Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: 6QaXekaRBfgG80KsOO6zron+qehlaQxS3UxckfKF97w=
Subject key identifier: B6:D9:B1:A3:52:50:A4:6D:99:2E:FC:D0:CF:DB:03:19:BD:25:4D:5B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4DB54AFD997C24089A34D76FA0D7FE80D9FF7DA4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34989.roa
Signing time: Wed 25 Mar 2026 13:37:51 +0000
ROA not before: Wed 25 Mar 2026 13:32:51 +0000
ROA not after: Wed 24 Mar 2027 13:37:51 +0000
asID: 34989
IP address blocks: 141.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b5:4a:fd:99:7c:24:08:9a:34:d7:6f:a0:d7:fe:80:d9:ff:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 25 13:32:51 2026 GMT
Not After : Mar 24 13:37:51 2027 GMT
Subject: CN=B6D9B1A35250A46D992EFCD0CFDB0319BD254D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:3e:94:f6:01:a5:2b:9c:5a:43:3b:7e:69:
03:3b:bd:f2:b6:8c:b1:24:b3:9f:af:78:ea:84:00:
38:87:66:22:3f:bf:b4:d9:d4:bb:c9:92:01:8d:de:
20:49:f8:a9:cb:fa:b5:d8:ae:ea:7e:8c:69:06:17:
18:25:3f:05:f6:f5:be:62:6b:48:5b:a9:48:a5:30:
e7:78:8e:ab:30:4f:14:80:7d:56:27:a4:4a:6a:14:
43:6d:f3:52:ba:25:14:b3:47:9c:41:78:82:ef:3d:
77:a9:71:fd:6b:e9:99:6d:fe:0e:55:e9:b6:a1:2c:
00:dd:71:43:8d:b0:a5:3c:c9:21:d5:d7:f6:73:b8:
24:49:80:eb:e5:18:de:7e:d6:4b:06:11:33:3c:82:
a0:66:ea:9d:0d:4a:73:1c:3f:be:38:df:67:13:0d:
0c:1d:85:fb:20:bb:63:2a:25:14:d5:f9:f2:c9:1a:
a7:6f:f8:fc:b2:64:4a:41:27:f1:c6:d7:ff:0c:36:
43:c0:68:9e:36:83:28:c5:90:6f:37:4a:08:06:35:
62:42:56:c2:a8:84:e1:d6:61:3a:9a:c7:70:29:dd:
c5:4d:bd:31:6f:00:52:1c:d8:5e:ee:f5:d1:4e:59:
35:e7:04:07:68:a6:7e:45:9c:9d:52:ab:b5:72:3e:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:B1:A3:52:50:A4:6D:99:2E:FC:D0:CF:DB:03:19:BD:25:4D:5B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:59:c5:f1:47:a8:6b:95:c0:41:11:b2:db:5a:59:32:30:b7:
9b:e4:79:68:c4:32:97:95:b7:81:76:1b:64:23:b7:48:5e:52:
1a:25:07:a8:4a:0b:3d:f2:70:53:0c:35:f1:7f:10:8f:f7:2a:
49:41:40:68:10:b3:bc:75:ee:e7:d0:92:65:a8:b3:1c:21:47:
9a:33:09:93:98:5a:2d:41:88:26:d2:b7:1f:a0:91:d1:a4:bd:
9d:dd:51:01:5e:34:98:5d:c1:31:01:26:d4:ad:2a:a4:61:39:
f2:ca:d1:6a:2c:b9:3f:9c:f5:5c:d8:72:f3:2a:5f:f4:68:41:
3f:b9:da:88:9a:c7:d0:be:5e:51:d7:fc:5c:ca:5c:37:b3:2a:
37:5d:47:5c:8d:4d:35:af:e3:32:42:30:12:35:ef:67:0b:38:
7f:fd:9b:d1:77:4f:9c:c6:62:a0:6c:46:45:00:93:2a:fa:0b:
ed:19:f4:2e:60:15:21:bb:5b:2c:76:d6:d6:32:2c:82:cf:1c:
d8:21:bc:1d:fa:0a:f4:c6:d4:83:b8:c9:28:0c:fa:2e:67:9b:
a4:d1:09:41:00:7f:11:27:9e:be:e7:f7:36:20:bf:1d:95:df:
fa:4a:48:64:54:a7:e8:02:f7:f2:48:9c:be:76:ee:51:17:40:
ee:01:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:28 2026 by rpki-client