Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: yhTndh6e0h/Wg3Jv0K7AxDZKMIgRSxrYbzHrqz4MXl8=
Subject key identifier: 5A:37:71:2F:AE:7C:69:B2:F4:F8:06:3D:48:BC:3B:E8:83:7C:8A:90
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 328C89779505D89E30E51C4F6124F80552B6B769
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Wed 11 Nov 2026 00:08:29 +0000
ROA not before: Wed 11 Nov 2026 00:03:29 +0000
ROA not after: Wed 10 Nov 2027 00:08:29 +0000
asID: 834
IP address blocks: 90.96.110.0/23 maxlen: 24
90.96.114.0/23 maxlen: 24
90.96.116.0/23 maxlen: 24
90.96.123.0/24 maxlen: 24
90.96.127.0/24 maxlen: 24
90.96.196.0/22 maxlen: 24
90.96.200.0/21 maxlen: 24
90.96.208.0/20 maxlen: 24
90.96.224.0/21 maxlen: 24
90.96.232.0/22 maxlen: 24
90.96.248.0/21 maxlen: 24
143.20.6.0/23 maxlen: 24
143.20.11.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.18.0/24 maxlen: 24
143.20.22.0/24 maxlen: 24
143.20.28.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.53.0/24 maxlen: 24
143.20.57.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.72.0/23 maxlen: 24
143.20.75.0/24 maxlen: 24
143.20.78.0/24 maxlen: 24
143.20.86.0/23 maxlen: 24
143.20.102.0/23 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.108.0/22 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.120.0/23 maxlen: 24
143.20.124.0/23 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.136.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.141.0/24 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.146.0/23 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.188.0/23 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.196.0/23 maxlen: 24
143.20.200.0/22 maxlen: 24
143.20.206.0/23 maxlen: 24
143.20.214.0/24 maxlen: 24
143.20.217.0/24 maxlen: 24
143.20.218.0/24 maxlen: 24
143.20.221.0/24 maxlen: 24
143.20.222.0/24 maxlen: 24
143.20.226.0/24 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.231.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.236.0/23 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.247.0/24 maxlen: 24
143.20.249.0/24 maxlen: 24
143.20.250.0/24 maxlen: 24
143.20.252.0/24 maxlen: 24
143.20.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 09:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8c:89:77:95:05:d8:9e:30:e5:1c:4f:61:24:f8:05:52:b6:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 11 00:03:29 2026 GMT
Not After : Nov 10 00:08:29 2027 GMT
Subject: CN=5A37712FAE7C69B2F4F8063D48BC3BE8837C8A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:ae:ca:4a:53:4c:20:02:56:30:9a:47:e2:
ca:73:56:7d:c0:b2:c6:15:d1:e2:22:33:ba:91:76:
4b:07:ba:c6:9e:ac:01:06:8a:e1:e8:15:ec:5c:39:
75:5f:e1:5b:65:a3:06:e1:f1:1b:eb:fd:24:50:fa:
df:ba:75:08:24:ed:fd:e6:bf:1a:05:cb:56:b3:e6:
54:b5:15:73:ad:35:d0:8e:e4:ec:fb:cd:63:ad:d4:
e8:c5:86:b1:55:4f:a6:e9:a7:b3:48:d8:33:2e:e1:
cd:b2:5b:fa:55:12:c3:37:5d:9e:45:c8:f5:c8:4b:
33:3f:ed:16:89:65:3a:62:d2:4d:e3:e5:a8:aa:89:
eb:26:c7:f5:aa:a2:f9:79:80:d7:c5:81:f9:4c:c7:
fb:23:50:1e:cf:b5:b6:55:27:75:39:1d:9c:9e:b5:
04:7f:1b:af:41:46:fd:2f:8f:4c:35:92:59:f9:70:
36:a3:4e:81:db:7c:ff:a3:07:07:df:06:43:3d:b3:
bb:b6:57:0f:70:93:4b:3b:f2:3f:ac:02:48:cf:ae:
e4:e7:76:b3:96:92:c4:83:28:bc:c4:3b:94:36:07:
0d:5b:20:14:70:3b:72:13:b8:fe:b2:6c:e6:57:c0:
1b:bc:20:35:80:d0:fa:fa:b3:c0:31:dc:c0:3b:34:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:71:2F:AE:7C:69:B2:F4:F8:06:3D:48:BC:3B:E8:83:7C:8A:90
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.110.0/23
90.96.114.0-90.96.117.255
90.96.123.0/24
90.96.127.0/24
90.96.196.0-90.96.235.255
90.96.248.0/21
143.20.6.0/23
143.20.11.0/24
143.20.13.0/24
143.20.18.0/24
143.20.22.0/24
143.20.28.0/24
143.20.39.0/24
143.20.48.0/24
143.20.53.0/24
143.20.57.0/24
143.20.63.0/24
143.20.72.0/23
143.20.75.0/24
143.20.78.0/24
143.20.86.0/23
143.20.102.0/23
143.20.105.0/24
143.20.108.0/22
143.20.113.0/24
143.20.116.0/23
143.20.120.0/23
143.20.124.0/23
143.20.128.0/24
143.20.131.0/24
143.20.136.0/24
143.20.139.0/24
143.20.141.0/24
143.20.145.0-143.20.147.255
143.20.152.0/24
143.20.157.0/24
143.20.162.0/24
143.20.167.0-143.20.168.255
143.20.176.0/24
143.20.178.0/23
143.20.188.0-143.20.190.255
143.20.192.0/24
143.20.196.0/23
143.20.200.0/22
143.20.206.0/23
143.20.214.0/24
143.20.217.0-143.20.218.255
143.20.221.0-143.20.222.255
143.20.226.0/24
143.20.228.0/24
143.20.231.0-143.20.237.255
143.20.239.0-143.20.243.255
143.20.247.0/24
143.20.249.0-143.20.250.255
143.20.252.0/24
143.20.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:df:9f:a3:ff:a5:b6:85:61:31:0e:4c:0d:15:37:93:83:ce:
70:5a:f1:fe:90:87:e5:f6:8a:ce:dc:f4:7e:4e:92:0f:a9:b5:
11:53:e5:37:37:39:ab:0f:84:ec:81:df:54:a3:0e:e5:bf:0d:
06:1a:cb:e6:ff:35:e5:6a:df:75:75:91:8a:09:4f:e5:b3:7f:
36:9a:cd:8a:fd:b8:29:76:a4:03:c7:42:45:5c:09:87:41:78:
17:ba:02:c1:9c:f2:6f:3e:4d:c2:7a:4e:12:ca:2e:40:b1:0c:
61:b7:5d:96:b9:6e:d4:85:3f:9d:94:7b:20:8b:c4:12:90:b7:
25:a2:df:cd:60:26:5e:84:6a:cc:99:27:8e:0c:6a:5e:a7:64:
82:8b:0b:36:71:79:b4:0d:19:39:6b:97:9d:fc:61:1f:5d:4b:
86:1c:b9:6e:76:0f:1f:07:b0:d1:99:1c:f3:99:98:0b:83:16:
fe:41:94:ba:fe:ac:ef:e3:81:c4:96:ad:dc:6e:0c:01:6f:17:
cf:4d:b3:fc:9a:86:80:67:ec:89:a1:63:79:0d:3e:e8:a2:ae:
df:11:9f:58:9f:7c:d5:9d:97:6a:46:18:1d:8d:22:fe:d0:bf:
47:b6:bd:f1:0b:e8:bf:30:68:83:63:45:a8:4f:95:8e:4c:37:
f1:97:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:57:25 2026 by rpki-client