Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: EHv+rr1uxKzk4/Igmi6wL9PvisHS9hbdMRIGF8wL6hg=
Subject key identifier: 93:E2:8D:8E:BD:DF:79:32:61:78:07:51:B2:60:88:01:CA:35:82:81
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 63E4AAD6FCE79BD8AA7EBE324B3129558E77A14A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Wed 22 Jul 2026 00:01:20 +0000
ROA not before: Tue 21 Jul 2026 23:56:20 +0000
ROA not after: Wed 21 Jul 2027 00:01:20 +0000
asID: 834
IP address blocks: 143.20.7.0/24 maxlen: 24
143.20.8.0/23 maxlen: 24
143.20.11.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
143.20.16.0/24 maxlen: 24
143.20.18.0/24 maxlen: 24
143.20.22.0/24 maxlen: 24
143.20.28.0/24 maxlen: 24
143.20.32.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
143.20.36.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.42.0/23 maxlen: 24
143.20.45.0/24 maxlen: 24
143.20.47.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.50.0/24 maxlen: 24
143.20.53.0/24 maxlen: 24
143.20.56.0/23 maxlen: 24
143.20.59.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.70.0/23 maxlen: 24
143.20.72.0/23 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.80.0/24 maxlen: 24
143.20.86.0/23 maxlen: 24
143.20.103.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.106.0/23 maxlen: 24
143.20.109.0/24 maxlen: 24
143.20.110.0/23 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.120.0/24 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.132.0/24 maxlen: 24
143.20.136.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.140.0/23 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.147.0/24 maxlen: 24
143.20.151.0/24 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.173.0/24 maxlen: 24
143.20.175.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.188.0/22 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.194.0/24 maxlen: 24
143.20.200.0/22 maxlen: 24
143.20.206.0/23 maxlen: 24
143.20.213.0/24 maxlen: 24
143.20.214.0/24 maxlen: 24
143.20.216.0/23 maxlen: 24
143.20.218.0/24 maxlen: 24
143.20.220.0/22 maxlen: 24
143.20.226.0/23 maxlen: 24
143.20.228.0/23 maxlen: 24
143.20.231.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.236.0/23 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.247.0/24 maxlen: 24
143.20.248.0/22 maxlen: 24
143.20.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e4:aa:d6:fc:e7:9b:d8:aa:7e:be:32:4b:31:29:55:8e:77:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 21 23:56:20 2026 GMT
Not After : Jul 21 00:01:20 2027 GMT
Subject: CN=93E28D8EBDDF793261780751B2608801CA358281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:9e:ff:cb:dd:56:ce:92:ed:c2:d6:a1:12:
26:14:93:ab:29:8a:be:a4:de:f5:a4:bb:a2:5e:ee:
ad:9c:97:e1:56:52:34:1b:2f:19:5d:db:4b:f4:64:
24:8a:46:4f:b8:5b:70:63:5d:87:17:8a:ef:50:64:
0d:11:3c:64:30:3d:b7:41:91:56:da:a8:7c:27:bc:
af:4b:19:0d:de:f6:8b:9b:e8:13:f5:c7:2f:09:29:
2e:7c:b5:b4:cd:c0:80:37:88:81:b0:01:92:ed:6b:
4a:9f:66:37:46:f3:de:7e:5f:22:e0:cd:04:c0:ee:
32:45:14:d1:7f:8a:33:61:f4:4a:73:23:87:41:1c:
8a:0f:11:13:04:f5:fa:47:3e:6a:41:e3:f9:ce:c2:
07:13:b2:c1:39:1f:70:5f:7d:25:88:2e:00:05:06:
30:ab:b5:20:18:ed:af:71:2c:27:98:9c:5a:f4:03:
6c:56:ab:eb:84:8a:4a:87:97:77:13:3e:bf:93:ac:
4a:76:c1:08:98:97:ea:ad:ce:b8:50:ca:cc:99:c9:
4b:c3:7e:06:78:9c:4e:cb:fb:db:1c:b4:eb:94:da:
20:20:11:8d:8d:2d:19:3b:2a:bd:f6:53:fb:27:31:
4d:a2:4b:68:03:79:b9:f1:63:40:98:0e:1a:ad:32:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:8D:8E:BD:DF:79:32:61:78:07:51:B2:60:88:01:CA:35:82:81
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.7.0-143.20.9.255
143.20.11.0/24
143.20.13.0-143.20.14.255
143.20.16.0/24
143.20.18.0/24
143.20.22.0/24
143.20.28.0/24
143.20.32.0/24
143.20.35.0-143.20.36.255
143.20.39.0/24
143.20.42.0/23
143.20.45.0/24
143.20.47.0-143.20.48.255
143.20.50.0/24
143.20.53.0/24
143.20.56.0/23
143.20.59.0/24
143.20.63.0/24
143.20.65.0/24
143.20.70.0-143.20.74.255
143.20.77.0/24
143.20.80.0/24
143.20.86.0/23
143.20.103.0/24
143.20.105.0-143.20.107.255
143.20.109.0-143.20.111.255
143.20.113.0/24
143.20.116.0-143.20.118.255
143.20.120.0/24
143.20.128.0/24
143.20.131.0-143.20.132.255
143.20.136.0/24
143.20.139.0-143.20.141.255
143.20.145.0/24
143.20.147.0/24
143.20.151.0-143.20.152.255
143.20.157.0/24
143.20.162.0/24
143.20.167.0-143.20.168.255
143.20.173.0/24
143.20.175.0-143.20.176.255
143.20.178.0/23
143.20.188.0-143.20.192.255
143.20.194.0/24
143.20.200.0/22
143.20.206.0/23
143.20.213.0-143.20.214.255
143.20.216.0-143.20.218.255
143.20.220.0/22
143.20.226.0-143.20.229.255
143.20.231.0-143.20.237.255
143.20.239.0-143.20.243.255
143.20.247.0-143.20.251.255
143.20.254.0/23
Signature Algorithm: sha256WithRSAEncryption
76:da:c7:f8:39:b2:7c:eb:c4:bd:15:43:06:f1:b6:41:5d:0d:
20:bf:29:cb:00:3f:50:bb:11:94:98:be:4f:ec:8f:bb:10:52:
38:48:63:a4:1f:93:8f:6e:9d:56:ec:1e:d9:c7:ea:67:2e:56:
db:63:0e:97:2c:dd:d9:4f:53:90:59:84:54:60:66:55:01:59:
68:e3:34:49:90:e1:a3:4a:35:9e:77:8b:66:a3:f1:e9:4f:a2:
3e:16:7f:99:88:81:30:af:f9:c4:50:02:8a:2b:b3:d8:f5:56:
ca:89:ae:85:f5:6e:58:40:15:58:79:19:df:fd:dc:fb:23:bf:
b2:1c:90:b7:d1:e8:8e:03:7e:9d:87:f1:b0:25:21:71:f9:de:
27:31:4d:5e:29:76:e4:fe:10:af:0f:b0:33:5d:4d:2a:0b:3a:
1c:54:b9:ed:44:3d:d2:13:29:9e:7f:4f:49:c0:19:fb:69:9f:
7b:47:aa:a9:0e:a9:53:6a:20:c6:48:b5:63:9a:b1:19:2d:a1:
d8:1a:e5:ea:b1:5a:8e:b2:c6:af:40:44:23:68:e7:3b:a4:90:
a3:05:8b:a4:86:07:97:b9:7c:46:45:22:9a:22:a6:18:c8:5e:
f9:eb:08:f6:c3:87:17:d3:6d:41:de:c0:b2:37:00:89:37:50:
76:b2:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:28:40 2026 by rpki-client