Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: qWqXlvShGPjz4vgArDlz3gZnOcZUQ100uLZdUfLkD6k=
Subject key identifier: 33:08:30:E0:8C:AC:8C:60:CA:45:EF:2F:A3:21:DB:89:D4:CF:4C:C5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6CA176FBBA06C20FBAB477E1C0079E1618C1AD7B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Wed 23 Sep 2026 06:16:31 +0000
ROA not before: Wed 23 Sep 2026 06:11:31 +0000
ROA not after: Wed 22 Sep 2027 06:16:31 +0000
asID: 834
IP address blocks: 141.11.142.0/23 maxlen: 24
141.11.144.0/24 maxlen: 24
141.11.157.0/24 maxlen: 24
141.11.158.0/23 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.181.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a1:76:fb:ba:06:c2:0f:ba:b4:77:e1:c0:07:9e:16:18:c1:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 23 06:11:31 2026 GMT
Not After : Sep 22 06:16:31 2027 GMT
Subject: CN=330830E08CAC8C60CA45EF2FA321DB89D4CF4CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:26:62:b9:12:63:2c:a6:7c:89:14:ac:34:
d6:60:5d:59:ab:21:d4:44:41:82:58:1e:c1:c6:dc:
e0:7f:fe:06:83:28:67:54:04:e7:19:43:16:f8:0b:
d4:d2:3f:06:6d:90:84:8a:dd:59:2f:cf:b8:66:9e:
0e:f7:7d:cb:6d:69:74:41:26:c8:10:50:87:8b:b9:
0f:48:b3:b7:6b:61:3d:94:de:d8:66:4f:e3:e7:27:
05:cd:12:82:0d:e0:4d:03:9f:85:7d:be:d0:ff:4a:
7a:ee:99:bc:7c:e5:be:c1:49:40:56:98:64:30:fc:
d6:36:b1:41:7b:95:22:d3:eb:ab:23:ea:e0:dd:08:
44:7f:b2:cb:7d:02:20:8c:9b:4e:2b:92:5e:1e:c5:
fa:14:59:27:4c:ea:6e:94:a2:4e:e9:0a:0d:6e:27:
21:d8:da:5d:b4:f0:a2:2c:2f:81:e2:f0:fc:0a:c6:
c7:33:98:db:87:fc:67:c9:93:42:11:4a:ad:5c:98:
56:2f:3e:7e:f0:68:65:b4:34:8b:51:fa:6e:42:68:
43:ee:5c:f8:fc:f3:15:74:62:ce:34:bf:40:65:e5:
f4:f3:9c:4c:21:20:22:6c:78:70:d2:b8:18:83:53:
40:4f:7d:f5:56:af:b9:66:fd:a6:a6:2b:0c:5b:4b:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:30:E0:8C:AC:8C:60:CA:45:EF:2F:A3:21:DB:89:D4:CF:4C:C5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.142.0-141.11.144.255
141.11.157.0-141.11.159.255
141.11.175.0/24
141.11.181.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:d5:0f:81:5f:fc:1e:b5:20:a0:c6:5b:fe:a1:e8:6c:f6:
05:e6:86:45:87:50:f2:e1:c0:d3:3f:d7:71:23:ed:02:8c:1c:
27:4f:d8:fd:65:ad:c7:13:e7:c7:23:b9:23:99:77:d8:d5:c6:
06:e6:49:a6:23:57:3b:31:aa:65:12:8a:0d:31:cf:ac:38:a3:
fc:2e:01:c4:86:d2:81:41:dd:a3:e7:d2:fd:59:dd:2e:06:07:
4d:f4:60:e7:7c:03:cb:4a:8d:0f:9e:3e:89:f9:de:55:fa:8c:
85:2c:c7:51:12:e5:1e:9c:7b:b0:08:7d:e0:43:3e:4a:09:3a:
05:c4:23:d5:64:ec:e9:db:47:51:c6:e3:dd:15:aa:d6:f0:da:
79:1e:0e:17:78:ab:ad:ab:6a:bb:63:ed:20:41:67:c7:81:8d:
a8:c2:3e:f0:16:c5:9e:a4:ca:9c:fc:bc:b3:a1:46:d8:3a:eb:
cc:3c:e4:9c:5d:d6:ba:a7:76:94:21:87:bc:5b:74:74:c1:d8:
3d:2f:7e:a1:05:96:19:21:fe:43:7b:15:78:87:67:d8:38:7c:
1f:4d:21:d0:a8:4c:c2:66:4a:ae:9a:14:aa:cf:49:36:b5:78:
3d:06:e9:e0:eb:d4:e1:b1:8b:45:61:c6:09:72:4f:eb:3a:25:
53:d7:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:00:24 2026 by rpki-client