Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: Jo1TZT7OjZvMNuVFBHB1mVKSruAmLvJ+brs0E+oqGDg=
Subject key identifier: 8B:51:73:C1:51:96:A2:F8:08:3A:A3:62:0C:B2:38:EF:86:59:2A:C8
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 778559D8C0C7A8CD54E6C8AA4C00D6168195CE5B
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
Signing time: Wed 11 Nov 2026 00:02:17 +0000
ROA not before: Tue 10 Nov 2026 23:57:17 +0000
ROA not after: Wed 10 Nov 2027 00:02:17 +0000
asID: 834
IP address blocks: 152.237.225.0/24 maxlen: 24
152.237.234.0/23 maxlen: 24
152.237.236.0/24 maxlen: 24
152.237.238.0/24 maxlen: 24
152.237.240.0/24 maxlen: 24
152.237.243.0/24 maxlen: 24
152.237.245.0/24 maxlen: 24
152.237.250.0/23 maxlen: 24
152.237.252.0/23 maxlen: 24
177.177.228.0/24 maxlen: 24
177.177.232.0/24 maxlen: 24
177.177.239.0/24 maxlen: 24
177.177.240.0/24 maxlen: 24
177.177.242.0/23 maxlen: 24
177.177.245.0/24 maxlen: 24
177.177.247.0/24 maxlen: 24
177.177.248.0/23 maxlen: 24
177.177.251.0/24 maxlen: 24
177.177.252.0/23 maxlen: 24
177.177.255.0/24 maxlen: 24
186.241.163.0/24 maxlen: 24
186.241.165.0/24 maxlen: 24
186.241.166.0/24 maxlen: 24
186.241.169.0/24 maxlen: 24
186.241.170.0/24 maxlen: 24
186.241.172.0/23 maxlen: 24
186.241.174.0/24 maxlen: 24
186.241.177.0/24 maxlen: 24
186.241.181.0/24 maxlen: 24
186.241.190.0/24 maxlen: 24
201.4.16.0/24 maxlen: 24
201.4.18.0/24 maxlen: 24
201.4.29.0/24 maxlen: 24
201.4.30.0/24 maxlen: 24
201.50.16.0/23 maxlen: 24
201.50.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 02:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:85:59:d8:c0:c7:a8:cd:54:e6:c8:aa:4c:00:d6:16:81:95:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Nov 10 23:57:17 2026 GMT
Not After : Nov 10 00:02:17 2027 GMT
Subject: CN=8B5173C15196A2F8083AA3620CB238EF86592AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:10:8d:85:8b:87:8a:7a:19:51:a8:90:22:
4b:15:a3:f9:86:15:e8:f8:8c:13:90:bf:54:47:37:
e1:15:82:e7:c2:d8:4b:70:cc:f9:57:9a:66:ba:5e:
7b:8c:ab:eb:3f:98:6d:f2:9c:fd:aa:7e:29:47:49:
1f:cf:fb:c3:ae:52:ab:88:98:9a:28:22:c3:5e:e5:
26:b6:60:0b:9f:52:01:c6:0c:27:e9:99:c5:0e:b4:
e8:8a:5a:d1:86:d0:c2:81:6b:4a:ac:c4:17:b9:89:
6c:00:4f:1e:21:c1:52:ac:9e:4d:71:15:45:f8:2b:
9e:79:ae:ed:03:0c:63:41:cb:b2:4a:1e:c5:87:57:
b4:94:35:7f:2e:ad:15:9f:b8:54:43:db:a4:aa:b8:
ed:f0:cb:86:5e:19:a8:56:80:71:5a:54:66:ae:60:
9e:dd:e0:24:42:97:52:b3:fd:82:d0:38:3a:82:ca:
4f:40:b1:e0:50:a9:47:40:e9:38:f5:4d:bd:77:49:
24:26:11:e8:0b:35:d2:a9:bb:ae:8d:1a:3e:71:13:
fc:b7:9b:6b:d8:c0:82:b8:6b:d1:1a:d3:e9:46:e0:
f0:92:0d:f7:95:14:a8:c8:71:53:f8:c7:95:07:9c:
1c:f8:c9:54:bc:8e:98:bf:20:f5:e9:2f:30:41:d5:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:73:C1:51:96:A2:F8:08:3A:A3:62:0C:B2:38:EF:86:59:2A:C8
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.225.0/24
152.237.234.0-152.237.236.255
152.237.238.0/24
152.237.240.0/24
152.237.243.0/24
152.237.245.0/24
152.237.250.0-152.237.253.255
177.177.228.0/24
177.177.232.0/24
177.177.239.0-177.177.240.255
177.177.242.0/23
177.177.245.0/24
177.177.247.0-177.177.249.255
177.177.251.0-177.177.253.255
177.177.255.0/24
186.241.163.0/24
186.241.165.0-186.241.166.255
186.241.169.0-186.241.170.255
186.241.172.0-186.241.174.255
186.241.177.0/24
186.241.181.0/24
186.241.190.0/24
201.4.16.0/24
201.4.18.0/24
201.4.29.0-201.4.30.255
201.50.16.0/23
201.50.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:00:e6:45:19:ec:39:23:14:4e:f1:7e:d3:39:5b:d5:cb:8b:
78:b0:e8:b3:d1:23:42:4f:85:47:02:49:03:99:19:0d:a9:e8:
1b:d2:da:fe:d6:cd:9a:76:0d:35:a7:48:d7:26:01:7a:a0:b0:
e1:9f:26:93:18:c9:6a:a5:5e:bc:aa:50:5f:1b:79:de:f9:ca:
ea:9e:49:58:43:b8:6d:74:64:f6:0b:bd:32:7c:62:93:cc:2e:
b7:4a:22:2a:59:c3:7c:30:a4:d5:ff:a6:0a:74:86:70:83:76:
6c:b4:46:75:ac:4c:ac:af:2f:9e:d0:6e:1a:b5:82:ed:e7:06:
58:53:e8:f2:52:2a:75:1b:53:b6:69:c3:38:0b:18:5b:0d:ce:
71:09:31:14:2b:d9:cb:85:a1:4f:a8:96:1f:e8:d9:a4:19:af:
3d:56:2d:1a:98:29:c7:34:ff:df:02:ae:1b:66:0c:73:98:90:
f3:52:9e:92:61:59:c5:d3:88:c9:14:bb:f5:bf:2b:2a:d4:f5:
10:69:86:92:cd:c8:aa:50:33:d8:fb:90:ad:82:59:df:3f:7d:
f6:0d:9a:52:32:9a:2d:10:f1:69:a2:2f:ef:5f:61:84:56:6e:
4a:b5:24:38:2b:2e:f8:a6:73:06:ed:40:a1:c4:42:00:45:95:
92:b5:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:55:04 2026 by rpki-client