Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34872.roa
File: AS34872.roa (raw, json)
Hash identifier: 65DdOv4gh4hGaKNqHITBIIk5jJxw8dA1ZFRuG7FGjr0=
Subject key identifier: DC:D0:EE:A7:54:47:58:1E:2B:2D:44:D7:00:C9:FC:CD:93:38:16:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B1F43AAF98954D888B03B32F82A4F3877B65C3E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34872.roa
Signing time: Fri 25 Sep 2026 11:02:28 +0000
ROA not before: Fri 25 Sep 2026 10:57:28 +0000
ROA not after: Fri 24 Sep 2027 11:02:28 +0000
asID: 34872
IP address blocks: 82.39.166.0/24 maxlen: 24
2a13:9500:1e5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1f:43:aa:f9:89:54:d8:88:b0:3b:32:f8:2a:4f:38:77:b6:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 10:57:28 2026 GMT
Not After : Sep 24 11:02:28 2027 GMT
Subject: CN=DCD0EEA75447581E2B2D44D700C9FCCD93381630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:62:48:da:49:37:d8:27:5f:20:d1:e3:17:
de:4f:18:82:bc:77:be:aa:c8:d9:58:e3:4c:51:a5:
59:01:63:9d:63:ae:af:78:63:60:42:e4:4a:1e:d7:
25:be:9c:f6:27:1c:90:30:05:14:ec:cd:c4:3e:d9:
c1:d3:6e:4c:00:12:98:a7:47:3b:ec:1d:4e:d7:7d:
5b:5d:6b:7d:18:f5:dd:1a:6f:0d:fe:95:56:ab:40:
dc:b6:2e:1c:4c:18:48:26:15:33:2f:c9:fd:68:5b:
5b:de:c4:d2:b2:e9:0f:07:94:fb:29:ad:fb:c5:d3:
88:11:6d:5e:6e:7b:e2:61:22:c6:9d:aa:da:c5:01:
1e:ea:0a:c5:ae:bc:a7:80:40:d5:99:95:26:27:c7:
2f:22:15:c6:0d:e4:61:28:ec:8b:d2:2b:a9:38:a3:
45:62:0f:b1:01:15:c2:fd:4b:b4:0c:c6:d9:4b:66:
de:00:c2:98:04:29:95:95:44:c7:c7:93:cb:7e:85:
26:37:f6:af:99:b1:6c:13:b3:f8:38:4d:34:f9:10:
0d:78:6f:04:55:47:94:63:83:fd:11:1f:c5:74:1f:
6b:ad:2a:07:c2:25:f4:38:4c:51:f0:1d:c8:2b:1c:
c0:da:ea:b5:dc:85:6c:65:b8:1b:d2:7f:4a:a1:1e:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:EE:A7:54:47:58:1E:2B:2D:44:D7:00:C9:FC:CD:93:38:16:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.166.0/24
IPv6:
2a13:9500:1e5::/48
Signature Algorithm: sha256WithRSAEncryption
a9:7b:5d:15:4a:e8:5e:8c:40:2b:5f:5b:29:4b:70:44:51:d1:
28:58:7f:df:34:cd:d6:87:91:00:f0:ab:9b:c5:6d:91:53:b1:
97:6a:5a:32:2f:b6:2d:a8:d9:65:5d:3b:4d:b2:76:5b:88:76:
77:28:e2:10:f0:16:f0:6d:75:38:3b:06:5e:f4:2a:e6:64:97:
a0:03:2a:7f:d0:72:82:d2:31:c2:56:b5:3a:a9:c3:8b:02:92:
1e:a3:97:94:58:17:05:79:06:b8:94:cd:3c:1d:b4:87:94:fa:
17:3a:d4:01:7c:df:bd:fe:2b:a5:58:6f:1a:03:39:10:9b:76:
1d:41:7c:e6:5d:01:f4:5e:fb:93:85:64:de:53:f2:24:0a:53:
59:f3:96:59:fa:17:4b:30:e9:b4:3a:50:66:6b:e1:e1:c1:b8:
d4:26:0e:81:bf:4e:40:a8:43:25:e2:17:58:6e:8f:4a:be:e2:
f4:e3:09:10:b4:1d:0c:38:60:cf:8b:44:c1:c0:cb:2b:a6:8e:
a3:e5:4d:a2:e1:a8:b0:c8:6a:75:cb:22:66:58:3c:28:c6:a0:
77:11:fe:2d:44:3f:a3:76:db:f5:ae:53:38:e6:43:33:9e:90:
83:4e:7e:07:58:fa:57:b5:19:1a:49:88:6b:7e:e2:02:4a:c3:
b5:a2:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:06 2026 by rpki-client