Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: Gxh7WqV4DKOiDL47rMJ30BZ7iWjOdK5U/IVROofEmuE=
Subject key identifier: 03:EB:E3:47:3C:DC:23:59:6F:3C:69:48:4D:21:7E:4D:A2:00:CE:F3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1606151692F22FCB0ADB3D715750FECBB12D1CBF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Thu 23 Jul 2026 08:31:42 +0000
ROA not before: Thu 23 Jul 2026 08:26:42 +0000
ROA not after: Thu 22 Jul 2027 08:31:42 +0000
asID: 834
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:06:15:16:92:f2:2f:cb:0a:db:3d:71:57:50:fe:cb:b1:2d:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 23 08:26:42 2026 GMT
Not After : Jul 22 08:31:42 2027 GMT
Subject: CN=03EBE3473CDC23596F3C69484D217E4DA200CEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:4c:87:bd:19:9b:54:71:fa:de:c6:b8:b1:
d4:18:94:b0:9b:f4:be:24:3a:b5:dc:67:30:27:e6:
9b:f1:02:0c:ea:b5:18:1c:66:90:ee:9c:d6:07:71:
a7:14:d1:dd:4a:43:fe:61:2b:e2:1a:c9:8e:ba:7c:
2b:49:40:06:1a:c9:3a:b3:bc:eb:53:04:49:c5:b8:
29:b4:c8:f8:9e:74:7e:f1:2a:62:da:2a:eb:d4:56:
e2:12:ec:61:64:fd:9c:3d:be:c4:5d:c7:e6:1c:81:
36:3d:89:89:ab:e3:18:19:c5:c5:33:20:58:86:49:
2c:7d:a8:d5:ca:53:9c:cf:0a:1b:9b:4c:83:1e:c0:
ca:e2:52:9e:98:7a:3c:3d:31:6c:78:9b:d4:df:8c:
dd:f0:8a:98:a0:40:aa:f9:c5:6d:26:66:2f:a9:76:
74:43:32:d9:50:dd:ef:6b:65:e6:a5:94:74:68:d1:
4f:b2:4e:f8:fd:35:31:ad:70:87:72:14:da:93:6b:
41:47:87:d2:e1:a0:a1:46:69:bd:1a:58:54:ff:53:
b9:d6:c9:d5:17:6b:47:aa:7b:ce:75:38:87:88:79:
d4:67:47:1c:8a:58:2a:f3:c8:39:06:4c:81:cb:47:
76:65:08:03:2e:fb:56:b9:cf:45:26:0e:cf:70:69:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EB:E3:47:3C:DC:23:59:6F:3C:69:48:4D:21:7E:4D:A2:00:CE:F3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e3:3e:d8:14:c8:a2:45:4f:ef:40:c8:f9:5c:09:a6:10:3f:
14:e8:5a:e5:12:aa:aa:58:3a:de:a3:fc:69:9d:75:18:fe:04:
ae:61:65:12:c2:73:10:c7:d0:43:b0:b3:9a:b1:f7:14:75:85:
41:c9:e4:db:68:95:4a:7b:f4:0e:5c:ce:da:c8:9f:a5:23:2f:
ee:21:e4:bb:2f:a9:21:60:41:e4:e0:c7:77:c7:f8:e9:c3:b7:
9e:59:da:04:15:7e:af:4c:d5:b9:37:3b:8f:e5:53:c0:52:94:
35:c3:e5:71:8f:38:b9:23:1a:11:1f:67:19:8b:62:c2:52:8a:
3f:89:45:98:00:18:71:5f:81:b9:9f:a3:3f:97:1e:41:57:42:
ea:bb:ba:f7:dc:84:9c:12:c6:c2:ee:bb:69:a6:bf:48:b1:29:
77:c7:0f:df:b3:a7:9f:a7:e5:9c:7f:62:aa:38:5a:3e:58:d8:
92:05:81:3d:be:d9:54:9f:40:76:42:85:49:03:76:34:f6:ec:
f8:22:54:75:83:78:94:34:2e:7c:64:3f:1b:53:80:84:e0:e2:
28:21:22:18:25:e0:3a:96:54:ae:77:4d:14:82:bc:6c:f5:a9:
2e:c0:e0:c8:94:2e:b1:92:bb:8d:f5:c8:33:b2:f1:c5:f7:a8:
35:5e:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:55:10 2026 by rpki-client