Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: ayVxifDXANBdRO/9xhtL9MLQ+Avabx4ltuSZZpe17Rg=
Subject key identifier: 60:5E:B6:81:BF:2E:D1:87:80:58:81:3E:BB:58:DF:18:BE:03:64:DF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 16A2813AE5BC3EEA68AEF691803FA92D4BEC613D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
Signing time: Tue 25 Aug 2026 22:24:20 +0000
ROA not before: Tue 25 Aug 2026 22:19:20 +0000
ROA not after: Tue 24 Aug 2027 22:24:20 +0000
asID: 34989
IP address blocks: 51.241.145.0/24 maxlen: 24
78.105.112.0/24 maxlen: 24
78.105.124.0/24 maxlen: 24
188.220.222.0/24 maxlen: 24
188.220.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a2:81:3a:e5:bc:3e:ea:68:ae:f6:91:80:3f:a9:2d:4b:ec:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 25 22:19:20 2026 GMT
Not After : Aug 24 22:24:20 2027 GMT
Subject: CN=605EB681BF2ED1878058813EBB58DF18BE0364DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:0b:75:2b:70:0d:87:0a:bc:63:be:6e:aa:
04:b0:44:6e:fd:29:b3:ac:98:61:e7:13:06:94:8f:
c0:f4:a4:c3:8f:59:64:03:d2:e7:f6:0a:f3:cc:47:
08:9d:e4:39:15:79:ef:31:02:80:3a:31:2f:cb:40:
ba:45:f9:fe:c4:f9:44:22:fc:48:5d:da:fc:ba:7b:
b3:54:e5:8e:12:c4:8d:f2:b9:dc:19:ef:f8:df:9c:
8b:f7:79:5c:de:6b:e6:4b:fb:4f:38:88:54:eb:48:
d2:84:95:a8:c0:6f:be:5e:74:ff:91:b1:ff:e6:b1:
d5:8c:9a:13:d9:af:9e:bb:03:fd:0b:9b:02:fe:09:
0a:5f:8c:1b:66:a3:10:c9:97:41:e1:1d:b0:ed:3f:
ea:71:2e:77:6a:b0:fe:0f:83:88:ae:e4:d0:34:a9:
59:4e:cd:df:44:60:53:60:37:d2:ed:fe:38:44:ef:
1a:ae:41:63:cf:64:99:9c:99:59:43:ae:60:58:9f:
7b:f0:be:46:b6:25:3f:f7:39:ac:bd:7f:a6:57:68:
95:3f:de:04:1a:03:e4:63:74:4e:bf:c8:4f:c6:4b:
ee:c4:91:a7:d5:53:1a:0c:62:58:d4:3e:70:ae:9d:
45:95:ac:cc:d0:db:d5:1e:e2:7d:2a:5d:b9:22:c1:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:B6:81:BF:2E:D1:87:80:58:81:3E:BB:58:DF:18:BE:03:64:DF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.145.0/24
78.105.112.0/24
78.105.124.0/24
188.220.222.0/24
188.220.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fd:0d:a3:48:c6:98:2d:7a:6a:a0:37:0e:12:62:5a:5c:0b:
03:bc:30:a0:1e:3b:10:56:4e:22:30:d7:1e:92:36:79:39:b1:
fb:6b:70:d1:a3:53:e5:53:8d:ff:4f:dd:ce:bf:29:bc:f1:a6:
f6:59:2d:b9:e2:02:c5:b7:9f:15:16:2d:00:61:90:5c:b1:25:
52:48:44:61:d9:90:05:c9:c7:53:d9:d9:0f:c4:46:b9:54:15:
36:c0:bc:c2:95:01:28:54:fd:b3:7a:23:3d:40:62:e4:15:23:
ed:f4:c8:b2:59:a8:d4:11:5e:19:8a:f6:1c:a6:c9:51:65:56:
03:76:a0:db:9d:16:cc:87:4f:8c:b9:d1:8d:d1:9f:c8:68:5f:
50:5b:f0:39:24:fb:cd:4c:ee:79:6b:34:79:2f:13:7a:25:b9:
50:0a:b2:6f:dd:69:0e:f3:85:f4:c6:9d:b2:04:1e:3c:f5:44:
cb:4b:0b:c9:f1:2f:59:a3:06:ec:bd:ee:be:0b:cb:34:65:b8:
1f:c6:5e:86:e1:26:3d:49:3b:b8:b3:7c:5d:9c:1a:06:19:3e:
a9:f3:4f:6e:71:61:25:a0:28:b0:b1:af:f2:77:32:14:f7:07:
5c:3b:1b:94:88:ae:69:9b:d0:65:e7:00:5a:32:b3:2e:e6:40:
99:f6:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:34:45 2026 by rpki-client