Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: gdWk/Cc9terMX2v7jOsNqExHhp1jCfDg8pYLuoiPDYM=
Subject key identifier: 27:AE:77:4B:FF:6A:7B:10:35:B9:75:2E:FD:EA:5A:E7:FD:EA:0A:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1321C04264B453F2A185D28CE9BF9E07615B59EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
Signing time: Thu 05 Nov 2026 20:57:56 +0000
ROA not before: Thu 05 Nov 2026 20:52:56 +0000
ROA not after: Thu 04 Nov 2027 20:57:56 +0000
asID: 34989
IP address blocks: 82.29.98.0/24 maxlen: 24
178.83.138.0/24 maxlen: 24
178.83.140.0/24 maxlen: 24
178.83.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:21:c0:42:64:b4:53:f2:a1:85:d2:8c:e9:bf:9e:07:61:5b:59:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 5 20:52:56 2026 GMT
Not After : Nov 4 20:57:56 2027 GMT
Subject: CN=27AE774BFF6A7B1035B9752EFDEA5AE7FDEA0A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:45:1d:ff:55:c0:10:31:b1:c7:be:cc:a8:
91:0c:4d:ae:c4:1d:09:c8:0b:e7:e2:05:95:9c:68:
31:ca:77:3e:74:d4:40:cd:a1:a1:ce:1b:11:4a:a6:
bd:ea:9b:8a:d3:c0:df:02:9e:04:74:d3:e9:3d:40:
f9:7f:88:11:38:a8:33:57:74:55:49:8c:eb:8e:ce:
72:f1:61:9c:6a:47:c5:12:3a:e5:f4:4d:36:0c:3e:
f7:0c:d6:ca:e2:4a:68:a5:b6:c5:35:19:36:54:27:
c9:12:4f:21:3e:be:13:cc:f8:47:99:72:26:39:a8:
77:36:7e:9a:55:b1:15:b7:54:a0:8b:18:7a:b2:9c:
db:6e:80:42:4a:b4:47:2c:e4:c7:85:4e:b2:23:10:
10:89:8c:76:17:84:ce:a2:1b:50:7b:70:22:7c:96:
0d:8c:c3:93:69:ae:43:9d:c7:68:a4:9d:8b:2c:da:
74:88:90:26:51:d4:19:2b:56:05:e3:06:b4:4c:e3:
be:cd:af:b7:ab:e7:88:48:18:27:03:22:2e:ee:7e:
10:9e:32:c8:52:88:eb:6b:f0:58:a9:94:5d:d0:c5:
b7:74:77:f1:be:4e:64:88:ce:f5:10:2b:7b:27:05:
19:34:2a:47:cd:9a:0c:9e:29:c8:63:e2:cd:66:93:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:77:4B:FF:6A:7B:10:35:B9:75:2E:FD:EA:5A:E7:FD:EA:0A:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.98.0/24
178.83.138.0/24
178.83.140.0/24
178.83.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ab:d7:a0:c9:27:7c:99:5f:de:84:1f:1f:75:a7:3f:8a:66:
32:24:0d:90:a9:7a:58:43:f8:f9:a2:43:a2:bc:86:88:00:22:
cd:25:3f:fe:df:33:ee:99:8b:ee:0f:d2:99:87:82:ea:a1:a3:
0b:88:12:e9:5b:7a:4e:90:70:8b:e5:be:72:be:ac:92:ae:7c:
96:1b:ff:76:12:29:5f:7b:b9:4c:c8:b8:55:d8:8f:fd:a0:bd:
a0:fe:c5:c0:58:95:da:a9:5c:8c:f2:9c:63:5a:72:6e:83:9b:
b8:38:09:e2:e8:44:cb:57:ad:b6:ae:9e:c0:3c:e7:61:58:3c:
70:5a:14:6f:00:20:42:ed:9e:61:04:77:69:6f:eb:0a:c4:55:
6d:8a:46:19:21:6b:f0:dc:8d:c3:c6:c1:8b:49:75:14:ba:75:
a9:01:9f:19:66:03:f5:7d:68:f2:5e:45:4f:ea:f0:f5:a0:a6:
30:8e:54:d6:14:08:70:2b:1e:d7:d8:bf:4a:d0:40:ee:15:d5:
2e:8e:e9:3a:59:14:cf:17:22:0d:4b:ef:3c:4d:c9:b1:fb:1f:
8d:49:07:ad:af:88:3e:0d:0c:f9:73:e0:5e:83:e1:c1:22:13:
a5:e1:14:49:fb:46:7c:07:cc:3c:1d:f6:97:b3:51:4e:f0:d3:
61:c8:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 10:51:25 2026 by rpki-client