Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
File: AS34989.roa (raw, json)
Hash identifier: 4HEEHFkzNUI6bXwZ2q0ngvgKhuCQ/ArnZCfIWqB9joY=
Subject key identifier: A6:2C:6C:FD:2A:4E:A6:9B:43:4B:01:D9:2D:98:F8:DA:8F:33:E7:87
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4D049BE0053F9601FC5D32FB2FD9BAEA8D0CD80F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
Signing time: Tue 20 Oct 2026 00:02:44 +0000
ROA not before: Mon 19 Oct 2026 23:57:44 +0000
ROA not after: Tue 19 Oct 2027 00:02:44 +0000
asID: 34989
IP address blocks: 188.220.222.0/24 maxlen: 24
188.220.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:04:9b:e0:05:3f:96:01:fc:5d:32:fb:2f:d9:ba:ea:8d:0c:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 19 23:57:44 2026 GMT
Not After : Oct 19 00:02:44 2027 GMT
Subject: CN=A62C6CFD2A4EA69B434B01D92D98F8DA8F33E787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:b6:67:42:eb:04:ee:93:61:01:5f:c0:a0:
a3:77:35:74:02:bb:0b:c4:23:de:9a:2d:05:25:81:
aa:c1:5f:84:e7:24:4b:51:7a:83:3d:0c:3d:d8:ca:
34:f3:0b:c0:4f:16:b9:07:12:7f:49:80:71:35:4b:
63:6d:fb:ae:a7:1f:19:6f:22:64:4d:96:00:93:2c:
4f:d7:14:81:47:11:7e:4b:71:f9:a5:9a:3d:eb:ad:
dc:ba:bc:d4:51:da:0a:85:99:46:da:13:4a:55:34:
b5:60:08:9c:be:4b:46:2f:90:42:72:54:f8:2f:4c:
d2:81:22:50:44:e7:32:88:67:fc:b5:5e:99:4a:f8:
46:4c:38:10:32:40:2a:d7:f9:a1:06:cb:cd:ce:14:
16:f1:72:df:00:88:fe:08:3c:ff:da:cf:5c:28:92:
b4:41:d0:84:01:01:b9:c5:00:3a:f7:be:eb:e9:56:
02:69:0b:91:14:cb:02:2b:37:35:b5:78:01:65:8f:
fe:57:d9:3f:e9:c2:d8:ee:e6:c7:71:4c:f4:92:c5:
9b:80:c7:55:93:c3:58:bf:78:d3:fb:12:f8:d4:04:
34:52:1b:e6:03:c0:4c:49:80:c2:db:b9:56:05:06:
95:f7:bc:72:4f:7b:81:ea:21:f6:0c:46:75:83:b6:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:6C:FD:2A:4E:A6:9B:43:4B:01:D9:2D:98:F8:DA:8F:33:E7:87
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS34989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.222.0/24
188.220.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:70:1e:83:61:84:ee:ac:57:18:42:44:75:35:d8:4e:cf:be:
3f:45:41:92:ef:f5:39:54:ee:34:6b:b9:45:7a:6f:2e:28:e9:
9b:97:a5:cd:d3:ed:38:6e:01:1a:17:90:f4:6f:34:ff:97:a7:
94:6d:2d:c3:32:f6:c3:16:d5:33:2d:32:38:1b:f9:11:3d:d3:
c5:ba:a8:dc:84:74:da:46:54:00:b6:76:4b:dd:56:87:aa:e4:
e8:4f:d8:98:34:bf:42:c1:72:ba:63:21:5e:e6:1a:4b:79:4a:
ab:db:ce:84:44:9e:e3:87:00:1e:71:10:e0:a3:f6:32:b1:1c:
4c:73:67:92:ef:43:54:90:b8:cb:32:a4:d1:0c:ec:72:92:fd:
e2:4c:93:3a:eb:7b:ee:c0:1d:cc:92:b8:d0:6f:1c:96:c8:6f:
78:e9:82:aa:5b:f0:9b:cd:a5:1a:b2:f3:6c:be:05:85:a0:1b:
88:d7:95:ec:45:1c:af:7d:fe:ca:4b:bb:75:06:9d:69:7e:bb:
b8:bf:f8:32:7f:5b:02:57:0b:68:8f:19:6c:59:a6:a3:3e:1a:
0d:e3:e8:dc:81:35:9b:b3:da:01:d3:c2:4e:fe:43:aa:6b:a9:
32:f7:8b:7d:1c:9d:cc:33:71:db:31:8b:6e:85:ef:27:af:5d:
7e:fa:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:34:20 2026 by rpki-client