Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: fFBcSP8iymSj/iyR3ysmY4iGLhnx0U7MmQcYtfic+50=
Subject key identifier: E6:04:AF:2C:9D:0D:AD:F3:C5:BF:C7:78:9B:97:19:A2:14:01:2C:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 643E7C410F669E6C0FE987D34589DD6861C1A74B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Wed 23 Sep 2026 11:20:30 +0000
ROA not before: Wed 23 Sep 2026 11:15:30 +0000
ROA not after: Wed 22 Sep 2027 11:20:30 +0000
asID: 834
IP address blocks: 69.90.35.0/24 maxlen: 24
69.90.119.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.217.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.150.239.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/23 maxlen: 24
143.14.23.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.82.0/23 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.130.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.152.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.187.0/24 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.198.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.229.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
147.79.26.0/24 maxlen: 24
147.79.55.0/24 maxlen: 24
148.135.172.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.242.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.123.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.150.0/24 maxlen: 24
155.117.156.0/24 maxlen: 24
155.117.186.0/24 maxlen: 24
155.117.200.0/23 maxlen: 24
155.117.228.0/24 maxlen: 24
155.117.240.0/23 maxlen: 24
155.117.249.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.126.0/24 maxlen: 24
162.141.140.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.3.0/24 maxlen: 24
167.148.94.0/24 maxlen: 24
167.148.141.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
168.222.17.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.24.0/24 maxlen: 24
168.222.36.0/24 maxlen: 24
168.222.45.0/24 maxlen: 24
168.222.52.0/24 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.67.0/24 maxlen: 24
168.222.68.0/24 maxlen: 24
168.222.70.0/24 maxlen: 24
168.222.73.0/24 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.84.0/24 maxlen: 24
168.222.92.0/24 maxlen: 24
168.222.116.0/23 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3e:7c:41:0f:66:9e:6c:0f:e9:87:d3:45:89:dd:68:61:c1:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 11:15:30 2026 GMT
Not After : Sep 22 11:20:30 2027 GMT
Subject: CN=E604AF2C9D0DADF3C5BFC7789B9719A214012C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:bd:4d:f1:8a:c2:61:e3:e0:b5:6e:23:b7:
37:da:50:5b:84:bc:f8:98:bd:b6:b9:6e:1f:4e:28:
ef:9a:47:9d:e3:8c:08:8a:7c:69:8a:ac:67:32:ea:
de:3c:ba:72:47:9f:ae:4a:b1:00:8d:cb:c3:33:16:
a2:84:dd:e1:28:dc:68:ee:12:bd:85:dc:a8:55:10:
c1:b6:79:b5:4d:42:a9:e5:2a:0d:2d:0d:18:77:ce:
24:cc:8c:51:ad:78:dd:21:bc:dd:f4:7e:a2:75:46:
6f:df:d5:fd:a8:80:21:0d:9e:de:57:f4:b3:46:33:
bc:fa:8d:c8:48:e3:0a:cf:82:49:37:a0:6d:5f:af:
9d:51:a2:3f:b7:76:ea:fc:16:27:47:bb:30:ec:de:
92:b0:e5:45:21:de:4e:07:8c:99:d3:f6:93:70:27:
81:cd:06:c9:5f:45:08:98:96:67:02:b7:e2:5e:62:
5f:1b:0c:6d:8c:56:bb:4a:dd:b8:b7:2e:6b:a2:50:
96:39:28:d2:dc:c6:71:4b:49:25:91:d6:3c:54:21:
6c:f5:3c:b5:e7:ec:4b:2b:49:04:b6:de:1c:3c:c3:
3c:14:e5:47:ec:e3:0d:3a:f9:56:08:40:49:2a:e3:
c5:ae:e0:e6:ca:05:e8:51:1a:41:4e:3e:fa:5b:91:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:AF:2C:9D:0D:AD:F3:C5:BF:C7:78:9B:97:19:A2:14:01:2C:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.35.0/24
69.90.119.0/24
96.62.96.0/23
96.62.217.0/24
96.62.231.0/24
140.150.239.0/24
143.14.12.0/24
143.14.16.0/24
143.14.18.0/23
143.14.23.0/24
143.14.33.0/24
143.14.66.0/24
143.14.68.0/24
143.14.82.0/23
143.14.91.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0-143.14.130.255
143.14.140.0/24
143.14.152.0/24
143.14.171.0/24
143.14.181.0-143.14.182.255
143.14.185.0/24
143.14.187.0/24
143.14.191.0/24
143.14.194.0/24
143.14.198.0/24
143.14.218.0/24
143.14.229.0/24
143.14.245.0/24
143.14.248.0/23
145.223.1.0-145.223.2.255
147.79.4.0/24
147.79.26.0/24
147.79.55.0/24
148.135.172.0/24
150.241.136.0/24
150.241.200.0/23
150.241.242.0/24
150.241.254.0/24
155.117.63.0/24
155.117.79.0/24
155.117.109.0/24
155.117.123.0/24
155.117.136.0/24
155.117.139.0/24
155.117.141.0/24
155.117.150.0/24
155.117.156.0/24
155.117.186.0/24
155.117.200.0/23
155.117.228.0/24
155.117.240.0/23
155.117.249.0/24
162.141.13.0/24
162.141.39.0/24
162.141.66.0/24
162.141.70.0/24
162.141.82.0/23
162.141.126.0/24
162.141.140.0/24
162.141.161.0/24
162.141.163.0/24
167.148.3.0/24
167.148.94.0/24
167.148.141.0/24
167.148.194.0/24
167.148.215.0/24
168.222.17.0/24
168.222.23.0-168.222.24.255
168.222.36.0/24
168.222.45.0/24
168.222.52.0/24
168.222.54.0/24
168.222.67.0-168.222.68.255
168.222.70.0/24
168.222.73.0-168.222.74.255
168.222.84.0/24
168.222.92.0/24
168.222.116.0/23
168.222.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d0:f6:fe:48:fd:f9:13:6a:fa:c4:c6:1e:d6:f3:43:f7:df:
e1:f7:db:6e:13:2a:08:c3:d5:09:6c:4a:1d:bd:c2:21:74:ad:
b0:00:d0:d8:a7:9f:1f:29:07:78:c6:b0:40:1e:21:4f:09:4e:
c2:7a:a1:e2:ee:ee:9f:c5:37:da:71:e0:dd:32:95:34:42:93:
91:2f:99:75:8d:71:31:e4:44:45:56:bb:ed:0a:e7:0f:72:22:
6d:f8:14:90:44:38:9d:63:63:99:82:e0:1c:4f:bb:67:4d:86:
95:8d:e8:26:2d:27:5a:78:b6:ae:7b:24:f5:98:8b:6d:d6:41:
20:82:16:09:e0:92:b2:17:82:a5:9a:e0:fb:de:ee:6e:e4:f4:
6d:32:f1:e2:96:73:8f:60:f0:6b:9c:a8:0d:b7:d1:fe:88:bf:
38:f5:12:d5:91:00:2b:f6:60:29:bb:95:f4:49:fb:00:67:2d:
d0:0b:e8:01:af:3a:f2:fe:ec:66:18:80:e8:cc:de:35:ef:31:
a3:6d:32:7e:ad:4d:f3:77:be:44:7e:9b:4e:75:3f:0a:f6:29:
b7:46:05:d4:01:bc:67:72:b2:57:01:f6:cd:c4:de:b2:9f:be:
50:5f:2a:be:f8:d6:b1:16:2e:df:23:1e:2f:28:30:8d:21:1a:
c0:da:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:38:14 2026 by rpki-client