Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: IB6mZI/VkDAKGbGYC9X7H07zoaSIwaoVMCNzIkV837I=
Subject key identifier: EE:2C:2A:7B:2B:FD:08:98:60:0B:D3:B3:93:35:EE:69:89:6A:10:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10D5AC9A4A5527615AEEDE4D15BF1707D8AC50C0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Thu 05 Nov 2026 13:28:51 +0000
ROA not before: Thu 05 Nov 2026 13:23:51 +0000
ROA not after: Thu 04 Nov 2027 13:28:51 +0000
asID: 834
IP address blocks: 69.90.35.0/24 maxlen: 24
69.90.119.0/24 maxlen: 24
69.90.128.0/24 maxlen: 24
76.74.215.0/24 maxlen: 24
96.62.127.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.233.161.0/24 maxlen: 24
143.14.17.0/24 maxlen: 24
143.14.18.0/23 maxlen: 24
143.14.23.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.40.0/22 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.82.0/23 maxlen: 24
143.14.111.0/24 maxlen: 24
143.14.120.0/23 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.128.0/22 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.152.0/24 maxlen: 24
143.14.156.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
143.14.174.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/23 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.186.0/23 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.192.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.198.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.229.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.249.0/24 maxlen: 24
145.223.5.0/24 maxlen: 24
146.103.8.0/23 maxlen: 24
146.103.22.0/24 maxlen: 24
146.103.29.0/24 maxlen: 24
146.103.37.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
155.117.4.0/24 maxlen: 24
155.117.10.0/24 maxlen: 24
155.117.16.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.123.0/24 maxlen: 24
155.117.124.0/24 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.138.0/23 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.145.0/24 maxlen: 24
155.117.150.0/24 maxlen: 24
155.117.153.0/24 maxlen: 24
155.117.156.0/23 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.168.0/23 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.178.0/23 maxlen: 24
155.117.186.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.201.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.205.0/24 maxlen: 24
155.117.212.0/24 maxlen: 24
155.117.214.0/23 maxlen: 24
155.117.218.0/24 maxlen: 24
155.117.222.0/24 maxlen: 24
155.117.241.0/24 maxlen: 24
155.117.242.0/23 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.83.0/24 maxlen: 24
162.141.125.0/24 maxlen: 24
162.141.130.0/23 maxlen: 24
162.141.140.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
162.141.160.0/23 maxlen: 24
162.141.163.0/24 maxlen: 24
162.141.186.0/24 maxlen: 24
162.141.188.0/23 maxlen: 24
167.148.2.0/23 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
167.148.81.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
167.148.89.0/24 maxlen: 24
167.148.93.0/24 maxlen: 24
167.148.94.0/23 maxlen: 24
167.148.105.0/24 maxlen: 24
167.148.123.0/24 maxlen: 24
167.148.126.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
167.148.189.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
168.222.4.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.14.0/23 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.24.0/24 maxlen: 24
168.222.26.0/24 maxlen: 24
168.222.31.0/24 maxlen: 24
168.222.36.0/22 maxlen: 24
168.222.41.0/24 maxlen: 24
168.222.42.0/24 maxlen: 24
168.222.45.0/24 maxlen: 24
168.222.50.0/24 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
168.222.68.0/22 maxlen: 24
168.222.76.0/24 maxlen: 24
168.222.80.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
168.222.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:ac:9a:4a:55:27:61:5a:ee:de:4d:15:bf:17:07:d8:ac:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 5 13:23:51 2026 GMT
Not After : Nov 4 13:28:51 2027 GMT
Subject: CN=EE2C2A7B2BFD0898600BD3B39335EE69896A104B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:cc:f2:c7:bf:a4:8e:78:f6:3c:c0:0c:bf:
7d:68:a0:1f:d9:64:ca:72:8a:35:36:93:8f:a4:b3:
da:67:d4:87:a0:c0:1f:ff:6d:e8:3d:20:58:11:a4:
6c:6e:2c:15:0e:ab:38:19:cb:f1:09:61:6f:f2:1c:
3d:a2:ce:e1:0c:8f:47:aa:b9:53:e5:13:94:15:44:
db:b1:59:37:ce:06:fd:c9:16:6e:9c:d1:53:a4:24:
fd:8e:7a:0d:e6:13:72:57:eb:77:ef:18:de:5e:a6:
70:8f:c2:47:b7:ce:49:ab:6f:90:ed:75:39:cf:b0:
14:40:0b:a5:ee:20:6e:9e:63:91:89:d2:66:5e:13:
9b:ea:ca:4f:0e:ca:b9:20:37:df:f2:d2:8d:ac:9e:
db:93:a3:21:ec:fb:16:68:68:c6:f3:ae:ed:60:ca:
d9:b6:a7:7f:49:68:0a:a6:31:c6:33:26:e1:1e:b7:
17:b2:47:2a:ca:4c:c8:1b:67:7b:f8:c4:bd:9a:0a:
6b:73:4c:9a:76:26:40:1c:5c:72:c1:6f:2b:76:9a:
77:c7:49:2e:90:35:f1:6b:95:c7:ee:26:3f:92:85:
e6:0b:a8:67:c2:91:2e:dd:db:6b:60:70:96:d8:fe:
d9:ab:f2:52:6a:de:66:6a:fa:8f:f7:c7:77:de:0d:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:2A:7B:2B:FD:08:98:60:0B:D3:B3:93:35:EE:69:89:6A:10:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.35.0/24
69.90.119.0/24
69.90.128.0/24
76.74.215.0/24
96.62.127.0/24
96.62.231.0/24
140.233.161.0/24
143.14.17.0-143.14.19.255
143.14.23.0/24
143.14.33.0/24
143.14.40.0/22
143.14.47.0/24
143.14.66.0/24
143.14.82.0/23
143.14.111.0/24
143.14.120.0/23
143.14.124.0/24
143.14.126.0/24
143.14.128.0/22
143.14.140.0/24
143.14.152.0/24
143.14.156.0/24
143.14.171.0/24
143.14.174.0/24
143.14.181.0-143.14.183.255
143.14.185.0-143.14.187.255
143.14.191.0-143.14.192.255
143.14.194.0/24
143.14.198.0/24
143.14.218.0/24
143.14.229.0/24
143.14.245.0/24
143.14.249.0/24
145.223.5.0/24
146.103.8.0/23
146.103.22.0/24
146.103.29.0/24
146.103.37.0/24
146.103.51.0/24
148.135.173.0/24
150.241.240.0/24
150.241.242.0/24
155.117.4.0/24
155.117.10.0/24
155.117.16.0/24
155.117.23.0/24
155.117.63.0/24
155.117.79.0/24
155.117.102.0/24
155.117.109.0/24
155.117.118.0/24
155.117.123.0-155.117.124.255
155.117.126.0/24
155.117.136.0/24
155.117.138.0/23
155.117.141.0/24
155.117.145.0/24
155.117.150.0/24
155.117.153.0/24
155.117.156.0/23
155.117.159.0/24
155.117.168.0/23
155.117.171.0/24
155.117.178.0/23
155.117.186.0/24
155.117.190.0/24
155.117.201.0-155.117.202.255
155.117.205.0/24
155.117.212.0/24
155.117.214.0/23
155.117.218.0/24
155.117.222.0/24
155.117.241.0-155.117.243.255
162.141.39.0/24
162.141.83.0/24
162.141.125.0/24
162.141.130.0/23
162.141.140.0/24
162.141.158.0/24
162.141.160.0/23
162.141.163.0/24
162.141.186.0/24
162.141.188.0/23
167.148.2.0/23
167.148.8.0/24
167.148.40.0/24
167.148.81.0/24
167.148.86.0/24
167.148.89.0/24
167.148.93.0-167.148.95.255
167.148.105.0/24
167.148.123.0/24
167.148.126.0/24
167.148.159.0/24
167.148.189.0/24
167.148.194.0/24
168.222.4.0/24
168.222.11.0/24
168.222.14.0/23
168.222.23.0-168.222.24.255
168.222.26.0/24
168.222.31.0/24
168.222.36.0/22
168.222.41.0-168.222.42.255
168.222.45.0/24
168.222.50.0/24
168.222.54.0/24
168.222.61.0/24
168.222.68.0/22
168.222.76.0/24
168.222.80.0/24
168.222.91.0/24
168.222.116.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0d:c7:d5:78:1a:09:68:cb:86:a4:07:e0:e6:f4:89:d3:d8:
fb:89:28:d4:ed:3f:c2:ce:e5:9c:3a:c8:43:eb:c2:53:3d:1b:
ef:50:13:82:7a:06:7a:78:69:f6:2f:e6:f1:98:16:e3:6c:7f:
d3:0c:ae:3e:8b:b1:77:b3:81:41:12:a5:a2:39:c3:ae:10:4f:
60:71:a7:a1:e3:91:d6:4a:5d:2e:e1:40:55:86:d4:a7:70:41:
62:41:22:54:fa:15:e0:1a:35:6c:3b:e8:0f:a6:a8:b2:36:63:
96:25:d5:d7:ce:e8:66:4c:ed:3a:3d:6f:9e:dd:ee:a5:be:3d:
5c:6a:74:8c:ad:bf:ff:71:72:c0:b9:ae:96:b0:13:46:fd:93:
ad:e6:63:f5:36:0b:1f:b2:c5:6d:b0:e4:aa:b6:11:d3:ae:44:
d1:17:4f:bf:b3:79:44:7d:72:10:13:87:e7:0f:cd:50:c0:99:
ab:26:cb:93:8b:fb:97:6c:eb:3f:93:11:9b:63:30:5b:36:53:
f7:92:22:88:45:0e:f6:a8:aa:e5:c0:f3:90:47:a7:49:91:b2:
37:e2:ba:fb:ec:f2:39:4d:f0:94:96:11:cf:2a:a7:df:41:ea:
58:7d:8d:f0:b1:57:a2:c3:1c:04:7f:69:01:e1:5c:40:7d:f3:
ae:32:ec:2f
-----BEGIN CERTIFICATE-----
MIIH9zCCBt+gAwIBAgIUENWsmkpVJ2Fa7t5NFb8XB9isUMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMDUxMzIzNTFaFw0yNzExMDQxMzI4NTFaMDMxMTAvBgNV
BAMTKEVFMkMyQTdCMkJGRDA4OTg2MDBCRDNCMzkzMzVFRTY5ODk2QTEwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXMzyx7+kjnj2PMAMv31ooB/Z
ZMpyijU2k4+ks9pn1IegwB//beg9IFgRpGxuLBUOqzgZy/EJYW/yHD2izuEMj0eq
uVPlE5QVRNuxWTfOBv3JFm6c0VOkJP2Oeg3mE3JX63fvGN5epnCPwke3zkmrb5Dt
dTnPsBRAC6XuIG6eY5GJ0mZeE5vqyk8OyrkgN9/y0o2sntuToyHs+xZoaMbzru1g
ytm2p39JaAqmMcYzJuEetxeyRyrKTMgbZ3v4xL2aCmtzTJp2JkAcXHLBbyt2mnfH
SS6QNfFrlcfuJj+SheYLqGfCkS7d22tgcJbY/tmr8lJq3mZq+o/3x3feDQ8dAgMB
AAGjggUBMIIE/TAdBgNVHQ4EFgQU7iwqeyv9CJhgC9OzkzXuaYlqEEswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDFwYIKwYBBQUHAQcBAf8EggMGMIIDAjCCAv4EAgABMIIC
9gMEAEVaIwMEAEVadwMEAEVagAMEAExK1wMEAGA+fwMEAGA+5wMEAIzpoTAMAwQA
jw4RAwQCjw4QAwQAjw4XAwQAjw4hAwQCjw4oAwQAjw4vAwQAjw5CAwQBjw5SAwQA
jw5vAwQBjw54AwQAjw58AwQAjw5+AwQCjw6AAwQAjw6MAwQAjw6YAwQAjw6cAwQA
jw6rAwQAjw6uMAwDBACPDrUDBAOPDrAwDAMEAI8OuQMEAo8OuDAMAwQAjw6/AwQA
jw7AAwQAjw7CAwQAjw7GAwQAjw7aAwQAjw7lAwQAjw71AwQAjw75AwQAkd8FAwQB
kmcIAwQAkmcWAwQAkmcdAwQAkmclAwQAkmczAwQAlIetAwQAlvHwAwQAlvHyAwQA
m3UEAwQAm3UKAwQAm3UQAwQAm3UXAwQAm3U/AwQAm3VPAwQAm3VmAwQAm3VtAwQA
m3V2MAwDBACbdXsDBACbdXwDBACbdX4DBACbdYgDBAGbdYoDBACbdY0DBACbdZED
BACbdZYDBACbdZkDBAGbdZwDBACbdZ8DBAGbdagDBACbdasDBAGbdbIDBACbdboD
BACbdb4wDAMEAJt1yQMEAJt1ygMEAJt1zQMEAJt11AMEAZt11gMEAJt12gMEAJt1
3jAMAwQAm3XxAwQCm3XwAwQAoo0nAwQAoo1TAwQAoo19AwQBoo2CAwQAoo2MAwQA
oo2eAwQBoo2gAwQAoo2jAwQAoo26AwQBoo28AwQBp5QCAwQAp5QIAwQAp5QoAwQA
p5RRAwQAp5RWAwQAp5RZMAwDBACnlF0DBAWnlEADBACnlGkDBACnlHsDBACnlH4D
BACnlJ8DBACnlL0DBACnlMIDBACo3gQDBACo3gsDBAGo3g4wDAMEAKjeFwMEAKje
GAMEAKjeGgMEAKjeHwMEAqjeJDAMAwQAqN4pAwQAqN4qAwQAqN4tAwQAqN4yAwQA
qN42AwQAqN49AwQCqN5EAwQAqN5MAwQAqN5QAwQAqN5bAwQAqN50MA0GCSqGSIb3
DQEBCwUAA4IBAQAWDcfVeBoJaMuGpAfg5vSJ09j7iSjU7T/CzuWcOshD68JTPRvv
UBOCegZ6eGn2L+bxmBbjbH/TDK4+i7F3s4FBEqWiOcOuEE9gcaeh45HWSl0u4UBV
htSncEFiQSJU+hXgGjVsO+gPpqiyNmOWJdXXzuhmTO06PW+e3e6lvj1canSMrb//
cXLAua6WsBNG/ZOt5mP1NgsfssVtsOSqthHTrkTRF0+/s3lEfXIQE4fnD81QwJmr
JsuTi/uXbOs/kxGbYzBbNlP3kiKIRQ72qKrlwPOQR6dJkbI34rr77PI5TfCUlhHP
KqffQepYfY3wsVeiwxwEf2kB4VxAffOuMuwv
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:12:35 2026 by rpki-client