Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: CC2ZY4G+8BcYJIEcSsJx6eMncANDPtOSpuWofiy+NAo=
Subject key identifier: 4D:3D:B1:7E:0C:B3:D6:8C:53:2C:52:06:97:95:50:39:09:6E:F4:43
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 34952C7A5B105771FC8A5A7FC8572E16702881CA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time: Tue 22 Sep 2026 12:21:55 +0000
ROA not before: Tue 22 Sep 2026 12:16:55 +0000
ROA not after: Tue 21 Sep 2027 12:21:55 +0000
asID: 834
IP address blocks: 2.57.18.0/24 maxlen: 24
5.181.135.0/24 maxlen: 24
5.182.109.0/24 maxlen: 24
5.182.110.0/24 maxlen: 24
45.87.185.0/24 maxlen: 24
45.88.98.0/24 maxlen: 24
45.89.253.0/24 maxlen: 24
45.93.44.0/24 maxlen: 24
45.93.47.0/24 maxlen: 24
45.95.22.0/23 maxlen: 24
45.133.172.0/24 maxlen: 24
45.137.28.0/23 maxlen: 24
45.137.118.0/24 maxlen: 24
45.139.183.0/24 maxlen: 24
89.19.49.0/24 maxlen: 24
89.19.50.0/24 maxlen: 24
92.118.162.0/24 maxlen: 24
92.119.33.0/24 maxlen: 24
92.119.34.0/23 maxlen: 24
92.242.184.0/24 maxlen: 24
130.185.124.0/24 maxlen: 24
141.98.89.0/24 maxlen: 24
179.61.134.0/24 maxlen: 24
179.61.148.0/24 maxlen: 24
179.61.152.0/24 maxlen: 24
179.61.208.0/23 maxlen: 24
179.61.226.0/24 maxlen: 24
179.61.248.0/24 maxlen: 24
179.61.253.0/24 maxlen: 24
181.41.195.0/24 maxlen: 24
181.41.219.0/24 maxlen: 24
181.214.7.0/24 maxlen: 24
181.214.27.0/24 maxlen: 24
181.214.164.0/23 maxlen: 24
181.214.166.0/24 maxlen: 24
181.214.182.0/24 maxlen: 24
181.214.209.0/24 maxlen: 24
181.214.218.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
181.215.3.0/24 maxlen: 24
181.215.12.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.31.0/24 maxlen: 24
181.215.55.0/24 maxlen: 24
181.215.58.0/24 maxlen: 24
181.215.64.0/24 maxlen: 24
181.215.73.0/24 maxlen: 24
181.215.91.0/24 maxlen: 24
181.215.95.0/24 maxlen: 24
181.215.108.0/24 maxlen: 24
181.215.112.0/24 maxlen: 24
181.215.147.0/24 maxlen: 24
181.215.170.0/24 maxlen: 24
181.215.182.0/24 maxlen: 24
181.215.238.0/24 maxlen: 24
181.215.240.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
185.158.135.0/24 maxlen: 24
185.158.149.0/24 maxlen: 24
185.173.35.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.65.0/24 maxlen: 24
191.96.102.0/23 maxlen: 24
191.96.108.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.116.0/24 maxlen: 24
191.96.120.0/24 maxlen: 24
191.96.126.0/24 maxlen: 24
191.96.136.0/24 maxlen: 24
191.96.149.0/24 maxlen: 24
191.96.153.0/24 maxlen: 24
191.96.173.0/24 maxlen: 24
191.96.175.0/24 maxlen: 24
191.96.180.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.96.190.0/24 maxlen: 24
191.96.206.0/23 maxlen: 24
191.96.222.0/24 maxlen: 24
191.96.245.0/24 maxlen: 24
191.96.255.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
191.101.39.0/24 maxlen: 24
191.101.66.0/23 maxlen: 24
191.101.88.0/23 maxlen: 24
191.101.97.0/24 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.116.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
191.101.124.0/23 maxlen: 24
191.101.151.0/24 maxlen: 24
191.101.171.0/24 maxlen: 24
191.101.176.0/23 maxlen: 24
191.101.182.0/24 maxlen: 24
191.101.192.0/24 maxlen: 24
191.101.198.0/24 maxlen: 24
191.101.204.0/24 maxlen: 24
191.101.236.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
191.101.252.0/24 maxlen: 24
193.107.210.0/24 maxlen: 24
194.53.141.0/24 maxlen: 24
194.110.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:95:2c:7a:5b:10:57:71:fc:8a:5a:7f:c8:57:2e:16:70:28:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 22 12:16:55 2026 GMT
Not After : Sep 21 12:21:55 2027 GMT
Subject: CN=4D3DB17E0CB3D68C532C520697955039096EF443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:af:b9:ac:a7:66:53:d4:e7:34:d1:ef:04:
4c:76:54:b0:22:44:08:a8:ed:6f:9c:d5:02:26:56:
88:f3:06:fd:79:d1:7e:c4:fc:66:88:1c:99:69:e2:
af:cd:61:a5:80:e8:e7:0b:a8:42:03:2b:76:9c:53:
79:cd:7d:69:d2:94:ad:0f:a8:92:87:9b:fd:3a:cb:
1a:db:78:97:cb:7e:00:32:1d:df:db:f1:d1:e2:a7:
3f:d7:f1:09:36:5f:97:be:a1:cd:1e:61:a3:96:84:
1f:a3:1b:17:b4:6b:41:6c:92:40:e3:a4:a3:f5:d9:
c1:cf:4c:f9:aa:54:34:a0:56:2f:a8:d0:1d:b5:35:
f3:b6:28:1c:2e:4a:b8:e9:3d:99:6c:af:f0:5c:19:
6d:49:4e:c7:60:75:10:14:46:46:35:27:39:0b:04:
cc:72:de:4a:fb:2f:37:80:83:5f:fd:23:50:5c:1e:
be:cb:13:19:18:c7:f8:7a:7a:5b:5b:79:bd:60:07:
21:2a:7a:78:c7:0f:16:0e:c3:91:03:f6:d7:81:52:
78:c6:87:42:b4:96:db:da:67:60:90:1f:cb:14:cf:
5b:83:af:06:a7:ba:74:1e:69:76:88:4d:9c:09:5a:
9e:d9:9e:ad:6e:23:1c:af:5c:07:08:b1:fd:cf:41:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:B1:7E:0C:B3:D6:8C:53:2C:52:06:97:95:50:39:09:6E:F4:43
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
5.181.135.0/24
5.182.109.0-5.182.110.255
45.87.185.0/24
45.88.98.0/24
45.89.253.0/24
45.93.44.0/24
45.93.47.0/24
45.95.22.0/23
45.133.172.0/24
45.137.28.0/23
45.137.118.0/24
45.139.183.0/24
89.19.49.0-89.19.50.255
92.118.162.0/24
92.119.33.0-92.119.35.255
92.242.184.0/24
130.185.124.0/24
141.98.89.0/24
179.61.134.0/24
179.61.148.0/24
179.61.152.0/24
179.61.208.0/23
179.61.226.0/24
179.61.248.0/24
179.61.253.0/24
181.41.195.0/24
181.41.219.0/24
181.214.7.0/24
181.214.27.0/24
181.214.164.0-181.214.166.255
181.214.182.0/24
181.214.209.0/24
181.214.218.0/24
181.214.240.0/24
181.215.3.0/24
181.215.12.0/24
181.215.22.0/24
181.215.31.0/24
181.215.55.0/24
181.215.58.0/24
181.215.64.0/24
181.215.73.0/24
181.215.91.0/24
181.215.95.0/24
181.215.108.0/24
181.215.112.0/24
181.215.147.0/24
181.215.170.0/24
181.215.182.0/24
181.215.238.0/24
181.215.240.0/24
185.151.58.0/24
185.158.105.0/24
185.158.135.0/24
185.158.149.0/24
185.173.35.0/24
191.96.3.0/24
191.96.24.0/24
191.96.61.0/24
191.96.65.0/24
191.96.102.0/23
191.96.108.0/24
191.96.111.0/24
191.96.116.0/24
191.96.120.0/24
191.96.126.0/24
191.96.136.0/24
191.96.149.0/24
191.96.153.0/24
191.96.173.0/24
191.96.175.0/24
191.96.180.0/24
191.96.185.0/24
191.96.190.0/24
191.96.206.0/23
191.96.222.0/24
191.96.245.0/24
191.96.255.0/24
191.101.29.0/24
191.101.39.0/24
191.101.66.0/23
191.101.88.0/23
191.101.97.0/24
191.101.102.0/24
191.101.116.0/24
191.101.120.0/24
191.101.124.0/23
191.101.151.0/24
191.101.171.0/24
191.101.176.0/23
191.101.182.0/24
191.101.192.0/24
191.101.198.0/24
191.101.204.0/24
191.101.236.0/24
191.101.240.0/24
191.101.252.0/24
193.107.210.0/24
194.53.141.0/24
194.110.13.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0a:93:83:e4:c3:9c:7b:d6:20:05:b4:20:d3:3b:40:de:82:
c9:36:40:88:b4:d9:a0:ad:7d:9d:44:5a:43:70:3d:57:fe:3e:
9d:90:5e:61:62:04:41:96:7e:f0:f4:5d:c9:d5:a7:e4:df:cc:
7c:16:8b:33:b2:46:6b:e3:c8:a3:89:c3:71:40:b3:d5:9a:07:
31:c6:f1:6a:31:b5:36:c3:15:3d:01:b8:ea:94:f3:af:0f:4e:
4f:3b:4b:4e:77:73:67:2d:96:50:af:03:99:e4:66:83:5f:4a:
60:bd:64:10:0f:a5:35:34:eb:e1:06:f8:21:c4:0a:8c:ba:9f:
4a:c5:28:3c:0c:0f:c0:fe:99:38:be:ab:0a:95:47:f1:c3:93:
77:80:47:da:81:e1:60:c7:39:92:69:29:2a:b1:92:02:a7:e6:
ee:9b:b2:41:c5:ca:c3:13:ae:88:c3:5c:91:c0:19:8f:b9:5c:
30:7a:05:01:68:55:73:b7:2d:c2:43:16:2a:be:cc:de:8a:2a:
64:27:37:94:0f:ec:a6:7e:09:12:6c:43:29:53:3b:4f:bb:d2:
b8:b6:04:4f:c5:4c:31:00:85:b7:99:0d:31:de:1f:b4:21:11:
e3:85:8f:8e:6f:e4:37:3d:02:af:68:07:7b:55:01:26:f1:55:
8d:7f:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:46:25 2026 by rpki-client