Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: YltEZP+zrzt3nHGQrj65WUmT0JiUZnFf8TDl3HapDk4=
Subject key identifier: 50:AD:B6:AD:5B:F1:82:4D:16:DD:40:43:4A:12:F4:47:CC:04:EA:9F
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 0F086AD7CFA7B546B4C8353B0733C8D7186DB1EC
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
Signing time: Fri 17 Jul 2026 11:58:53 +0000
ROA not before: Fri 17 Jul 2026 11:53:53 +0000
ROA not after: Fri 16 Jul 2027 11:58:53 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
139.28.50.0/24 maxlen: 24
188.119.69.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
193.187.108.0/23 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:08:6a:d7:cf:a7:b5:46:b4:c8:35:3b:07:33:c8:d7:18:6d:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 17 11:53:53 2026 GMT
Not After : Jul 16 11:58:53 2027 GMT
Subject: CN=50ADB6AD5BF1824D16DD40434A12F447CC04EA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:48:73:3c:99:3e:7f:56:89:51:0c:80:8a:
09:5e:e1:d2:c3:98:ee:6e:3c:8e:96:9e:6f:ac:25:
b9:39:16:b4:a0:2f:03:d3:39:e2:6c:6b:fc:fd:45:
60:41:b9:75:bd:35:3a:f2:ea:61:f4:77:21:91:08:
63:7c:dc:f5:18:bd:ad:f3:ce:f4:e9:ae:93:71:9f:
b0:c8:df:0d:54:a2:19:83:6c:ba:28:85:ac:65:4f:
a3:16:70:db:eb:c0:30:4a:0d:03:72:24:6a:31:63:
4a:10:21:b8:d5:1c:bf:87:bb:44:4a:56:83:d3:e4:
b1:2a:6f:25:85:b3:a8:f3:a8:b7:78:f1:fd:a1:01:
28:37:bc:e2:e7:cb:78:ed:54:e5:5f:a3:46:9e:75:
2c:bb:a9:4d:a5:f9:9e:6b:36:95:6a:14:4b:a6:f1:
fd:93:c2:b2:4a:ce:29:d7:ba:08:c6:b3:f3:e6:f4:
6c:d1:0f:cb:fa:5c:8a:d4:f8:ba:fc:79:e1:b2:52:
3b:5f:b9:50:66:bc:9c:d7:ff:fa:f6:49:39:d0:38:
19:be:87:05:e2:a0:80:ce:c1:ae:fe:bb:d4:8e:54:
f3:21:cb:e6:1d:77:07:9f:fe:63:86:06:63:d8:34:
6d:ff:bf:8d:0b:12:c6:6e:45:e1:86:1f:3c:53:48:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:B6:AD:5B:F1:82:4D:16:DD:40:43:4A:12:F4:47:CC:04:EA:9F
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
139.28.50.0/24
188.119.69.0/24
193.32.207.0/24
193.187.108.0/23
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b8:cc:0c:d2:5a:7b:f5:26:b1:08:d3:d1:69:62:a9:b1:a1:
92:8a:df:fb:77:20:93:74:e7:2c:47:ee:37:16:71:fe:4d:30:
a1:35:44:74:7f:90:09:9a:1f:25:13:e0:7c:29:a1:61:58:21:
df:29:50:d5:bc:d2:6a:64:cc:71:4a:99:d0:bd:6e:89:34:cd:
44:6c:1b:f1:bb:13:d8:a4:50:a9:46:f5:cd:af:71:27:b4:fd:
4f:e7:7d:29:2d:df:f4:6a:72:05:2f:35:f3:2c:29:e2:d5:5c:
42:98:de:23:ae:3e:80:c2:57:93:e3:ef:16:68:87:02:2f:ef:
02:39:06:d6:df:5e:d4:62:b8:bd:73:71:1c:99:4c:d8:76:ea:
f9:13:ec:eb:84:69:be:14:4a:e2:d4:a8:a5:d4:d1:a8:56:ff:
98:58:db:ff:b7:1d:b2:cc:4a:fc:41:3f:e5:16:c5:62:a1:0f:
0e:d6:aa:44:f9:f1:36:7a:a4:84:33:1b:3c:f0:53:ba:20:ef:
1a:95:31:b6:50:97:be:ad:86:50:44:7f:93:5c:de:3e:ce:2c:
b0:99:df:11:65:1f:c0:dd:2c:3c:f0:c5:ed:f3:37:80:43:e1:
ab:60:dd:f7:a8:5e:ca:52:0d:1c:4b:f8:98:5e:65:63:d3:cb:
80:cf:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:17 2026 by rpki-client