Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: bfhV6Yfi5RlzaXKX/DXMbg+TKMkggLg9OaPNpb7qNqA=
Subject key identifier: 7E:4D:34:EA:7B:BD:E0:F0:CC:59:79:A7:21:AA:23:0E:7B:FD:51:92
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 02E22FC7FCF9CE148FE039960B1795FCCD9B4517
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Wed 11 Nov 2026 00:02:15 +0000
ROA not before: Tue 10 Nov 2026 23:57:15 +0000
ROA not after: Wed 10 Nov 2027 00:02:15 +0000
asID: 834
IP address blocks: 141.11.47.0/24 maxlen: 24
141.11.92.0/24 maxlen: 24
141.11.94.0/24 maxlen: 24
141.11.158.0/24 maxlen: 24
141.11.184.0/24 maxlen: 24
141.11.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 00:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e2:2f:c7:fc:f9:ce:14:8f:e0:39:96:0b:17:95:fc:cd:9b:45:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 10 23:57:15 2026 GMT
Not After : Nov 10 00:02:15 2027 GMT
Subject: CN=7E4D34EA7BBDE0F0CC5979A721AA230E7BFD5192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:24:d2:cb:b1:42:6e:a5:ad:f9:0f:f3:66:
8c:7e:c9:d7:86:7c:03:c3:a8:18:9a:80:69:28:fe:
04:5e:d2:30:35:7f:02:26:6e:70:ca:93:a6:e2:a3:
01:d8:37:fd:b8:b1:2d:ad:25:90:6f:54:f1:72:d8:
95:37:2c:75:64:36:53:c4:b9:81:80:f4:f9:f5:0a:
2b:ac:10:24:05:fb:a5:dd:dd:08:0c:ab:49:b9:3e:
cd:d0:f0:12:0a:e7:5a:b5:39:97:4f:35:ca:6f:92:
b3:f1:54:c9:13:49:f0:ca:c2:6e:c0:f6:ee:bb:cd:
25:16:cb:6a:f3:84:72:76:d8:91:dc:85:d1:31:6e:
2c:70:a3:53:6a:56:c7:5e:12:b1:eb:d2:ee:3e:82:
cc:5a:1d:28:5e:1b:95:41:cf:22:dc:5e:a9:31:26:
3f:31:7b:dc:ba:6f:e1:43:a4:97:4d:55:f4:32:63:
f8:6c:88:a2:2f:4f:a9:a5:98:da:7c:c8:2c:a5:90:
bf:6c:3f:86:0d:c0:53:a0:3f:37:59:79:66:51:81:
58:2c:ce:74:46:89:b2:da:43:1d:64:9b:14:88:71:
76:70:fb:ba:b5:41:c7:89:46:5c:2a:3b:a4:22:a4:
72:82:00:ed:66:73:0e:6e:cb:9a:e4:5b:19:0e:83:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:34:EA:7B:BD:E0:F0:CC:59:79:A7:21:AA:23:0E:7B:FD:51:92
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.47.0/24
141.11.92.0/24
141.11.94.0/24
141.11.158.0/24
141.11.184.0/24
141.11.200.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:a5:ba:d3:90:36:5b:62:75:92:ce:d6:99:58:a8:6d:ea:07:
67:aa:69:03:79:fa:87:28:83:f7:9d:42:4e:2d:0d:de:5a:17:
87:77:60:d8:2e:af:16:63:4a:04:8c:29:ae:c9:81:75:51:f8:
66:1a:8b:5a:8b:de:22:03:bb:12:48:9a:bf:48:7f:8a:66:1b:
2d:03:11:7f:6b:91:ca:ad:db:9d:5a:02:e7:51:f2:b1:2d:2e:
87:58:6c:10:db:38:b8:35:58:e8:98:7b:4c:44:c8:c4:36:90:
e8:ac:67:d1:ce:44:4d:19:0c:e1:eb:4d:f0:84:06:19:cf:61:
47:cf:d8:c0:32:1a:d1:94:c8:f4:1a:3f:5a:39:fc:fa:27:c7:
39:7c:46:df:30:ac:97:a0:20:3f:26:b6:30:40:e3:87:08:cf:
ad:3f:9c:76:6b:bf:dd:28:38:95:ee:44:ad:52:d1:5a:40:37:
18:f2:87:66:8e:a4:c0:70:8a:13:73:4d:22:fc:ee:ef:22:da:
ef:1b:c1:52:e0:ba:55:ea:fb:91:7c:d1:1f:19:9f:51:7f:4f:
72:42:cd:75:4e:26:39:fc:51:e9:1b:77:81:96:11:4e:98:58:
44:ed:88:e9:19:e0:85:69:05:b3:1d:22:0e:51:e5:f9:92:b7:
54:f3:4e:1d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIUAuIvx/z5zhSP4DmWCxeV/M2bRRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjExMTAyMzU3MTVaFw0yNzExMTAwMDAyMTVaMDMxMTAvBgNV
BAMTKDdFNEQzNEVBN0JCREUwRjBDQzU5NzlBNzIxQUEyMzBFN0JGRDUxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53yTSy7FCbqWt+Q/zZox+ydeG
fAPDqBiagGko/gRe0jA1fwImbnDKk6biowHYN/24sS2tJZBvVPFy2JU3LHVkNlPE
uYGA9Pn1CiusECQF+6Xd3QgMq0m5Ps3Q8BIK51q1OZdPNcpvkrPxVMkTSfDKwm7A
9u67zSUWy2rzhHJ22JHchdExbixwo1NqVsdeErHr0u4+gsxaHSheG5VBzyLcXqkx
Jj8xe9y6b+FDpJdNVfQyY/hsiKIvT6mlmNp8yCylkL9sP4YNwFOgPzdZeWZRgVgs
znRGibLaQx1kmxSIcXZw+7q1QceJRlwqO6QipHKCAO1mcw5uy5rkWxkOg6jxAgMB
AAGjggIlMIICITAdBgNVHQ4EFgQUfk006nu94PDMWXmnIaojDnv9UZIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjQsvAwQA
jQtcAwQAjQteAwQAjQueAwQAjQu4AwQBjQvIMA0GCSqGSIb3DQEBCwUAA4IBAQBb
pbrTkDZbYnWSztaZWKht6gdnqmkDefqHKIP3nUJOLQ3eWheHd2DYLq8WY0oEjCmu
yYF1UfhmGotai94iA7sSSJq/SH+KZhstAxF/a5HKrdudWgLnUfKxLS6HWGwQ2zi4
NVjomHtMRMjENpDorGfRzkRNGQzh603whAYZz2FHz9jAMhrRlMj0Gj9aOfz6J8c5
fEbfMKyXoCA/JrYwQOOHCM+tP5x2a7/dKDiV7kStUtFaQDcY8odmjqTAcIoTc00i
/O7vItrvG8FS4LpV6vuRfNEfGZ9Rf09yQs11TiY5/FHpG3eBlhFOmFhE7YjpGeCF
aQWzHSIOUeX5krdU804d
-----END CERTIFICATE-----
Generated at Wed Nov 11 18:19:43 2026 by rpki-client