL/J77nKSvM=
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:16 2026 by rpki-client