Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: Y46om2dE4+zzkMK3KQm9XLYFjtRAmbShDX2/dhcEgUY=
Subject key identifier: 4A:78:C8:B6:C1:DB:5E:DD:40:76:1D:48:1D:89:A0:12:4F:AC:61:C0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 17C9F7040B9D0FB5C9FF71F23F2A8F20230B751C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
Signing time: Tue 25 Aug 2026 22:24:28 +0000
ROA not before: Tue 25 Aug 2026 22:19:28 +0000
ROA not after: Tue 24 Aug 2027 22:24:28 +0000
asID: 34989
IP address blocks: 82.29.49.0/24 maxlen: 24
82.29.70.0/24 maxlen: 24
82.29.98.0/24 maxlen: 24
82.39.233.0/24 maxlen: 24
178.83.138.0/24 maxlen: 24
178.83.140.0/24 maxlen: 24
178.83.143.0/24 maxlen: 24
178.83.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c9:f7:04:0b:9d:0f:b5:c9:ff:71:f2:3f:2a:8f:20:23:0b:75:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 22:19:28 2026 GMT
Not After : Aug 24 22:24:28 2027 GMT
Subject: CN=4A78C8B6C1DB5EDD40761D481D89A0124FAC61C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:df:3b:31:84:68:37:fb:73:2c:62:39:06:
ef:68:9e:ea:4c:3a:75:5b:5e:a1:0c:c3:9f:04:c0:
92:c7:b2:42:c3:8a:25:de:43:94:85:18:52:eb:d7:
09:63:87:58:29:71:26:e7:78:3b:5b:ba:be:ab:1c:
19:3a:e0:35:e0:5c:82:42:fe:61:97:af:12:10:aa:
ed:d6:9e:91:cf:5c:d1:c3:0f:b3:d3:05:ea:f2:34:
60:28:63:79:0d:ff:bc:2f:da:13:dd:59:13:9c:42:
2b:a4:96:1e:ed:7f:c2:89:9f:4c:2d:d4:f3:27:f7:
2b:23:fe:4d:34:f1:30:e1:26:51:11:c3:da:cf:ca:
99:c7:38:b2:83:38:5a:1f:ab:92:a5:e8:4e:bd:e6:
ae:13:1d:0d:88:e8:80:a2:0e:f1:73:4a:a7:cd:ef:
46:35:0a:18:db:73:da:71:73:f0:73:29:82:09:51:
f3:6b:2d:8f:80:7a:10:87:f1:3b:24:9f:d6:96:13:
4d:91:7f:70:83:cc:99:d6:75:8f:28:cd:03:5b:22:
60:66:c9:cd:1e:46:e8:9f:55:0a:96:c6:7d:33:64:
8c:cd:34:43:de:b6:0a:2c:bf:2b:3b:8e:e8:0a:9f:
00:7d:63:bc:23:6c:52:7c:66:95:fa:d2:cf:27:0b:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:C8:B6:C1:DB:5E:DD:40:76:1D:48:1D:89:A0:12:4F:AC:61:C0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.49.0/24
82.29.70.0/24
82.29.98.0/24
82.39.233.0/24
178.83.138.0/24
178.83.140.0/24
178.83.143.0/24
178.83.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e8:3d:74:81:e5:d3:a2:3e:90:e5:b9:e5:90:63:e0:f7:51:
ca:7a:9b:64:aa:48:d5:08:f2:ce:24:b6:48:3c:9d:03:3d:b1:
b9:af:64:26:45:f2:34:41:1a:0b:4f:44:e3:93:5b:7a:44:b2:
d8:78:1d:bb:ed:ff:dd:06:4e:56:7c:bd:a6:ef:a4:b4:51:bf:
ca:3e:f3:fd:c1:0b:23:a5:df:1f:7a:11:76:12:7a:9d:3e:3b:
b3:b8:49:ef:d9:4a:ba:6e:4c:29:d0:24:94:39:c0:3c:3d:4c:
ea:4c:51:47:ee:97:e0:d1:a8:4c:03:0f:df:c5:6e:3c:4f:eb:
04:65:37:85:5b:c2:36:79:71:fe:22:9f:b1:44:3e:f5:01:f7:
28:88:42:a3:03:cd:dd:c9:bb:6e:a7:40:6c:e0:be:46:18:d4:
cc:82:75:5e:3a:33:cf:09:e0:af:76:3e:d5:81:18:19:ab:45:
80:23:fb:48:b5:23:da:c3:37:4c:0a:60:f5:c5:e9:cd:b3:85:
b7:99:59:79:e2:60:30:51:66:7b:d7:72:53:39:d4:dd:f0:0f:
bc:89:20:84:86:30:20:de:2c:ab:8d:09:88:6b:c9:aa:6e:8b:
05:90:ce:30:a3:99:89:2c:f8:c7:0f:3c:43:e8:9a:67:77:89:
55:0d:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:45:32 2026 by rpki-client