Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: y9MPmgOYVG4/j1Ej5uBzbq+Cw8jYpunHqI5NFQPNDf4=
Subject key identifier: BC:54:E1:9A:EC:4B:D3:0C:1C:3A:C0:A3:5E:B1:1B:F1:C2:94:13:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 639DD0E8085C24EC0391B68D15CCD7507BC96A91
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
Signing time: Wed 29 Apr 2026 19:09:02 +0000
ROA not before: Wed 29 Apr 2026 19:04:02 +0000
ROA not after: Wed 28 Apr 2027 19:09:02 +0000
asID: 34989
IP address blocks: 82.39.170.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.198.0/24 maxlen: 24
82.47.146.0/24 maxlen: 24
84.75.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9d:d0:e8:08:5c:24:ec:03:91:b6:8d:15:cc:d7:50:7b:c9:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 19:04:02 2026 GMT
Not After : Apr 28 19:09:02 2027 GMT
Subject: CN=BC54E19AEC4BD30C1C3AC0A35EB11BF1C29413C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:30:d5:dd:c4:c8:a1:5b:d0:5b:8d:da:bc:
cd:1c:fd:22:98:7f:c6:91:3d:cb:9a:d1:8d:44:55:
a0:8f:e8:61:d8:0e:9a:46:4e:75:38:53:57:94:4b:
51:cf:69:36:b1:37:06:0e:fe:1f:f6:7b:33:7c:07:
32:d0:35:b2:96:d6:44:42:7e:4d:30:f1:88:92:9a:
3e:b0:50:5f:de:b9:dc:40:64:c2:c9:39:b2:4f:63:
f2:dd:72:e4:66:30:0c:54:1e:19:4e:bd:d7:10:69:
23:75:50:f0:9f:cc:fd:bc:da:c4:22:bb:e4:5e:6b:
66:d6:cf:0e:83:53:5a:66:5b:a0:c9:4f:48:33:90:
bf:af:98:af:f4:d5:fc:cc:ea:ad:eb:6d:d5:98:5a:
89:10:db:9e:a2:09:19:4d:ba:87:98:2e:cf:78:9b:
7e:fa:37:b0:4f:e8:59:11:3f:d8:4e:40:57:74:a2:
8c:98:38:69:42:74:7b:a7:fb:3a:20:54:15:10:2e:
ec:4e:3e:15:71:e3:9e:60:be:52:ec:63:12:56:68:
45:bf:b6:4e:f7:35:10:bc:71:da:24:e4:3b:00:e5:
fc:cb:f7:8e:9a:95:2b:91:c8:0d:44:1d:ac:8b:8d:
32:cf:f8:82:19:fe:d9:0f:23:ee:ca:be:c4:45:e6:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:E1:9A:EC:4B:D3:0C:1C:3A:C0:A3:5E:B1:1B:F1:C2:94:13:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.170.0/24
82.40.51.0/24
82.41.198.0/24
82.47.146.0/24
84.75.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:16:41:d2:67:c1:6f:a8:c2:e3:c9:40:95:48:ac:7b:af:f7:
9e:12:d8:32:bc:18:0b:fa:2a:5e:a2:e1:45:88:9e:8f:48:2d:
a2:c6:7c:c9:83:f6:85:e5:a4:ae:62:99:cc:5b:f7:81:3b:ea:
10:53:00:53:ae:48:c9:47:09:23:85:ab:b3:77:7d:2e:c3:e6:
9b:22:85:63:21:00:c3:6d:37:19:44:de:a3:98:1d:8f:5d:0a:
87:ae:65:5a:46:66:44:38:5d:fa:be:7d:b8:9a:c3:e6:f0:66:
1f:a9:7f:33:2f:8f:46:94:8a:9d:5b:3e:67:80:fe:24:df:45:
d9:6d:40:09:ee:8b:cc:bf:bd:02:8d:7c:f3:55:c9:87:2c:90:
1b:7d:39:1c:cb:c9:f7:9d:25:2f:00:23:7d:06:55:23:b7:f1:
e5:bf:b9:d4:79:9b:65:8f:4e:63:f2:27:ca:74:fd:f5:53:ca:
f5:36:e7:3b:eb:d6:b3:16:69:57:b4:ff:53:08:6b:f0:fc:95:
83:c6:b4:a1:76:82:25:94:b0:45:06:de:fd:0f:88:77:92:e9:
c2:b3:5c:df:ae:32:c9:de:ac:53:a1:9e:f6:be:2e:89:d8:66:
b7:76:99:c6:cc:14:69:79:57:ee:e7:a9:82:dd:48:f0:c8:42:
6c:ba:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:18 2026 by rpki-client