Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: oXaobRHb/m7KJKmf8dGptyh0KOnykLrcecoanlJEPcU=
Subject key identifier: 8C:AF:D7:E1:E9:87:58:05:CD:30:A0:B1:D9:B5:0B:06:71:BB:C8:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3D545A156E38539141ABB99BC467FEBFBD98B099
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Sun 20 Sep 2026 11:08:10 +0000
ROA not before: Sun 20 Sep 2026 11:03:10 +0000
ROA not after: Sun 19 Sep 2027 11:08:10 +0000
asID: 834
IP address blocks: 64.226.207.0/24 maxlen: 24
66.155.64.0/24 maxlen: 24
69.90.35.0/24 maxlen: 24
69.90.117.0/24 maxlen: 24
69.90.225.0/24 maxlen: 24
69.90.227.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.115.0/24 maxlen: 24
96.62.217.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.150.227.0/24 maxlen: 24
140.150.239.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/23 maxlen: 24
143.14.23.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.82.0/23 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.130.0/24 maxlen: 24
143.14.152.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.187.0/24 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.198.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.229.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
145.223.5.0/24 maxlen: 24
146.103.22.0/24 maxlen: 24
146.103.29.0/24 maxlen: 24
146.103.57.0/24 maxlen: 24
147.79.26.0/24 maxlen: 24
147.79.55.0/24 maxlen: 24
148.135.172.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.123.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.150.0/24 maxlen: 24
155.117.156.0/24 maxlen: 24
155.117.186.0/24 maxlen: 24
155.117.200.0/23 maxlen: 24
155.117.228.0/24 maxlen: 24
155.117.240.0/23 maxlen: 24
155.117.249.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.140.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.94.0/24 maxlen: 24
167.148.126.0/24 maxlen: 24
167.148.141.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.24.0/24 maxlen: 24
168.222.36.0/23 maxlen: 24
168.222.45.0/24 maxlen: 24
168.222.52.0/24 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.67.0/24 maxlen: 24
168.222.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:54:5a:15:6e:38:53:91:41:ab:b9:9b:c4:67:fe:bf:bd:98:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 11:03:10 2026 GMT
Not After : Sep 19 11:08:10 2027 GMT
Subject: CN=8CAFD7E1E9875805CD30A0B1D9B50B0671BBC893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:fb:f0:d5:53:97:55:88:77:7a:9c:ba:fc:
a7:64:da:99:d9:3d:af:49:ba:2e:1d:74:f0:00:72:
7c:16:12:f2:15:a6:81:64:49:08:2b:c8:81:23:3b:
f1:e2:8c:cd:81:58:b3:31:82:3b:c0:b7:87:d6:3d:
23:e7:68:19:bf:a9:e2:fd:60:91:37:99:ac:83:f2:
71:cc:51:02:30:22:78:0b:d7:70:6e:c7:2c:7b:26:
4e:84:e3:3e:91:21:5a:26:a0:31:03:44:61:24:b1:
74:57:a4:c1:4b:e2:2d:3c:e9:a9:b4:9c:d4:37:7e:
2e:ac:16:cc:89:5c:64:73:31:2a:5a:48:b8:b4:d2:
0a:b3:27:49:a4:14:71:72:5a:1f:8c:a1:10:97:01:
b0:ba:81:56:4d:2b:3b:9e:ab:40:33:e5:41:96:7f:
63:9d:32:8e:58:58:a5:b1:64:df:16:52:60:b6:dc:
11:b1:1f:bc:46:bd:53:84:ba:b8:3a:dc:b6:13:fa:
91:21:9e:e5:ed:0b:4a:15:06:c0:9b:52:6a:d7:33:
68:68:ce:b3:64:54:a4:57:d6:30:30:ed:be:69:ec:
74:49:8c:92:ac:80:42:5a:01:d4:5d:50:8c:ab:5a:
bf:f6:09:45:1c:2f:5c:f4:33:03:0a:25:e1:e4:a0:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:D7:E1:E9:87:58:05:CD:30:A0:B1:D9:B5:0B:06:71:BB:C8:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.207.0/24
66.155.64.0/24
69.90.35.0/24
69.90.117.0/24
69.90.225.0/24
69.90.227.0/24
96.62.96.0/23
96.62.115.0/24
96.62.217.0/24
96.62.231.0/24
140.150.227.0/24
140.150.239.0/24
143.14.12.0/24
143.14.16.0/24
143.14.18.0/23
143.14.23.0/24
143.14.33.0/24
143.14.66.0/24
143.14.68.0/24
143.14.82.0/23
143.14.91.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0-143.14.130.255
143.14.152.0/24
143.14.181.0-143.14.182.255
143.14.185.0/24
143.14.187.0/24
143.14.191.0/24
143.14.194.0/24
143.14.198.0/24
143.14.218.0/24
143.14.229.0/24
143.14.245.0/24
143.14.248.0/23
145.223.1.0-145.223.2.255
145.223.5.0/24
146.103.22.0/24
146.103.29.0/24
146.103.57.0/24
147.79.26.0/24
147.79.55.0/24
148.135.172.0/24
148.135.181.0/24
150.241.136.0/24
150.241.200.0/23
150.241.240.0/24
150.241.254.0/24
155.117.63.0/24
155.117.79.0/24
155.117.109.0/24
155.117.123.0/24
155.117.136.0/24
155.117.139.0/24
155.117.141.0/24
155.117.150.0/24
155.117.156.0/24
155.117.186.0/24
155.117.200.0/23
155.117.228.0/24
155.117.240.0/23
155.117.249.0/24
162.141.8.0/24
162.141.13.0/24
162.141.39.0/24
162.141.66.0/24
162.141.82.0/23
162.141.140.0/24
162.141.161.0/24
162.141.163.0/24
167.148.94.0/24
167.148.126.0/24
167.148.141.0/24
167.148.194.0/24
167.148.215.0/24
168.222.11.0/24
168.222.23.0-168.222.24.255
168.222.36.0/23
168.222.45.0/24
168.222.52.0/24
168.222.54.0/24
168.222.67.0-168.222.68.255
Signature Algorithm: sha256WithRSAEncryption
59:56:88:27:a0:97:53:24:7b:14:89:bd:0e:af:f4:c5:d7:4b:
02:b7:d9:af:4f:6f:4d:65:de:36:79:ab:4e:ac:72:05:79:34:
ec:30:b9:fd:41:f1:99:4c:8e:55:87:7c:48:7b:6c:42:1c:b7:
ed:7f:e5:14:27:7f:e8:83:78:72:a1:81:5b:60:23:0f:46:b7:
42:31:1e:44:68:a5:85:5c:e9:d5:73:27:b7:62:d2:05:14:23:
23:95:5a:b5:8b:0e:61:4c:c1:98:20:a9:bf:f2:85:b1:71:c5:
e2:32:ec:8e:f4:93:7c:6f:11:f0:74:48:f3:b6:c0:c2:7b:39:
4f:dd:b5:fb:bc:ce:e8:75:ec:b4:3e:3b:80:c0:83:f7:4d:ee:
95:74:41:a2:e8:ce:81:89:e4:93:0e:b7:c9:e5:d8:8a:70:48:
9c:ab:c0:93:ec:ca:35:82:9e:a5:3b:5c:5e:3a:73:0e:75:c4:
9e:67:6e:97:e4:91:91:b4:c3:65:65:49:87:39:56:5b:a2:de:
23:09:13:c4:f7:ca:2d:87:9f:6f:c0:77:73:c1:41:17:6d:bd:
83:7c:df:7f:9f:c8:d8:f6:3c:f3:a7:32:73:dc:1d:1a:17:94:
f4:83:04:cd:d7:ba:08:fd:81:52:49:ba:3c:c4:90:43:8e:dc:
e6:aa:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:31 2026 by rpki-client