Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: ZcDFSONgpeI6OO0Bj1PyYUr8tLM5kAJ7aar6XD4l2Xs=
Subject key identifier: FD:E7:70:90:EB:24:8F:F6:22:0A:F1:AC:81:76:D8:BE:83:C7:48:29
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D65004AE2835EB1003263BCF3072AA1E8A2DEDA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
Signing time: Wed 23 Sep 2026 02:08:09 +0000
ROA not before: Wed 23 Sep 2026 02:03:09 +0000
ROA not after: Wed 22 Sep 2027 02:08:09 +0000
asID: 834
IP address blocks: 82.21.96.0/24 maxlen: 24
82.21.149.0/24 maxlen: 24
82.22.161.0/24 maxlen: 24
82.23.2.0/24 maxlen: 24
82.23.14.0/24 maxlen: 24
82.24.4.0/24 maxlen: 24
82.24.69.0/24 maxlen: 24
82.24.71.0/24 maxlen: 24
82.24.83.0/24 maxlen: 24
82.25.10.0/24 maxlen: 24
82.25.13.0/24 maxlen: 24
82.25.30.0/24 maxlen: 24
82.25.145.0/24 maxlen: 24
82.26.78.0/23 maxlen: 24
82.26.82.0/24 maxlen: 24
82.26.84.0/24 maxlen: 24
82.26.119.0/24 maxlen: 24
82.26.127.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
82.26.147.0/24 maxlen: 24
82.26.155.0/24 maxlen: 24
82.27.39.0/24 maxlen: 24
82.27.45.0/24 maxlen: 24
82.27.67.0/24 maxlen: 24
82.27.79.0/24 maxlen: 24
82.27.95.0/24 maxlen: 24
82.27.131.0/24 maxlen: 24
82.27.133.0/24 maxlen: 24
82.27.135.0/24 maxlen: 24
82.29.64.0/24 maxlen: 24
82.38.20.0/24 maxlen: 24
82.38.147.0/24 maxlen: 24
82.38.168.0/24 maxlen: 24
82.38.183.0/24 maxlen: 24
82.39.166.0/24 maxlen: 24
82.39.185.0/24 maxlen: 24
82.39.228.0/22 maxlen: 24
82.39.240.0/22 maxlen: 24
82.39.246.0/24 maxlen: 24
82.41.37.0/24 maxlen: 24
82.41.202.0/24 maxlen: 24
82.41.236.0/24 maxlen: 24
82.41.238.0/24 maxlen: 24
82.47.19.0/24 maxlen: 24
82.47.36.0/23 maxlen: 24
82.47.61.0/24 maxlen: 24
82.47.130.0/24 maxlen: 24
82.47.136.0/24 maxlen: 24
82.47.140.0/23 maxlen: 24
82.47.143.0/24 maxlen: 24
82.47.149.0/24 maxlen: 24
82.47.155.0/24 maxlen: 24
82.47.162.0/24 maxlen: 24
82.47.165.0/24 maxlen: 24
82.47.167.0/24 maxlen: 24
82.47.170.0/24 maxlen: 24
82.47.172.0/24 maxlen: 24
82.47.174.0/24 maxlen: 24
82.47.176.0/24 maxlen: 24
82.47.181.0/24 maxlen: 24
82.47.182.0/24 maxlen: 24
82.47.185.0/24 maxlen: 24
82.47.191.0/24 maxlen: 24
82.47.194.0/23 maxlen: 24
82.47.198.0/23 maxlen: 24
82.47.201.0/24 maxlen: 24
82.47.205.0/24 maxlen: 24
82.47.206.0/24 maxlen: 24
82.47.247.0/24 maxlen: 24
82.47.249.0/24 maxlen: 24
84.75.3.0/24 maxlen: 24
84.75.51.0/24 maxlen: 24
84.75.55.0/24 maxlen: 24
84.75.62.0/24 maxlen: 24
84.75.64.0/24 maxlen: 24
84.75.81.0/24 maxlen: 24
84.75.133.0/24 maxlen: 24
84.75.135.0/24 maxlen: 24
84.75.139.0/24 maxlen: 24
84.75.140.0/24 maxlen: 24
84.75.146.0/23 maxlen: 24
84.75.149.0/24 maxlen: 24
84.75.153.0/24 maxlen: 24
84.75.156.0/24 maxlen: 24
84.75.176.0/23 maxlen: 24
84.75.185.0/24 maxlen: 24
84.75.204.0/24 maxlen: 24
84.75.222.0/23 maxlen: 24
84.75.246.0/24 maxlen: 24
84.75.252.0/23 maxlen: 24
178.83.29.0/24 maxlen: 24
178.83.30.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.40.0/24 maxlen: 24
178.83.48.0/23 maxlen: 24
178.83.56.0/24 maxlen: 24
178.83.65.0/24 maxlen: 24
178.83.108.0/24 maxlen: 24
178.83.111.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.144.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
178.83.182.0/24 maxlen: 24
178.83.191.0/24 maxlen: 24
178.83.208.0/24 maxlen: 24
178.83.220.0/23 maxlen: 24
178.83.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:65:00:4a:e2:83:5e:b1:00:32:63:bc:f3:07:2a:a1:e8:a2:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 02:03:09 2026 GMT
Not After : Sep 22 02:08:09 2027 GMT
Subject: CN=FDE77090EB248FF6220AF1AC8176D8BE83C74829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:5a:5c:c7:69:33:6c:11:8e:8d:f1:ea:2e:
c8:51:72:0d:5c:b7:90:71:94:4f:b3:b8:7a:79:45:
0c:f4:2c:2b:fd:8f:15:f4:67:2c:67:67:2e:6d:5f:
a9:44:4f:84:0c:4a:f9:7d:d9:b9:80:14:e2:ba:f2:
d7:7c:52:a3:e6:08:d3:96:f4:11:cb:1f:79:0c:56:
97:cd:cc:6a:6f:00:56:c7:26:6e:a5:b3:71:f1:5e:
15:1a:4b:7e:3c:ad:97:c7:d4:f0:9f:ba:ad:7a:96:
04:ff:4a:4e:ac:bb:8e:df:ef:82:08:7b:80:66:bd:
fe:3b:05:8d:11:2d:55:e2:36:66:66:70:f8:c7:6f:
2b:4e:7e:84:f9:73:e2:ee:e7:1f:94:b0:a0:fe:7f:
29:94:c9:0e:d7:46:d3:63:e6:c5:1a:21:d0:cb:19:
70:3f:43:a3:d3:8d:9e:76:77:2c:cc:71:71:89:ca:
8c:86:2b:b8:e4:53:0b:96:b1:55:e8:10:30:cc:2d:
2e:50:fb:75:aa:64:9b:d8:8f:ff:e0:6a:2d:a5:49:
a2:6b:5a:c2:2d:70:48:b4:aa:0a:ab:ec:9b:02:18:
0a:f4:a2:fc:7f:86:5d:c0:e9:d1:eb:95:45:a7:0d:
12:23:7d:47:75:9f:43:a5:6f:47:05:0c:13:be:9a:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:70:90:EB:24:8F:F6:22:0A:F1:AC:81:76:D8:BE:83:C7:48:29
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.96.0/24
82.21.149.0/24
82.22.161.0/24
82.23.2.0/24
82.23.14.0/24
82.24.4.0/24
82.24.69.0/24
82.24.71.0/24
82.24.83.0/24
82.25.10.0/24
82.25.13.0/24
82.25.30.0/24
82.25.145.0/24
82.26.78.0/23
82.26.82.0/24
82.26.84.0/24
82.26.119.0/24
82.26.127.0/24
82.26.141.0-82.26.142.255
82.26.147.0/24
82.26.155.0/24
82.27.39.0/24
82.27.45.0/24
82.27.67.0/24
82.27.79.0/24
82.27.95.0/24
82.27.131.0/24
82.27.133.0/24
82.27.135.0/24
82.29.64.0/24
82.38.20.0/24
82.38.147.0/24
82.38.168.0/24
82.38.183.0/24
82.39.166.0/24
82.39.185.0/24
82.39.228.0/22
82.39.240.0/22
82.39.246.0/24
82.41.37.0/24
82.41.202.0/24
82.41.236.0/24
82.41.238.0/24
82.47.19.0/24
82.47.36.0/23
82.47.61.0/24
82.47.130.0/24
82.47.136.0/24
82.47.140.0/23
82.47.143.0/24
82.47.149.0/24
82.47.155.0/24
82.47.162.0/24
82.47.165.0/24
82.47.167.0/24
82.47.170.0/24
82.47.172.0/24
82.47.174.0/24
82.47.176.0/24
82.47.181.0-82.47.182.255
82.47.185.0/24
82.47.191.0/24
82.47.194.0/23
82.47.198.0/23
82.47.201.0/24
82.47.205.0-82.47.206.255
82.47.247.0/24
82.47.249.0/24
84.75.3.0/24
84.75.51.0/24
84.75.55.0/24
84.75.62.0/24
84.75.64.0/24
84.75.81.0/24
84.75.133.0/24
84.75.135.0/24
84.75.139.0-84.75.140.255
84.75.146.0/23
84.75.149.0/24
84.75.153.0/24
84.75.156.0/24
84.75.176.0/23
84.75.185.0/24
84.75.204.0/24
84.75.222.0/23
84.75.246.0/24
84.75.252.0/23
178.83.29.0-178.83.30.255
178.83.36.0/24
178.83.40.0/24
178.83.48.0/23
178.83.56.0/24
178.83.65.0/24
178.83.108.0/24
178.83.111.0/24
178.83.129.0/24
178.83.131.0/24
178.83.144.0/24
178.83.152.0/24
178.83.161.0/24
178.83.165.0/24
178.83.182.0/24
178.83.191.0/24
178.83.208.0/24
178.83.220.0/23
178.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c9:ef:af:9f:47:66:0a:87:d1:89:76:01:35:e3:1f:1d:b4:
57:26:62:03:18:44:e0:e0:32:01:2f:86:76:5a:f1:67:d8:eb:
5f:02:21:81:b3:d8:e7:87:5e:26:47:32:d6:bb:c8:45:78:5a:
4e:83:28:a6:8e:bf:04:a8:ed:62:da:6a:42:0d:9f:60:1e:5d:
0e:c5:02:64:47:24:84:d8:f2:85:0f:7e:e3:18:91:c6:04:f4:
2e:51:a2:5f:bd:df:c9:3b:e2:67:80:d0:c5:5b:62:8a:3b:ba:
76:18:00:bb:04:fd:0c:30:37:d5:e2:fa:e3:dc:64:6d:eb:0a:
95:95:21:b5:59:74:3e:de:3f:d6:ed:9e:27:3d:31:2d:d4:66:
98:34:36:8a:28:e3:9c:8b:1f:72:59:da:4d:9f:c7:f2:c9:8f:
7e:04:c4:e0:f5:15:fb:02:27:4b:cf:2a:2a:e8:1c:a2:a3:ce:
a9:66:8f:eb:43:b3:f7:ae:17:64:63:f2:6e:08:8a:7d:23:f3:
06:cf:6c:ea:b0:9a:8d:37:33:2d:0a:84:29:c8:73:ec:db:38:
52:ee:76:26:4d:dd:21:96:61:82:7e:eb:c6:e8:76:24:d6:82:
e1:ad:a5:70:c5:d2:d0:19:ec:d0:12:0b:06:34:14:5c:88:df:
87:f3:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:46:23 2026 by rpki-client