Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: nuxwI0TKOXoKY5795xLbn8GXS8yENUJymT0BR/3R82k=
Subject key identifier: 63:82:71:FC:E1:AB:77:AF:49:BE:C4:B6:28:77:31:88:6B:F8:F9:3A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 76565D56C9D75DB773831328694C42811A975B1C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Thu 23 Jul 2026 20:52:33 +0000
ROA not before: Thu 23 Jul 2026 20:47:33 +0000
ROA not after: Thu 22 Jul 2027 20:52:33 +0000
asID: 834
IP address blocks: 96.62.77.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.103.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.150.233.0/24 maxlen: 24
140.233.161.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.92.0/24 maxlen: 24
143.14.121.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.186.0/23 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.209.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
143.14.250.0/24 maxlen: 24
143.14.253.0/24 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
146.103.59.0/24 maxlen: 24
147.79.17.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
148.135.172.0/23 maxlen: 24
148.135.181.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
150.241.143.0/24 maxlen: 24
150.241.199.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.242.0/23 maxlen: 24
155.117.8.0/22 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.76.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.105.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.118.0/23 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
155.117.168.0/23 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.179.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.214.0/23 maxlen: 24
155.117.218.0/24 maxlen: 24
155.117.220.0/23 maxlen: 24
155.117.228.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
155.117.242.0/24 maxlen: 24
155.117.245.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.80.0/23 maxlen: 24
167.148.84.0/22 maxlen: 24
167.148.119.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
168.222.4.0/24 maxlen: 24
168.222.8.0/23 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.14.0/23 maxlen: 24
168.222.18.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.30.0/23 maxlen: 24
168.222.32.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.41.0/24 maxlen: 24
168.222.44.0/24 maxlen: 24
168.222.46.0/23 maxlen: 24
168.222.50.0/23 maxlen: 24
168.222.52.0/23 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
168.222.62.0/24 maxlen: 24
168.222.66.0/24 maxlen: 24
168.222.68.0/22 maxlen: 24
168.222.72.0/23 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.76.0/24 maxlen: 24
168.222.78.0/23 maxlen: 24
168.222.80.0/24 maxlen: 24
168.222.82.0/24 maxlen: 24
168.222.85.0/24 maxlen: 24
168.222.90.0/23 maxlen: 24
168.222.92.0/22 maxlen: 24
168.222.98.0/23 maxlen: 24
168.222.106.0/23 maxlen: 24
168.222.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:56:5d:56:c9:d7:5d:b7:73:83:13:28:69:4c:42:81:1a:97:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 20:47:33 2026 GMT
Not After : Jul 22 20:52:33 2027 GMT
Subject: CN=638271FCE1AB77AF49BEC4B6287731886BF8F93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:fa:ce:b1:47:39:84:1c:5b:86:28:77:7c:
8d:5f:4d:03:e0:4f:42:35:82:0f:c8:7e:08:74:b6:
d2:84:64:25:2f:05:4b:c2:31:bf:22:9d:e1:f3:e3:
3d:76:92:00:20:5d:ce:21:0c:20:f4:c7:4a:f0:47:
ef:11:6d:29:12:9a:ba:a8:60:b5:6b:fe:d2:f8:5d:
2a:08:3f:1e:19:c6:9b:81:c5:df:b5:7c:4c:99:2b:
df:65:8d:5a:64:db:b8:f3:cf:15:2d:86:3a:fc:54:
d2:75:35:2a:bb:5a:e3:8c:06:ad:ea:02:5e:cd:8e:
4f:dc:6a:58:6f:30:c2:49:81:6f:97:c9:63:38:a1:
67:05:c0:c5:dd:93:d7:be:6f:8d:fe:a4:63:3b:0e:
73:0c:df:b5:96:e3:c7:f5:1f:ef:6c:8d:9f:ce:5a:
0f:60:8c:2e:c3:19:02:97:be:59:3b:44:a5:12:e9:
82:06:c3:87:00:89:fd:02:1b:40:f5:4b:17:e9:56:
35:31:ce:99:eb:04:eb:85:47:00:dd:b0:e4:e7:92:
57:02:c6:f4:ca:0a:f1:ec:7a:0b:8a:39:95:fa:33:
9e:67:ac:d8:b3:22:73:7d:c6:2f:70:bd:97:47:68:
d6:5a:11:b0:53:d4:23:65:98:f5:f0:4c:3b:70:30:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:71:FC:E1:AB:77:AF:49:BE:C4:B6:28:77:31:88:6B:F8:F9:3A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
96.62.96.0/23
96.62.103.0/24
96.62.231.0/24
140.150.233.0/24
140.233.161.0/24
140.233.181.0/24
143.14.12.0/24
143.14.16.0/24
143.14.18.0/24
143.14.33.0/24
143.14.66.0/24
143.14.68.0/24
143.14.91.0-143.14.92.255
143.14.121.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0/24
143.14.140.0/24
143.14.181.0-143.14.182.255
143.14.185.0-143.14.187.255
143.14.191.0/24
143.14.194.0/24
143.14.209.0/24
143.14.218.0/24
143.14.245.0/24
143.14.248.0-143.14.250.255
143.14.253.0/24
145.223.1.0-145.223.2.255
146.103.48.0/24
146.103.51.0/24
146.103.59.0/24
147.79.17.0/24
147.79.31.0/24
148.135.172.0/23
148.135.181.0/24
148.135.194.0/24
150.241.143.0/24
150.241.199.0-150.241.201.255
150.241.240.0/24
150.241.242.0/23
155.117.8.0/22
155.117.23.0/24
155.117.38.0/24
155.117.63.0/24
155.117.76.0/24
155.117.86.0/24
155.117.97.0/24
155.117.105.0/24
155.117.112.0/24
155.117.118.0/23
155.117.126.0/24
155.117.136.0/24
155.117.139.0/24
155.117.141.0/24
155.117.159.0/24
155.117.167.0-155.117.169.255
155.117.171.0/24
155.117.179.0/24
155.117.184.0/24
155.117.190.0/24
155.117.202.0/24
155.117.207.0/24
155.117.210.0/24
155.117.214.0/23
155.117.218.0/24
155.117.220.0/23
155.117.228.0/24
155.117.240.0/24
155.117.242.0/24
155.117.245.0/24
162.141.5.0/24
162.141.8.0/24
162.141.44.0/24
162.141.80.0/24
162.141.82.0/23
162.141.97.0/24
162.141.105.0/24
162.141.107.0/24
162.141.158.0/24
162.141.161.0/24
162.141.163.0/24
167.148.8.0/24
167.148.80.0/23
167.148.84.0/22
167.148.119.0/24
167.148.194.0/24
168.222.4.0/24
168.222.8.0/23
168.222.12.0/24
168.222.14.0/23
168.222.18.0/24
168.222.23.0/24
168.222.30.0-168.222.32.255
168.222.34.0/24
168.222.41.0/24
168.222.44.0/24
168.222.46.0/23
168.222.50.0-168.222.54.255
168.222.61.0-168.222.62.255
168.222.66.0/24
168.222.68.0-168.222.74.255
168.222.76.0/24
168.222.78.0-168.222.80.255
168.222.82.0/24
168.222.85.0/24
168.222.90.0-168.222.95.255
168.222.98.0/23
168.222.106.0/23
168.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b6:fd:88:a8:0f:db:e9:ec:78:a2:41:78:b0:40:9c:2c:55:
74:39:5d:1a:3f:6b:ea:d0:37:3d:4f:1e:55:40:42:85:6d:72:
aa:e7:0d:af:6d:b7:4b:1b:e0:d6:7c:3c:c4:bb:a9:54:2c:ae:
40:46:79:86:0c:8b:c8:3b:04:8f:b0:91:9c:6b:70:f0:ac:86:
d0:36:ed:99:e7:3d:54:19:39:b6:55:45:34:d9:fd:1b:10:7d:
0e:9b:6b:29:1d:35:57:0d:ef:00:89:e0:42:0b:ac:e5:c8:14:
ae:aa:47:b6:3f:29:27:58:97:2c:b5:ee:3f:35:fc:7d:60:d4:
6e:29:0d:61:c4:04:55:be:a2:f0:22:83:98:9d:17:8f:5c:b2:
83:1c:e4:79:c7:7c:9f:c7:a1:b1:28:f7:2c:e8:25:31:d0:77:
a9:ff:e6:75:8c:9d:91:9a:5f:42:b9:95:2c:91:67:bf:18:4c:
66:90:90:07:10:f1:3e:57:b0:49:48:54:ec:fd:81:b8:70:aa:
63:3e:6f:ff:a7:4b:01:a7:e9:53:66:38:a2:30:f1:4a:0f:15:
9f:a3:b7:58:e3:40:c1:da:28:08:82:c2:11:fc:f3:18:0d:6a:
76:c4:0b:4f:5c:40:9b:b7:e7:af:2e:f0:eb:da:64:20:83:72:
4d:48:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:01:27 2026 by rpki-client