Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 2Vpyl+IgqgFrX4VaZ00G+GhZvJPuN2gHEG909KfijQY=
Subject key identifier: 48:9C:C5:8A:A1:D6:1F:24:EE:3A:00:45:FA:DE:12:A3:CA:C5:60:7D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45B19D28F13FAA92FA9FED008D3D9C6F005C5A3D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Tue 28 Jul 2026 06:27:19 +0000
ROA not before: Tue 28 Jul 2026 06:22:19 +0000
ROA not after: Tue 27 Jul 2027 06:27:19 +0000
asID: 834
IP address blocks: 96.62.77.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.103.0/24 maxlen: 24
96.62.217.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.150.233.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.92.0/24 maxlen: 24
143.14.121.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.186.0/23 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.209.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
143.14.250.0/24 maxlen: 24
143.14.253.0/24 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
146.103.59.0/24 maxlen: 24
147.79.17.0/24 maxlen: 24
147.79.19.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
148.135.172.0/23 maxlen: 24
148.135.181.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
155.117.4.0/24 maxlen: 24
155.117.8.0/22 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.76.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.105.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.118.0/23 maxlen: 24
155.117.123.0/24 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
155.117.168.0/23 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.179.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.212.0/24 maxlen: 24
155.117.214.0/23 maxlen: 24
155.117.218.0/24 maxlen: 24
155.117.220.0/23 maxlen: 24
155.117.228.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
155.117.242.0/24 maxlen: 24
155.117.245.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.68.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.98.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.152.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.80.0/23 maxlen: 24
167.148.84.0/22 maxlen: 24
167.148.119.0/24 maxlen: 24
167.148.190.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
168.222.4.0/24 maxlen: 24
168.222.8.0/23 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.14.0/23 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.30.0/23 maxlen: 24
168.222.32.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.39.0/24 maxlen: 24
168.222.44.0/24 maxlen: 24
168.222.46.0/23 maxlen: 24
168.222.50.0/23 maxlen: 24
168.222.52.0/23 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
168.222.62.0/24 maxlen: 24
168.222.66.0/24 maxlen: 24
168.222.68.0/22 maxlen: 24
168.222.72.0/23 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.76.0/24 maxlen: 24
168.222.78.0/23 maxlen: 24
168.222.80.0/24 maxlen: 24
168.222.82.0/24 maxlen: 24
168.222.85.0/24 maxlen: 24
168.222.90.0/23 maxlen: 24
168.222.92.0/22 maxlen: 24
168.222.98.0/23 maxlen: 24
168.222.106.0/23 maxlen: 24
168.222.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b1:9d:28:f1:3f:aa:92:fa:9f:ed:00:8d:3d:9c:6f:00:5c:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 06:22:19 2026 GMT
Not After : Jul 27 06:27:19 2027 GMT
Subject: CN=489CC58AA1D61F24EE3A0045FADE12A3CAC5607D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:49:02:4b:88:ce:b2:d8:be:60:59:93:17:
45:44:30:c6:15:fd:56:31:67:47:28:6a:40:9b:1c:
de:63:72:76:f4:07:3f:c0:60:20:8f:08:4f:7b:9b:
00:8f:79:de:83:8a:d2:c9:20:1b:b5:0c:3b:58:ef:
d6:2f:51:45:f7:d6:57:3d:b9:63:83:ae:ee:7f:70:
f3:c5:0f:02:bb:5e:46:be:87:9e:dd:12:aa:50:ec:
29:12:b9:78:fe:ad:1f:8d:03:a0:d2:34:d1:7b:33:
f0:bc:26:31:11:d5:26:13:a9:f2:73:b2:a8:54:25:
1d:69:d4:44:45:22:89:99:22:dd:9d:5d:cb:49:59:
cb:e8:53:e2:1a:3c:f9:fb:c3:c9:b4:1f:fe:55:97:
8a:29:59:98:2f:7b:d9:c2:b6:72:de:6e:76:a8:b1:
17:c8:9d:3b:7d:18:05:30:67:23:4b:40:b0:fc:23:
15:cb:77:3c:72:30:44:f2:dc:53:aa:c7:42:5a:d4:
8e:f3:f0:be:66:a5:4a:09:8c:0a:8f:69:fe:66:68:
7b:9a:e4:33:65:f5:ef:cc:c8:49:3f:97:0d:5f:23:
33:b9:da:d1:6f:20:f9:d7:a3:b9:db:42:83:a8:6d:
cf:32:58:90:ec:98:08:ad:dd:70:38:76:cb:cf:73:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:C5:8A:A1:D6:1F:24:EE:3A:00:45:FA:DE:12:A3:CA:C5:60:7D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
96.62.96.0/23
96.62.103.0/24
96.62.217.0/24
96.62.231.0/24
140.150.233.0/24
140.233.181.0/24
143.14.12.0/24
143.14.16.0/24
143.14.18.0/24
143.14.33.0/24
143.14.47.0/24
143.14.51.0/24
143.14.66.0/24
143.14.68.0/24
143.14.91.0-143.14.92.255
143.14.121.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0/24
143.14.140.0/24
143.14.181.0-143.14.182.255
143.14.185.0-143.14.187.255
143.14.191.0/24
143.14.194.0/24
143.14.209.0/24
143.14.218.0/24
143.14.245.0/24
143.14.248.0-143.14.250.255
143.14.253.0/24
145.223.1.0-145.223.2.255
146.103.48.0/24
146.103.51.0/24
146.103.59.0/24
147.79.17.0/24
147.79.19.0/24
147.79.31.0/24
148.135.172.0/23
148.135.181.0/24
148.135.194.0/24
150.241.200.0/23
150.241.240.0/24
150.241.242.0/24
155.117.4.0/24
155.117.8.0/22
155.117.23.0/24
155.117.38.0/24
155.117.63.0/24
155.117.76.0/24
155.117.86.0/24
155.117.97.0/24
155.117.102.0/24
155.117.105.0/24
155.117.112.0/24
155.117.118.0/23
155.117.123.0/24
155.117.126.0/24
155.117.136.0/24
155.117.139.0/24
155.117.141.0/24
155.117.159.0/24
155.117.167.0-155.117.169.255
155.117.171.0/24
155.117.179.0/24
155.117.184.0/24
155.117.190.0/24
155.117.202.0/24
155.117.207.0/24
155.117.210.0/24
155.117.212.0/24
155.117.214.0/23
155.117.218.0/24
155.117.220.0/23
155.117.228.0/24
155.117.240.0/24
155.117.242.0/24
155.117.245.0/24
162.141.5.0/24
162.141.8.0/24
162.141.44.0/24
162.141.68.0/24
162.141.80.0/24
162.141.82.0/23
162.141.97.0-162.141.98.255
162.141.105.0/24
162.141.107.0/24
162.141.152.0/24
162.141.158.0/24
162.141.161.0/24
162.141.163.0/24
167.148.8.0/24
167.148.80.0/23
167.148.84.0/22
167.148.119.0/24
167.148.190.0/24
167.148.194.0/24
168.222.4.0/24
168.222.8.0/23
168.222.12.0/24
168.222.14.0/23
168.222.23.0/24
168.222.30.0-168.222.32.255
168.222.34.0/24
168.222.39.0/24
168.222.44.0/24
168.222.46.0/23
168.222.50.0-168.222.54.255
168.222.61.0-168.222.62.255
168.222.66.0/24
168.222.68.0-168.222.74.255
168.222.76.0/24
168.222.78.0-168.222.80.255
168.222.82.0/24
168.222.85.0/24
168.222.90.0-168.222.95.255
168.222.98.0/23
168.222.106.0/23
168.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:ba:41:dd:1c:9b:6a:b8:7c:f5:12:2e:31:35:9e:9d:8c:42:
53:88:52:00:53:3b:96:f0:ae:9a:b2:c8:50:51:79:e4:6e:12:
ba:67:5a:d0:90:a5:6a:10:c5:47:fb:8e:0f:da:f6:c1:6e:5e:
fe:f0:85:be:03:21:23:9f:6d:67:03:1b:0c:9a:f6:47:89:7d:
51:ae:96:e4:ae:d5:e8:79:10:09:46:b7:d9:3c:c4:37:4d:52:
31:22:2a:d7:47:4c:90:e2:7f:24:5d:90:fc:23:ee:e7:8b:ff:
c3:51:89:01:6b:6d:02:21:90:08:55:e6:03:78:11:c0:55:fc:
6c:c1:60:15:c1:9d:19:98:b4:25:d4:f4:58:97:33:8c:4b:90:
8c:f8:7a:79:ed:26:e8:39:f2:4d:41:7e:f4:84:05:c0:18:2f:
ae:a9:d1:53:e6:10:91:b7:9c:03:da:c0:7c:5b:80:a1:b0:5e:
e0:97:33:be:90:5e:b0:be:f3:d0:46:8b:48:41:e8:b0:5b:0c:
83:07:54:bf:6d:6c:31:3e:d7:b8:9d:3f:26:2a:27:84:97:ba:
2b:19:ac:9c:fb:6e:30:fe:ef:89:2a:cd:9e:b6:b5:c8:ee:fa:
ad:9a:1d:60:eb:e2:36:fe:b4:12:54:25:c7:ae:a5:92:cc:b1:
51:cc:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:09 2026 by rpki-client