Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: sLYdn3sXbmKlCRfQDGsnFFYEHPa6eu0PrIAnaBXNs8c=
Subject key identifier: AC:E2:3C:2F:7D:0C:ED:4A:25:6E:CC:16:2F:46:83:B9:F6:75:DF:51
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 226F27D6FCA9864B722CCFEA48D9C0B3D6EA69AE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
Signing time: Tue 12 May 2026 17:37:22 +0000
ROA not before: Tue 12 May 2026 17:32:22 +0000
ROA not after: Tue 11 May 2027 17:37:22 +0000
asID: 834
IP address blocks: 51.146.0.0/19 maxlen: 24
51.146.180.0/22 maxlen: 24
51.146.232.0/23 maxlen: 24
51.146.234.0/24 maxlen: 24
51.146.236.0/24 maxlen: 24
51.146.238.0/23 maxlen: 24
51.146.240.0/22 maxlen: 24
51.146.244.0/23 maxlen: 24
51.146.246.0/24 maxlen: 24
51.194.114.0/24 maxlen: 24
51.194.157.0/24 maxlen: 24
51.194.163.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.5.0/24 maxlen: 24
51.241.6.0/23 maxlen: 24
51.241.16.0/23 maxlen: 24
51.241.19.0/24 maxlen: 24
51.241.56.0/24 maxlen: 24
51.241.58.0/23 maxlen: 24
51.241.60.0/23 maxlen: 24
51.241.63.0/24 maxlen: 24
51.241.66.0/23 maxlen: 24
51.241.72.0/24 maxlen: 24
51.241.74.0/23 maxlen: 24
51.241.77.0/24 maxlen: 24
51.241.78.0/24 maxlen: 24
51.241.82.0/23 maxlen: 24
51.241.85.0/24 maxlen: 24
51.241.92.0/23 maxlen: 24
51.241.94.0/24 maxlen: 24
51.241.97.0/24 maxlen: 24
51.241.98.0/24 maxlen: 24
51.241.100.0/22 maxlen: 24
51.241.104.0/22 maxlen: 24
51.241.112.0/23 maxlen: 24
51.241.116.0/22 maxlen: 24
51.241.120.0/23 maxlen: 24
51.241.123.0/24 maxlen: 24
51.241.126.0/23 maxlen: 24
78.105.116.0/24 maxlen: 24
78.105.121.0/24 maxlen: 24
78.105.123.0/24 maxlen: 24
78.105.173.0/24 maxlen: 24
78.105.180.0/24 maxlen: 24
78.105.193.0/24 maxlen: 24
78.105.197.0/24 maxlen: 24
78.105.208.0/24 maxlen: 24
78.105.210.0/23 maxlen: 24
78.105.214.0/24 maxlen: 24
78.105.244.0/24 maxlen: 24
94.194.0.0/16 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:6f:27:d6:fc:a9:86:4b:72:2c:cf:ea:48:d9:c0:b3:d6:ea:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 12 17:32:22 2026 GMT
Not After : May 11 17:37:22 2027 GMT
Subject: CN=ACE23C2F7D0CED4A256ECC162F4683B9F675DF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:e8:bd:4a:fa:9b:67:52:73:84:90:bb:fd:
05:59:b3:43:55:ae:23:1f:c4:91:30:31:f3:95:4b:
15:01:ea:57:a5:1d:5b:a0:13:7d:e3:fe:36:78:dd:
bd:b7:66:cd:62:2f:bc:48:db:db:11:24:a5:59:84:
7d:9c:35:40:3c:d9:b2:45:12:f1:75:a1:c7:c7:11:
93:cb:31:0e:9a:1a:36:ad:0c:f7:e1:2e:e7:5c:b4:
70:7f:1d:b3:ee:98:ff:f9:06:0c:2c:a0:b0:b5:b5:
34:d6:fe:38:20:ab:1e:92:75:3b:72:b5:72:95:c8:
12:dd:9c:b4:45:e7:47:e1:ea:34:91:8f:49:1d:4a:
d3:95:65:a2:fa:25:d9:e2:ac:03:56:73:d9:10:65:
05:0e:84:84:5c:a1:37:f6:15:76:a6:94:da:d8:1f:
25:6c:97:28:41:7a:24:b7:3a:fc:96:48:0d:3c:b9:
13:33:8c:20:91:64:c4:88:1a:72:b5:44:c3:4e:f9:
26:03:f0:33:e4:fb:c4:2a:59:41:cb:02:90:c9:ac:
7e:69:4d:3e:0c:ea:38:42:a4:49:3a:e5:3a:b6:4b:
ba:73:0f:84:aa:96:b5:25:0e:2d:69:47:f4:b1:87:
75:92:33:40:86:e0:40:e4:3c:43:2e:1a:37:9a:5a:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:3C:2F:7D:0C:ED:4A:25:6E:CC:16:2F:46:83:B9:F6:75:DF:51
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/19
51.146.180.0/22
51.146.232.0-51.146.234.255
51.146.236.0/24
51.146.238.0-51.146.246.255
51.194.114.0/24
51.194.157.0/24
51.194.163.0/24
51.241.2.0/24
51.241.5.0-51.241.7.255
51.241.16.0/23
51.241.19.0/24
51.241.56.0/24
51.241.58.0-51.241.61.255
51.241.63.0/24
51.241.66.0/23
51.241.72.0/24
51.241.74.0/23
51.241.77.0-51.241.78.255
51.241.82.0/23
51.241.85.0/24
51.241.92.0-51.241.94.255
51.241.97.0-51.241.98.255
51.241.100.0-51.241.107.255
51.241.112.0/23
51.241.116.0-51.241.121.255
51.241.123.0/24
51.241.126.0/23
78.105.116.0/24
78.105.121.0/24
78.105.123.0/24
78.105.173.0/24
78.105.180.0/24
78.105.193.0/24
78.105.197.0/24
78.105.208.0/24
78.105.210.0/23
78.105.214.0/24
78.105.244.0/24
94.194.0.0/16
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:18:24:30:b5:4e:e5:1b:69:62:5a:f4:db:a9:28:4e:00:dd:
2d:95:19:7a:88:ae:db:14:48:5a:10:60:57:8c:5f:bf:30:d3:
71:ed:4a:ca:33:ec:48:67:01:d9:48:85:37:18:e0:f5:65:ad:
1d:8b:5d:96:9f:5b:a4:f3:a9:4c:e0:45:96:c1:92:fc:68:2b:
2e:c6:f3:52:55:f0:7f:7d:c5:22:77:e7:1b:81:3c:a7:93:6f:
0c:db:bc:50:4f:85:b0:77:e3:c5:29:ed:a8:0c:b9:d7:93:70:
a4:61:13:3d:6e:c7:4a:1a:20:e5:da:d1:38:de:ae:21:14:5a:
fa:33:dd:94:f0:2d:84:72:86:30:7e:b2:8a:f8:f6:03:df:a5:
ed:09:72:6d:88:3e:60:b8:85:b6:c3:4f:26:00:57:31:93:21:
fb:76:94:1c:28:4f:5c:33:47:ee:3c:50:b6:e5:b3:90:e5:64:
10:95:f7:ef:ff:a5:ae:70:47:16:12:d5:50:4a:1a:08:2a:bf:
45:74:dc:d4:08:d1:a7:1a:19:3b:d9:f0:7f:d8:22:f2:39:44:
60:37:71:43:f4:21:b1:8e:5e:7e:d8:b7:d9:35:bf:a0:8e:0f:
b9:2d:1a:9d:0c:75:fc:8e:84:b5:04:c6:b6:e9:86:05:f8:72:
ba:d2:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:23 2026 by rpki-client