Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: dUbnKuMd/B3MZYOx8Hr+gEdDZasWT+b8yFicZQ16buc=
Subject key identifier: F6:1E:1B:F7:1F:9C:54:E1:AD:6A:4D:85:86:FE:22:FE:DA:CD:E1:05
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 300A0BAFD5DC5A7B73F8B846CB45AE7B1423E57E
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
Signing time: Wed 23 Sep 2026 07:44:39 +0000
ROA not before: Wed 23 Sep 2026 07:39:39 +0000
ROA not after: Wed 22 Sep 2027 07:44:39 +0000
asID: 834
IP address blocks: 152.234.134.0/23 maxlen: 24
152.234.136.0/23 maxlen: 24
152.234.139.0/24 maxlen: 24
152.234.140.0/22 maxlen: 24
177.201.193.0/24 maxlen: 24
177.201.195.0/24 maxlen: 24
177.201.196.0/22 maxlen: 24
177.201.200.0/21 maxlen: 24
179.69.66.0/23 maxlen: 24
179.69.68.0/22 maxlen: 24
179.69.72.0/21 maxlen: 24
179.69.80.0/20 maxlen: 24
189.12.130.0/24 maxlen: 24
189.12.133.0/24 maxlen: 24
189.12.134.0/23 maxlen: 24
189.12.136.0/21 maxlen: 24
189.12.144.0/23 maxlen: 24
189.12.147.0/24 maxlen: 24
189.12.148.0/22 maxlen: 24
189.12.152.0/22 maxlen: 24
189.12.156.0/24 maxlen: 24
189.12.158.0/23 maxlen: 24
189.30.97.0/24 maxlen: 24
189.30.98.0/23 maxlen: 24
189.30.103.0/24 maxlen: 24
189.30.104.0/22 maxlen: 24
189.30.109.0/24 maxlen: 24
189.30.110.0/23 maxlen: 24
189.30.112.0/20 maxlen: 24
189.31.1.0/24 maxlen: 24
189.31.2.0/23 maxlen: 24
189.31.4.0/22 maxlen: 24
189.31.8.0/21 maxlen: 24
189.73.43.0/24 maxlen: 24
189.73.44.0/22 maxlen: 24
191.0.81.0/24 maxlen: 24
191.0.82.0/23 maxlen: 24
191.0.84.0/22 maxlen: 24
191.0.88.0/22 maxlen: 24
191.0.92.0/23 maxlen: 24
191.45.32.0/23 maxlen: 24
191.45.34.0/24 maxlen: 24
191.45.36.0/22 maxlen: 24
200.141.52.0/22 maxlen: 24
200.149.189.0/24 maxlen: 24
200.149.190.0/24 maxlen: 24
200.180.180.0/24 maxlen: 24
200.180.185.0/24 maxlen: 24
200.180.186.0/23 maxlen: 24
200.180.188.0/22 maxlen: 24
201.24.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0a:0b:af:d5:dc:5a:7b:73:f8:b8:46:cb:45:ae:7b:14:23:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 23 07:39:39 2026 GMT
Not After : Sep 22 07:44:39 2027 GMT
Subject: CN=F61E1BF71F9C54E1AD6A4D8586FE22FEDACDE105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:a2:51:69:8f:34:c6:0c:8e:a7:b0:de:98:
f5:fb:f5:0b:3d:d4:62:76:e1:5a:c7:4b:17:f1:07:
c8:a6:b4:66:f2:7d:e8:4d:36:7c:d2:4f:15:74:25:
e7:5c:a5:97:95:74:f7:ad:2a:04:31:6f:66:30:4b:
3f:25:c0:ba:b4:97:4f:b4:65:55:aa:06:23:96:dd:
a1:22:20:23:3a:32:cc:31:0e:8e:fc:82:4d:19:e3:
7b:f1:7b:e2:97:2d:e9:b3:dd:d2:51:bd:d0:17:85:
05:b3:71:88:17:1d:39:cc:0f:26:40:ae:d7:34:a6:
4e:26:be:bd:6b:bc:a2:77:ec:54:86:83:65:0e:30:
0d:b5:1f:55:86:0a:06:27:2c:65:b9:2a:60:ff:1e:
3c:bc:d4:fd:ba:42:c8:f9:06:13:6b:25:9f:af:a5:
8d:02:d6:a7:1c:ce:77:a1:a1:c3:0a:24:07:3b:89:
50:44:8c:7f:23:89:65:4a:e2:e0:87:5e:eb:0a:fa:
3d:cc:25:5c:ad:80:94:e9:93:bb:5e:59:b1:27:ff:
cf:e2:7b:14:ae:75:66:68:d9:f2:5f:f2:49:02:67:
ac:12:97:c3:fe:a9:99:6c:fe:11:f6:56:7f:2f:97:
07:12:10:4f:bc:2e:0f:f6:6a:1b:b8:63:05:e8:b3:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:1B:F7:1F:9C:54:E1:AD:6A:4D:85:86:FE:22:FE:DA:CD:E1:05
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.134.0-152.234.137.255
152.234.139.0-152.234.143.255
177.201.193.0/24
177.201.195.0-177.201.207.255
179.69.66.0-179.69.95.255
189.12.130.0/24
189.12.133.0-189.12.145.255
189.12.147.0-189.12.156.255
189.12.158.0/23
189.30.97.0-189.30.99.255
189.30.103.0-189.30.107.255
189.30.109.0-189.30.127.255
189.31.1.0-189.31.15.255
189.73.43.0-189.73.47.255
191.0.81.0-191.0.93.255
191.45.32.0-191.45.34.255
191.45.36.0/22
200.141.52.0/22
200.149.189.0-200.149.190.255
200.180.180.0/24
200.180.185.0-200.180.191.255
201.24.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:de:82:0f:60:52:db:1c:1a:df:fa:a7:30:e8:73:0d:a4:b2:
29:3b:b2:bf:91:7c:e3:a8:34:96:53:89:77:b0:d6:7e:33:6b:
f2:39:8b:76:5c:d6:04:97:90:41:1f:84:31:a2:c2:bf:e1:2f:
e4:7d:ff:07:30:0b:4b:ba:b8:de:05:49:82:2b:90:9a:d5:a3:
70:9d:fa:f6:d0:93:a8:f2:ea:b0:8f:18:1a:50:65:a0:9a:ff:
b8:37:5f:8e:27:97:6e:93:78:a9:19:75:30:76:e0:d3:78:a3:
4a:3a:d8:3d:43:1a:bf:81:03:05:9e:1a:9c:29:eb:c4:26:4c:
fc:2e:59:56:c0:ae:ed:f9:6c:76:8a:c5:43:ca:62:5e:3e:1b:
1f:e9:71:ff:01:b3:d4:b7:57:60:75:ce:2a:80:32:ba:67:30:
a6:e9:06:bb:a1:5d:b0:b5:82:9c:4e:a1:f8:6e:a8:3e:49:4e:
d6:8a:1b:c3:66:f0:9d:3c:72:3c:6e:43:0a:c1:5f:5e:72:93:
38:81:ca:89:de:19:ac:5a:3b:12:89:4b:ff:c2:56:4c:a8:18:
f8:40:57:bf:07:f6:85:31:4c:f4:85:cd:7e:00:d5:51:25:cb:
dd:31:9c:f1:d7:59:24:8c:28:b8:ad:a6:5d:f1:f4:31:67:6d:
0b:fd:41:d1
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIUMAoLr9XcWntz+LhGy0WuexQj5X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjA5MjMwNzM5MzlaFw0yNzA5MjIwNzQ0MzlaMDMxMTAvBgNV
BAMTKEY2MUUxQkY3MUY5QzU0RTFBRDZBNEQ4NTg2RkUyMkZFREFDREUxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBqJRaY80xgyOp7DemPX79Qs9
1GJ24VrHSxfxB8imtGbyfehNNnzSTxV0JedcpZeVdPetKgQxb2YwSz8lwLq0l0+0
ZVWqBiOW3aEiICM6MswxDo78gk0Z43vxe+KXLemz3dJRvdAXhQWzcYgXHTnMDyZA
rtc0pk4mvr1rvKJ37FSGg2UOMA21H1WGCgYnLGW5KmD/Hjy81P26Qsj5BhNrJZ+v
pY0C1qccznehocMKJAc7iVBEjH8jiWVK4uCHXusK+j3MJVytgJTpk7teWbEn/8/i
exSudWZo2fJf8kkCZ6wSl8P+qZls/hH2Vn8vlwcSEE+8Lg/2ahu4YwXos0ulAgMB
AAGjggNBMIIDPTAdBgNVHQ4EFgQU9h4b9x+cVOGtak2Fhv4i/trN4QUwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG
XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj
ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM4MzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEcBggrBgEFBQcBBwEB/wSCAQswggEH
MIIBAwQCAAEwgfwwDAMEAZjqhgMEAZjqiDAMAwQAmOqLAwQEmOqAAwQAscnBMAwD
BACxycMDBASxycAwDAMEAbNFQgMEBbNFQAMEAL0MgjAMAwQAvQyFAwQBvQyQMAwD
BAC9DJMDBAC9DJwDBAG9DJ4wDAMEAL0eYQMEAr0eYDAMAwQAvR5nAwQCvR5oMAwD
BAC9Hm0DBAe9HgAwDAMEAL0fAQMEBL0fADAMAwQAvUkrAwQEvUkgMAwDBAC/AFED
BAG/AFwwDAMEBb8tIAMEAL8tIgMEAr8tJAMEAsiNNDAMAwQAyJW9AwQAyJW+AwQA
yLS0MAwDBADItLkDBAbItIADBADJGOswDQYJKoZIhvcNAQELBQADggEBAFregg9g
UtscGt/6pzDocw2ksik7sr+RfOOoNJZTiXew1n4za/I5i3Zc1gSXkEEfhDGiwr/h
L+R9/wcwC0u6uN4FSYIrkJrVo3Cd+vbQk6jy6rCPGBpQZaCa/7g3X44nl26TeKkZ
dTB24NN4o0o62D1DGr+BAwWeGpwp68QmTPwuWVbAru35bHaKxUPKYl4+Gx/pcf8B
s9S3V2B1ziqAMrpnMKbpBruhXbC1gpxOofhuqD5JTtaKG8Nm8J08cjxuQwrBX15y
kziByoneGaxaOxKJS//CVkyoGPhAV78H9oUxTPSFzX4A1VEly90xnPHXWSSMKLit
pl3x9DFnbQv9QdE=
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:47 2026 by rpki-client