Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: Fe3YLMJFxzAxQ7EzGRgZtbu671TAeTc6DoF3Mz7Qpf8=
Subject key identifier: 94:11:51:35:E7:B8:49:DD:9E:4A:25:3D:C9:8E:D2:16:24:B1:7C:58
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 28AB80266B9E8F7B5414F0AA66BC0DD638270499
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time: Tue 22 Sep 2026 07:02:10 +0000
ROA not before: Tue 22 Sep 2026 06:57:10 +0000
ROA not after: Tue 21 Sep 2027 07:02:10 +0000
asID: 834
IP address blocks: 46.236.207.0/24 maxlen: 24
78.41.49.0/24 maxlen: 24
212.17.224.0/24 maxlen: 24
212.17.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ab:80:26:6b:9e:8f:7b:54:14:f0:aa:66:bc:0d:d6:38:27:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 22 06:57:10 2026 GMT
Not After : Sep 21 07:02:10 2027 GMT
Subject: CN=94115135E7B849DD9E4A253DC98ED21624B17C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:22:0a:07:ba:74:42:a4:ac:5a:b8:02:6d:
03:81:ed:17:25:15:e7:91:2b:9d:04:cd:31:8a:5e:
e9:15:5f:1d:36:66:48:a1:3a:a7:98:59:ac:65:48:
ba:3c:73:e6:9a:3c:1a:14:77:f1:27:18:2d:a7:e1:
a5:4d:98:0d:49:dd:54:00:b0:f2:db:55:67:14:64:
49:e0:0f:f5:7c:8c:c5:d6:03:cc:18:c1:ef:e1:b4:
ca:39:df:13:e7:4f:dd:36:40:47:e3:5f:5d:2e:c2:
13:ec:ce:5c:7d:b7:88:b6:b4:46:24:28:a2:42:10:
9b:45:b1:9a:9d:21:c6:ca:58:2a:40:df:26:e3:a6:
64:75:bb:6d:f0:37:d6:ca:02:6c:8e:59:e9:e3:18:
0b:d7:a0:78:66:74:96:4b:84:6a:5d:9e:3d:68:49:
2a:ee:2e:a1:53:f8:38:89:a6:ad:59:4c:86:c9:6e:
59:0c:66:2b:57:0f:6b:d0:18:6e:9d:e1:78:21:9d:
52:e7:7a:5e:d2:66:94:77:7e:f9:d7:2b:58:48:eb:
cb:92:9d:60:a7:cc:be:b1:00:03:ea:84:a0:21:9b:
1b:42:a2:c4:25:7c:b2:51:3f:e9:36:fd:4e:26:1b:
de:37:85:f3:8a:40:75:0d:59:da:fa:b1:86:97:0e:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:51:35:E7:B8:49:DD:9E:4A:25:3D:C9:8E:D2:16:24:B1:7C:58
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.207.0/24
78.41.49.0/24
212.17.224.0/24
212.17.232.0/24
Signature Algorithm: sha256WithRSAEncryption
42:00:99:92:f5:02:09:22:af:32:73:b9:a9:59:f2:3c:95:02:
46:cd:66:58:a1:c8:a8:df:37:0c:39:84:08:db:d1:80:0b:82:
92:42:96:90:21:0b:09:f0:ea:27:28:4f:f4:d2:08:88:b4:9b:
8c:80:e5:68:17:3f:6d:1b:4a:9e:ff:cd:47:f3:f0:8b:3f:d9:
24:1c:6b:0b:b5:5f:a0:fa:58:10:b5:c2:5e:ed:d1:86:30:f2:
b6:e8:04:37:ac:e8:41:7d:df:ae:76:c1:fc:32:b2:93:be:26:
36:25:62:33:4e:26:63:64:59:06:c8:b1:46:95:82:c3:7d:ba:
7d:bd:d8:d2:c6:b2:42:60:d9:20:cd:29:48:e7:21:df:c4:7d:
51:7e:49:0a:a6:9d:7d:87:18:71:77:e6:e8:99:39:fc:aa:02:
4f:5a:cc:81:8b:db:be:c8:16:e9:6d:43:ed:d5:34:15:78:b0:
a2:d1:e9:83:44:2c:a4:5d:dd:dd:38:63:9a:d0:64:d5:05:c7:
0e:14:e5:53:21:65:e3:bc:66:44:3d:ec:8a:51:ee:13:27:eb:
9a:33:70:b0:40:a7:a8:27:b0:83:33:91:f4:47:ef:c3:61:3b:
ed:49:34:8a:b9:fb:27:cb:86:46:be:3b:0d:d9:6f:e5:81:2a:
e4:76:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:46:23 2026 by rpki-client