Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: g3XM93Crcdga+fzEKUZKDwYtTrTm6Tlyzx99uia7IgA=
Subject key identifier: 7A:34:D7:08:16:B2:A3:C6:CB:3B:33:EA:32:DD:05:46:88:EC:3B:74
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 3D08997280A23A1E12D926B3870A79DB0D4405CE
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
Signing time: Thu 05 Nov 2026 10:47:19 +0000
ROA not before: Thu 05 Nov 2026 10:42:19 +0000
ROA not after: Thu 04 Nov 2027 10:47:19 +0000
asID: 834
IP address blocks: 152.237.225.0/24 maxlen: 24
152.237.233.0/24 maxlen: 24
152.237.234.0/23 maxlen: 24
152.237.236.0/24 maxlen: 24
152.237.238.0/24 maxlen: 24
152.237.240.0/24 maxlen: 24
152.237.245.0/24 maxlen: 24
152.237.250.0/23 maxlen: 24
152.237.252.0/23 maxlen: 24
152.237.255.0/24 maxlen: 24
177.177.235.0/24 maxlen: 24
177.177.239.0/24 maxlen: 24
177.177.240.0/24 maxlen: 24
177.177.242.0/23 maxlen: 24
177.177.245.0/24 maxlen: 24
177.177.247.0/24 maxlen: 24
177.177.248.0/23 maxlen: 24
177.177.251.0/24 maxlen: 24
177.177.252.0/22 maxlen: 24
186.241.163.0/24 maxlen: 24
186.241.165.0/24 maxlen: 24
186.241.166.0/24 maxlen: 24
186.241.169.0/24 maxlen: 24
186.241.170.0/24 maxlen: 24
186.241.174.0/24 maxlen: 24
186.241.177.0/24 maxlen: 24
186.241.181.0/24 maxlen: 24
186.241.190.0/23 maxlen: 24
201.4.16.0/24 maxlen: 24
201.4.18.0/24 maxlen: 24
201.4.29.0/24 maxlen: 24
201.4.30.0/24 maxlen: 24
201.50.17.0/24 maxlen: 24
201.50.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:08:99:72:80:a2:3a:1e:12:d9:26:b3:87:0a:79:db:0d:44:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Nov 5 10:42:19 2026 GMT
Not After : Nov 4 10:47:19 2027 GMT
Subject: CN=7A34D70816B2A3C6CB3B33EA32DD054688EC3B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:88:d6:fa:c6:17:50:65:20:0c:59:8b:5f:
1c:ab:6b:61:1b:d5:29:82:aa:30:ed:57:2f:e5:d4:
c6:2e:6c:56:08:f2:57:0e:b1:0a:02:7d:4b:cd:4b:
6d:c1:2c:bd:af:be:97:b0:94:5d:de:7d:8d:2f:3c:
d6:7a:d9:29:85:62:76:2e:48:57:c0:69:28:53:92:
e2:03:6e:a5:2e:69:7d:45:6d:57:1c:6c:f8:8d:43:
fd:69:ef:e3:e4:fa:11:7d:e9:3a:bd:ad:e8:f5:cd:
60:31:aa:73:7f:e6:ed:17:b3:ee:14:38:84:8e:e5:
7d:e7:ca:24:34:28:77:9c:a5:d0:ac:73:1c:55:45:
f3:80:ef:2a:26:65:7d:24:50:d4:ea:50:aa:d4:25:
5b:e8:8c:43:01:79:01:55:6a:ca:68:45:c8:f7:b9:
f9:ce:e7:ae:82:10:76:9c:a4:7d:16:bc:b2:00:d8:
f7:0c:33:11:e1:4e:25:01:cc:91:e9:a8:2b:f9:ee:
5b:34:f8:5a:68:42:1d:71:7e:32:c6:7b:99:54:0a:
01:b4:4a:f7:b1:75:9b:f0:08:9f:1c:97:8a:0c:6b:
a8:4a:24:24:3a:a2:44:9e:1f:b6:82:3e:71:ae:fe:
01:4f:bc:ac:18:c7:5a:6a:e6:9f:90:50:85:ab:57:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:D7:08:16:B2:A3:C6:CB:3B:33:EA:32:DD:05:46:88:EC:3B:74
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.225.0/24
152.237.233.0-152.237.236.255
152.237.238.0/24
152.237.240.0/24
152.237.245.0/24
152.237.250.0-152.237.253.255
152.237.255.0/24
177.177.235.0/24
177.177.239.0-177.177.240.255
177.177.242.0/23
177.177.245.0/24
177.177.247.0-177.177.249.255
177.177.251.0-177.177.255.255
186.241.163.0/24
186.241.165.0-186.241.166.255
186.241.169.0-186.241.170.255
186.241.174.0/24
186.241.177.0/24
186.241.181.0/24
186.241.190.0/23
201.4.16.0/24
201.4.18.0/24
201.4.29.0-201.4.30.255
201.50.17.0/24
201.50.30.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:cc:84:fd:8c:22:fb:69:1d:62:8c:b6:ef:47:f8:54:8a:f3:
40:a8:4e:51:d4:97:53:3d:cd:c6:3a:c4:1d:b7:f6:87:2a:ac:
da:19:7e:73:19:5e:3d:0c:5a:8c:03:76:fc:95:07:8e:7d:4e:
8d:f2:b3:80:d2:bd:f2:c9:89:9b:0c:c6:8f:ab:39:77:cb:0a:
39:45:f7:ce:6f:85:74:f3:3f:27:1b:8a:71:c7:06:13:7f:ae:
8e:0b:60:dc:d5:57:fe:e3:72:22:20:41:fd:b9:74:e9:1f:24:
74:a6:fe:64:f4:25:b4:5d:53:39:6f:79:9e:26:d9:90:c2:63:
e5:6e:4f:0d:e3:4f:8c:a4:1e:3b:ea:a9:8b:2f:a7:ea:60:2d:
c3:4f:c7:69:75:2b:f1:9c:5c:92:47:22:18:8e:29:10:c6:6a:
f3:d9:16:b1:6d:47:d5:31:6e:f4:8c:7a:41:da:5d:1a:cc:bf:
0c:73:b2:4f:95:c2:50:50:d7:fe:da:10:e3:ac:de:51:5c:50:
96:e1:5e:6a:1a:26:f2:55:53:2b:69:d8:26:79:36:96:e2:c7:
9d:37:dc:57:cf:a6:d9:c9:a9:79:cd:71:ac:e4:ef:b8:a0:f1:
c0:71:5f:31:8c:a1:a9:7c:42:30:e2:a2:64:6c:e3:23:4f:9e:
95:1e:31:04
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIUPQiZcoCiOh4S2Sazhwp52w1EBc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz
MDBFODNDRjAeFw0yNjExMDUxMDQyMTlaFw0yNzExMDQxMDQ3MTlaMDMxMTAvBgNV
BAMTKDdBMzRENzA4MTZCMkEzQzZDQjNCMzNFQTMyREQwNTQ2ODhFQzNCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiojW+sYXUGUgDFmLXxyra2Eb
1SmCqjDtVy/l1MYubFYI8lcOsQoCfUvNS23BLL2vvpewlF3efY0vPNZ62SmFYnYu
SFfAaShTkuIDbqUuaX1FbVccbPiNQ/1p7+Pk+hF96Tq9rej1zWAxqnN/5u0Xs+4U
OISO5X3nyiQ0KHecpdCscxxVRfOA7yomZX0kUNTqUKrUJVvojEMBeQFVaspoRcj3
ufnO566CEHacpH0WvLIA2PcMMxHhTiUBzJHpqCv57ls0+FpoQh1xfjLGe5lUCgG0
SvexdZvwCJ8cl4oMa6hKJCQ6okSeH7aCPnGu/gFPvKwYx1pq5p+QUIWrV/eXAgMB
AAGjggMWMIIDEjAdBgNVHQ4EFgQUejTXCBayo8bLOzPqMt0FRojsO3QwHwYDVR0j
BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj
NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy
OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4
MTQ5MTZEQTMwMEU4M0NGLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG
XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy
Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM4MzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgfIGCCsGAQUFBwEHAQH/BIHiMIHfMIHc
BAIAATCB1QMEAJjt4TAMAwQAmO3pAwQAmO3sAwQAmO3uAwQAmO3wAwQAmO31MAwD
BAGY7foDBAGY7fwDBACY7f8DBACxseswDAMEALGx7wMEALGx8AMEAbGx8gMEALGx
9TAMAwQAsbH3AwQBsbH4MAsDBACxsfsDAwGxsAMEALrxozAMAwQAuvGlAwQAuvGm
MAwDBAC68akDBAC68aoDBAC68a4DBAC68bEDBAC68bUDBAG68b4DBADJBBADBADJ
BBIwDAMEAMkEHQMEAMkEHgMEAMkyEQMEAckyHjANBgkqhkiG9w0BAQsFAAOCAQEA
TMyE/Ywi+2kdYoy270f4VIrzQKhOUdSXUz3NxjrEHbf2hyqs2hl+cxlePQxajAN2
/JUHjn1OjfKzgNK98smJmwzGj6s5d8sKOUX3zm+FdPM/JxuKcccGE3+ujgtg3NVX
/uNyIiBB/bl06R8kdKb+ZPQltF1TOW95nibZkMJj5W5PDeNPjKQeO+qpiy+n6mAt
w0/HaXUr8ZxckkciGI4pEMZq89kWsW1H1TFu9Ix6QdpdGsy/DHOyT5XCUFDX/toQ
46zeUVxQluFeahom8lVTK2nYJnk2luLHnTfcV8+m2cmpec1xrOTvuKDxwHFfMYyh
qXxCMOKiZGzjI0+elR4xBA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:10:51 2026 by rpki-client