Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 3qLD2mY97TB2fT/89VBwVu/14KMUCMu9EeYX+JGlLl4=
Subject key identifier: D9:82:FF:35:B2:F6:66:A7:55:B4:BA:F3:3D:C3:14:9D:79:4F:BF:C1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1201D43DE97311A50060E9BCED986755C559689F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Mon 21 Sep 2026 07:44:40 +0000
ROA not before: Mon 21 Sep 2026 07:39:40 +0000
ROA not after: Mon 20 Sep 2027 07:44:40 +0000
asID: 834
IP address blocks: 90.96.4.0/22 maxlen: 24
90.96.12.0/22 maxlen: 24
90.96.20.0/22 maxlen: 24
90.96.28.0/22 maxlen: 24
90.96.36.0/22 maxlen: 24
90.96.44.0/22 maxlen: 24
90.96.48.0/22 maxlen: 24
90.96.56.0/22 maxlen: 24
90.96.64.0/18 maxlen: 24
90.96.132.0/22 maxlen: 24
90.96.140.0/22 maxlen: 24
90.96.148.0/22 maxlen: 24
90.96.156.0/22 maxlen: 24
90.96.164.0/22 maxlen: 24
90.96.172.0/22 maxlen: 24
90.96.176.0/20 maxlen: 24
90.96.192.0/19 maxlen: 24
90.96.224.0/21 maxlen: 24
90.96.232.0/22 maxlen: 24
90.96.240.0/22 maxlen: 24
90.96.248.0/21 maxlen: 24
143.20.79.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.179.0/24 maxlen: 24
143.20.206.0/24 maxlen: 24
143.20.220.0/23 maxlen: 24
143.20.222.0/24 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:01:d4:3d:e9:73:11:a5:00:60:e9:bc:ed:98:67:55:c5:59:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 21 07:39:40 2026 GMT
Not After : Sep 20 07:44:40 2027 GMT
Subject: CN=D982FF35B2F666A755B4BAF33DC3149D794FBFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:8f:0f:f6:a1:94:2a:11:0c:4e:9c:50:5e:
81:72:cb:b0:90:43:11:16:87:c9:cf:4b:be:1c:f0:
35:70:b4:d7:83:ff:8b:80:22:0d:b0:9b:6e:32:c8:
4e:22:56:db:ae:40:fc:a5:cf:58:9e:6e:d4:c4:2f:
51:93:8d:f6:62:50:28:4c:dd:1d:e5:f4:d7:6f:ee:
cf:73:fd:e5:81:58:b5:f8:b0:cf:2c:78:e5:44:79:
20:18:ec:b2:6d:7b:9b:fa:40:4a:b7:4a:83:f7:14:
c8:00:03:8d:fe:89:4e:78:ef:94:c2:c7:78:c1:7f:
d2:57:12:71:cb:3e:7f:4c:aa:c2:ec:7f:b5:25:17:
de:e9:45:78:9c:24:07:00:00:50:9f:cc:2d:2b:34:
10:5e:18:01:f9:ce:6e:e7:64:fe:74:f7:a4:67:57:
ab:9c:54:52:27:6f:b2:4e:a2:48:2d:81:e6:c3:17:
f2:c2:c8:f4:9b:2b:60:61:51:44:f4:ad:0f:4f:98:
5a:42:da:2f:3a:c6:14:a8:99:3b:c5:f0:18:8b:39:
e9:fd:4e:86:66:26:a3:7b:38:2d:ff:bd:3b:b5:f9:
84:bf:dd:a6:3d:77:5b:45:d9:7c:db:4f:91:a3:55:
34:f4:21:4e:f3:44:dc:4c:8e:ce:0b:fc:29:71:6c:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:FF:35:B2:F6:66:A7:55:B4:BA:F3:3D:C3:14:9D:79:4F:BF:C1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.4.0/22
90.96.12.0/22
90.96.20.0/22
90.96.28.0/22
90.96.36.0/22
90.96.44.0-90.96.51.255
90.96.56.0/22
90.96.64.0/18
90.96.132.0/22
90.96.140.0/22
90.96.148.0/22
90.96.156.0/22
90.96.164.0/22
90.96.172.0-90.96.235.255
90.96.240.0/22
90.96.248.0/21
143.20.79.0/24
143.20.162.0/24
143.20.179.0/24
143.20.206.0/24
143.20.220.0-143.20.222.255
143.20.228.0/24
143.20.232.0/22
143.20.240.0/22
143.20.249.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:b8:21:62:45:b9:9c:01:29:75:77:88:b4:20:d9:8a:74:
81:44:4b:e0:00:b7:68:0d:90:2b:81:dd:20:17:f3:94:f5:8a:
80:cd:be:0a:4b:ca:36:e0:4b:67:a6:60:0d:1d:59:99:ff:ae:
9d:7f:76:9f:9e:0e:7b:0c:26:d9:f5:5c:93:9d:45:24:b8:9b:
89:dc:87:ce:08:c8:18:2b:f7:bf:78:0f:39:ed:2c:33:c8:65:
67:02:c4:ee:62:46:49:c0:03:92:8f:72:9c:1f:70:9b:eb:2a:
5b:37:b1:6e:0d:69:d9:97:b6:47:12:ab:fb:14:1b:7a:8b:f3:
fd:3c:2b:0f:e2:73:ad:88:e0:34:5f:8c:66:fe:4e:7b:fd:ed:
4c:73:0d:05:01:e8:88:5b:ad:ae:30:78:a6:05:1d:8a:2d:0c:
84:cc:46:f8:e1:32:9d:cf:d2:eb:1c:42:c7:c3:fa:c5:d9:87:
d1:c5:56:b2:2a:56:9f:23:8d:5f:f0:da:81:3b:1e:43:4b:d3:
c3:7c:68:4b:0c:cf:8c:bb:60:5a:2a:2b:8e:1b:5f:6e:26:b4:
79:d2:30:60:26:93:26:16:dd:db:18:86:b7:ad:ac:eb:c1:e4:
40:78:14:b5:1f:41:14:de:cb:06:af:5b:31:70:a5:9b:4c:11:
b6:8c:16:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:20:34 2026 by rpki-client