Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: bI9Kr0cCrAD+6Ibk0E/zNfVya9Z+V9Qaa8e2PPshmM4=
Subject key identifier: 25:85:5F:0D:7C:6F:38:BD:C4:CA:2A:E8:6C:0A:E5:8D:29:FF:94:F9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 09A7480316E1E62FAEECD3BCBBB260A9B2CC8AA8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time: Wed 11 Nov 2026 20:18:04 +0000
ROA not before: Wed 11 Nov 2026 20:13:04 +0000
ROA not after: Wed 10 Nov 2027 20:18:04 +0000
asID: 834
IP address blocks: 2.57.18.0/24 maxlen: 24
5.182.110.0/24 maxlen: 24
45.87.185.0/24 maxlen: 24
45.88.98.0/24 maxlen: 24
45.89.253.0/24 maxlen: 24
45.89.254.0/24 maxlen: 24
45.93.44.0/24 maxlen: 24
45.93.47.0/24 maxlen: 24
45.95.22.0/24 maxlen: 24
45.133.172.0/24 maxlen: 24
45.137.28.0/24 maxlen: 24
45.139.183.0/24 maxlen: 24
89.19.44.0/24 maxlen: 24
89.19.49.0/24 maxlen: 24
92.118.162.0/24 maxlen: 24
109.106.3.0/24 maxlen: 24
130.185.124.0/24 maxlen: 24
130.185.127.0/24 maxlen: 24
141.98.89.0/24 maxlen: 24
179.61.134.0/24 maxlen: 24
179.61.140.0/24 maxlen: 24
179.61.148.0/24 maxlen: 24
179.61.150.0/24 maxlen: 24
179.61.152.0/24 maxlen: 24
179.61.170.0/24 maxlen: 24
179.61.184.0/24 maxlen: 24
179.61.208.0/23 maxlen: 24
179.61.226.0/24 maxlen: 24
179.61.237.0/24 maxlen: 24
179.61.238.0/24 maxlen: 24
179.61.248.0/24 maxlen: 24
179.61.253.0/24 maxlen: 24
181.41.195.0/24 maxlen: 24
181.41.197.0/24 maxlen: 24
181.41.210.0/23 maxlen: 24
181.41.212.0/24 maxlen: 24
181.41.219.0/24 maxlen: 24
181.214.0.0/24 maxlen: 24
181.214.4.0/24 maxlen: 24
181.214.7.0/24 maxlen: 24
181.214.121.0/24 maxlen: 24
181.214.147.0/24 maxlen: 24
181.214.164.0/24 maxlen: 24
181.214.182.0/24 maxlen: 24
181.214.209.0/24 maxlen: 24
181.214.212.0/23 maxlen: 24
181.214.218.0/24 maxlen: 24
181.214.220.0/24 maxlen: 24
181.214.229.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
181.214.254.0/24 maxlen: 24
181.215.3.0/24 maxlen: 24
181.215.7.0/24 maxlen: 24
181.215.12.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.31.0/24 maxlen: 24
181.215.55.0/24 maxlen: 24
181.215.58.0/24 maxlen: 24
181.215.62.0/24 maxlen: 24
181.215.64.0/24 maxlen: 24
181.215.73.0/24 maxlen: 24
181.215.84.0/24 maxlen: 24
181.215.91.0/24 maxlen: 24
181.215.95.0/24 maxlen: 24
181.215.108.0/24 maxlen: 24
181.215.112.0/24 maxlen: 24
181.215.147.0/24 maxlen: 24
181.215.170.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
181.215.182.0/24 maxlen: 24
181.215.184.0/23 maxlen: 24
181.215.193.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
181.215.198.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
181.215.238.0/24 maxlen: 24
181.215.240.0/24 maxlen: 24
185.34.42.0/24 maxlen: 24
185.137.12.0/24 maxlen: 24
185.139.237.0/24 maxlen: 24
185.141.166.0/24 maxlen: 24
185.142.25.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
185.158.135.0/24 maxlen: 24
185.158.149.0/24 maxlen: 24
185.173.35.0/24 maxlen: 24
185.174.63.0/24 maxlen: 24
191.96.6.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.29.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.65.0/24 maxlen: 24
191.96.69.0/24 maxlen: 24
191.96.80.0/24 maxlen: 24
191.96.99.0/24 maxlen: 24
191.96.102.0/23 maxlen: 24
191.96.108.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.116.0/24 maxlen: 24
191.96.120.0/24 maxlen: 24
191.96.126.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
191.96.136.0/24 maxlen: 24
191.96.143.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.148.0/23 maxlen: 24
191.96.153.0/24 maxlen: 24
191.96.157.0/24 maxlen: 24
191.96.171.0/24 maxlen: 24
191.96.173.0/24 maxlen: 24
191.96.175.0/24 maxlen: 24
191.96.180.0/24 maxlen: 24
191.96.182.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.96.190.0/24 maxlen: 24
191.96.206.0/23 maxlen: 24
191.96.222.0/24 maxlen: 24
191.96.245.0/24 maxlen: 24
191.96.255.0/24 maxlen: 24
191.101.9.0/24 maxlen: 24
191.101.20.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
191.101.39.0/24 maxlen: 24
191.101.66.0/23 maxlen: 24
191.101.76.0/24 maxlen: 24
191.101.82.0/23 maxlen: 24
191.101.88.0/23 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.116.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
191.101.124.0/23 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.151.0/24 maxlen: 24
191.101.171.0/24 maxlen: 24
191.101.182.0/24 maxlen: 24
191.101.192.0/24 maxlen: 24
191.101.198.0/24 maxlen: 24
191.101.219.0/24 maxlen: 24
191.101.252.0/24 maxlen: 24
213.109.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a7:48:03:16:e1:e6:2f:ae:ec:d3:bc:bb:b2:60:a9:b2:cc:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 11 20:13:04 2026 GMT
Not After : Nov 10 20:18:04 2027 GMT
Subject: CN=25855F0D7C6F38BDC4CA2AE86C0AE58D29FF94F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:12:c3:5f:36:1f:2d:49:2e:b1:7d:61:94:
4c:a0:2a:bd:4c:02:7b:52:37:ab:e4:85:89:a8:a3:
eb:76:51:98:c9:c8:12:ee:e6:3f:50:8c:10:24:91:
f3:50:d2:77:f5:06:4e:f6:0e:e9:68:42:ee:12:8b:
fc:c8:19:95:50:c3:ea:94:0b:4e:ed:6d:6a:7b:7e:
5d:ef:94:2a:4a:47:d3:d6:34:74:f8:74:66:d3:20:
cf:fc:ac:43:73:23:55:8c:47:f7:f3:d6:af:8b:7b:
72:fa:1a:13:b8:c4:28:6f:75:b4:71:e5:3e:69:8c:
22:06:2e:5d:15:2d:38:d5:dd:f4:ac:cd:58:f3:cf:
3d:b3:fc:78:87:df:2e:14:fd:53:f4:dd:6d:3b:68:
65:e0:c2:a1:6c:a5:b9:95:82:7b:a0:ad:96:ad:e2:
2d:50:dd:e3:20:35:d9:6a:77:8e:3f:cf:db:e2:e8:
77:9b:31:86:55:81:fc:8b:0f:cc:ee:74:e0:5f:44:
f5:ed:44:71:35:ad:94:ba:84:fb:52:db:b8:7a:17:
e3:46:0c:e3:6b:a7:0c:09:0f:23:2b:89:00:7a:e8:
d8:4b:29:75:71:37:af:e6:28:d7:37:bb:40:8c:73:
a6:f0:f0:7f:16:c4:c2:c7:f8:df:a8:47:e8:1b:19:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:5F:0D:7C:6F:38:BD:C4:CA:2A:E8:6C:0A:E5:8D:29:FF:94:F9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
5.182.110.0/24
45.87.185.0/24
45.88.98.0/24
45.89.253.0-45.89.254.255
45.93.44.0/24
45.93.47.0/24
45.95.22.0/24
45.133.172.0/24
45.137.28.0/24
45.139.183.0/24
89.19.44.0/24
89.19.49.0/24
92.118.162.0/24
109.106.3.0/24
130.185.124.0/24
130.185.127.0/24
141.98.89.0/24
179.61.134.0/24
179.61.140.0/24
179.61.148.0/24
179.61.150.0/24
179.61.152.0/24
179.61.170.0/24
179.61.184.0/24
179.61.208.0/23
179.61.226.0/24
179.61.237.0-179.61.238.255
179.61.248.0/24
179.61.253.0/24
181.41.195.0/24
181.41.197.0/24
181.41.210.0-181.41.212.255
181.41.219.0/24
181.214.0.0/24
181.214.4.0/24
181.214.7.0/24
181.214.121.0/24
181.214.147.0/24
181.214.164.0/24
181.214.182.0/24
181.214.209.0/24
181.214.212.0/23
181.214.218.0/24
181.214.220.0/24
181.214.229.0/24
181.214.240.0/24
181.214.254.0/24
181.215.3.0/24
181.215.7.0/24
181.215.12.0/24
181.215.22.0/24
181.215.31.0/24
181.215.55.0/24
181.215.58.0/24
181.215.62.0/24
181.215.64.0/24
181.215.73.0/24
181.215.84.0/24
181.215.91.0/24
181.215.95.0/24
181.215.108.0/24
181.215.112.0/24
181.215.147.0/24
181.215.170.0/24
181.215.176.0/24
181.215.182.0/24
181.215.184.0/23
181.215.193.0/24
181.215.196.0/24
181.215.198.0/24
181.215.206.0/23
181.215.238.0/24
181.215.240.0/24
185.34.42.0/24
185.137.12.0/24
185.139.237.0/24
185.141.166.0/24
185.142.25.0/24
185.151.58.0/24
185.158.105.0/24
185.158.135.0/24
185.158.149.0/24
185.173.35.0/24
185.174.63.0/24
191.96.6.0/24
191.96.24.0/24
191.96.29.0/24
191.96.61.0/24
191.96.65.0/24
191.96.69.0/24
191.96.80.0/24
191.96.99.0/24
191.96.102.0/23
191.96.108.0/24
191.96.111.0/24
191.96.116.0/24
191.96.120.0/24
191.96.126.0/24
191.96.134.0/24
191.96.136.0/24
191.96.143.0/24
191.96.145.0/24
191.96.148.0/23
191.96.153.0/24
191.96.157.0/24
191.96.171.0/24
191.96.173.0/24
191.96.175.0/24
191.96.180.0/24
191.96.182.0/24
191.96.185.0/24
191.96.190.0/24
191.96.206.0/23
191.96.222.0/24
191.96.245.0/24
191.96.255.0/24
191.101.9.0/24
191.101.20.0/24
191.101.29.0/24
191.101.39.0/24
191.101.66.0/23
191.101.76.0/24
191.101.82.0/23
191.101.88.0/23
191.101.102.0/24
191.101.116.0/24
191.101.120.0/24
191.101.124.0/23
191.101.135.0/24
191.101.151.0/24
191.101.171.0/24
191.101.182.0/24
191.101.192.0/24
191.101.198.0/24
191.101.219.0/24
191.101.252.0/24
213.109.168.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bb:f1:f2:0d:44:36:36:dc:10:2b:40:dd:25:35:a1:7b:d5:
aa:6d:5e:cb:d7:d6:09:4c:f9:a5:e0:d8:ce:c3:52:6c:ae:96:
80:4c:45:f6:af:a1:03:cc:06:34:9d:a0:6d:fb:51:de:4e:be:
91:11:ae:3b:57:2d:94:b6:47:5a:cc:ab:f0:de:14:aa:a6:5a:
06:6e:3f:3d:cb:b9:b7:92:4b:7b:3a:65:c8:f8:a6:79:17:e5:
cd:2e:78:eb:5a:43:5c:c0:c6:71:d8:c3:ed:15:c1:0b:9e:6e:
16:d6:36:ab:3f:2f:d1:b4:79:9a:48:ef:d5:20:4d:1b:a3:c1:
ab:d7:5c:3c:39:a3:c3:a6:1d:dc:57:b5:c0:5c:80:06:37:67:
e5:7d:0f:1f:06:db:b6:9b:88:f7:b4:1a:4b:96:2e:1c:4a:02:
7c:01:ed:25:93:46:87:ba:19:f2:dc:1c:3e:79:76:0f:82:c3:
8c:7d:bc:86:06:26:41:71:45:5f:4b:d6:fb:c7:f5:13:71:75:
b3:0a:0d:a5:95:2b:ec:8f:c0:b4:9a:ff:23:e7:48:7c:76:72:
60:fc:9c:48:59:b1:81:e4:3c:a2:31:f3:55:1f:67:3f:69:bd:
60:e6:f2:d9:07:e1:13:66:7b:e4:17:cc:3c:72:ae:3b:1e:0e:
f3:1f:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 01:07:06 2026 by rpki-client