Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: yiRlhUmhfwqZC9IZ0traHd1ogWp8YjXw2YgZy1PzrkE=
Subject key identifier: 5E:D0:5B:69:1D:4B:AA:3F:D1:8C:1E:53:0F:2C:63:B8:EE:8F:FC:2D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3799FCCC6512F8E891DE330FD2E473AE80A2C77D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Wed 11 Nov 2026 00:02:18 +0000
ROA not before: Tue 10 Nov 2026 23:57:18 +0000
ROA not after: Wed 10 Nov 2027 00:02:18 +0000
asID: 834
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:99:fc:cc:65:12:f8:e8:91:de:33:0f:d2:e4:73:ae:80:a2:c7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 10 23:57:18 2026 GMT
Not After : Nov 10 00:02:18 2027 GMT
Subject: CN=5ED05B691D4BAA3FD18C1E530F2C63B8EE8FFC2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:06:9f:e5:d3:be:13:9e:1b:c6:b2:cb:c3:
c6:84:e7:a1:ac:a5:d5:45:08:cc:a9:cf:a1:92:04:
38:2e:a3:3c:15:a7:5c:db:94:fa:03:a1:d6:f1:dc:
76:cb:c5:e1:7b:17:cc:30:6f:84:e1:d8:a4:ab:70:
cf:76:06:7c:b0:bc:a8:c0:85:d4:56:3f:19:65:3f:
4a:47:e5:fc:92:26:88:01:f6:d0:ff:cc:ef:29:bb:
83:00:e5:54:c4:03:0c:41:6b:64:32:bb:f5:91:ad:
98:b4:ee:11:21:1f:74:ce:f4:2c:dc:28:d7:8f:9e:
7d:0b:1e:95:6c:a3:e6:cd:c3:70:11:6a:6b:12:cf:
48:cc:23:36:4e:12:b7:c2:f6:f1:82:f3:30:af:53:
3a:2e:bc:fe:9f:03:fb:9f:71:19:f0:4f:c4:39:71:
c8:4f:5f:ec:bb:23:a1:90:54:ee:1a:81:b8:61:00:
3d:8f:e3:03:ab:a8:ad:a7:62:bd:a6:7a:3f:c3:f6:
92:25:a5:ae:eb:3a:80:84:6a:94:a8:55:e7:f1:55:
fd:d8:f6:2c:b5:9b:a0:3b:4a:64:90:7d:cd:43:41:
fb:44:20:e5:ab:47:e6:86:87:d1:40:4b:e5:de:b4:
b8:a6:18:12:27:0e:52:ad:46:f9:d3:93:04:67:2b:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D0:5B:69:1D:4B:AA:3F:D1:8C:1E:53:0F:2C:63:B8:EE:8F:FC:2D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:67:37:1d:c0:4a:ed:ed:d5:c1:44:67:23:9a:b2:4f:69:ac:
ef:35:df:dd:54:a7:2c:6a:08:7b:45:68:dc:a6:d5:cd:64:48:
43:e4:52:7b:bc:8f:f2:a3:2e:cb:e2:08:f9:62:0c:90:c8:03:
3f:c6:a0:28:83:f1:6c:eb:b3:5d:ca:1e:ec:64:93:bf:9e:93:
d3:d7:27:7c:4e:2d:3a:50:51:3e:d7:b2:1a:7a:1f:c7:e3:1f:
db:97:f5:1d:03:91:92:b0:9b:bf:94:63:46:38:71:19:4c:78:
bc:14:17:b2:56:e0:02:2b:63:3b:b0:d3:58:cc:a9:ea:f8:4a:
12:d1:8c:5b:e5:84:68:91:63:3b:41:28:68:b3:e8:d4:92:58:
63:6d:a0:aa:62:0a:9e:8c:23:8f:ff:64:35:1b:4e:06:cb:4b:
dc:2c:06:69:00:33:17:37:df:44:b9:ef:fb:4d:4f:37:fb:66:
3a:2d:ef:ab:76:e9:7e:47:c5:af:40:02:34:f8:4a:0c:f9:60:
4d:cd:11:ab:06:a1:48:27:08:61:89:49:00:b4:f3:e5:54:cf:
89:47:b0:30:2b:70:47:03:47:54:1d:4b:0e:d9:5b:67:09:8a:
07:ba:84:10:2c:8f:85:08:9f:df:06:9c:c2:7c:b5:67:3c:3d:
69:bc:82:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUN5n8zGUS+OiR3jMP0uRzroCix30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjExMTAyMzU3MThaFw0yNzExMTAwMDAyMThaMDMxMTAvBgNV
BAMTKDVFRDA1QjY5MUQ0QkFBM0ZEMThDMUU1MzBGMkM2M0I4RUU4RkZDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTAaf5dO+E54bxrLLw8aE56Gs
pdVFCMypz6GSBDguozwVp1zblPoDodbx3HbLxeF7F8wwb4Th2KSrcM92BnywvKjA
hdRWPxllP0pH5fySJogB9tD/zO8pu4MA5VTEAwxBa2Qyu/WRrZi07hEhH3TO9Czc
KNePnn0LHpVso+bNw3ARamsSz0jMIzZOErfC9vGC8zCvUzouvP6fA/ufcRnwT8Q5
cchPX+y7I6GQVO4agbhhAD2P4wOrqK2nYr2mej/D9pIlpa7rOoCEapSoVefxVf3Y
9iy1m6A7SmSQfc1DQftEIOWrR+aGh9FAS+XetLimGBInDlKtRvnTkwRnKyu3AgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUXtBbaR1Lqj/RjB5TDyxjuO6P/C0wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvfMA0G
CSqGSIb3DQEBCwUAA4IBAQDTZzcdwErt7dXBRGcjmrJPaazvNd/dVKcsagh7RWjc
ptXNZEhD5FJ7vI/yoy7L4gj5YgyQyAM/xqAog/Fs67Ndyh7sZJO/npPT1yd8Ti06
UFE+17Iaeh/H4x/bl/UdA5GSsJu/lGNGOHEZTHi8FBeyVuACK2M7sNNYzKnq+EoS
0Yxb5YRokWM7QShos+jUklhjbaCqYgqejCOP/2Q1G04Gy0vcLAZpADMXN99Eue/7
TU83+2Y6Le+rdul+R8WvQAI0+EoM+WBNzRGrBqFIJwhhiUkAtPPlVM+JR7AwK3BH
A0dUHUsO2VtnCYoHuoQQLI+FCJ/fBpzCfLVnPD1pvILs
-----END CERTIFICATE-----
Generated at Wed Nov 11 22:41:09 2026 by rpki-client