Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: h9X/3qUmpYUAzzrdNjOBF//rRVG3/rz3sxhqjGD5FN8=
Subject key identifier: 1A:76:74:FE:C6:9E:DE:11:D8:FB:5E:2D:70:B9:60:78:65:52:C0:B8
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0486EFE556A249E16ECE84EA121C52FCAC015D73
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
Signing time: Tue 03 Nov 2026 00:03:43 +0000
ROA not before: Mon 02 Nov 2026 23:58:43 +0000
ROA not after: Tue 02 Nov 2027 00:03:43 +0000
asID: 834
IP address blocks: 5.199.0.0/24 maxlen: 24
5.199.5.0/24 maxlen: 24
5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.32.0/24 maxlen: 24
5.199.42.0/24 maxlen: 24
5.199.45.0/24 maxlen: 24
5.199.46.0/23 maxlen: 24
5.199.48.0/22 maxlen: 24
5.199.52.0/24 maxlen: 24
5.199.64.0/18 maxlen: 24
185.169.121.0/24 maxlen: 24
212.74.34.0/24 maxlen: 24
212.74.38.0/24 maxlen: 24
212.74.42.0/23 maxlen: 24
212.74.46.0/23 maxlen: 24
212.74.50.0/24 maxlen: 24
212.74.52.0/24 maxlen: 24
212.74.54.0/24 maxlen: 24
212.74.57.0/24 maxlen: 24
212.74.59.0/24 maxlen: 24
212.74.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:86:ef:e5:56:a2:49:e1:6e:ce:84:ea:12:1c:52:fc:ac:01:5d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Nov 2 23:58:43 2026 GMT
Not After : Nov 2 00:03:43 2027 GMT
Subject: CN=1A7674FEC69EDE11D8FB5E2D70B960786552C0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:20:ed:d2:22:62:20:14:bf:db:1f:e4:cb:
d2:8d:56:89:57:c5:46:a9:41:ca:1a:b7:8b:4c:80:
6c:17:fb:2d:bf:2c:d3:57:01:fb:e1:50:02:73:bf:
7c:45:2f:ad:36:24:f6:97:5e:62:a1:e0:ce:01:49:
52:c4:a5:69:ca:25:7e:3b:78:c3:7f:d8:9e:27:25:
98:e9:3c:e8:e5:20:2c:b2:df:40:b3:a3:8c:3b:68:
1b:77:ca:2c:7f:81:e7:d9:d6:5a:78:d0:d7:8c:5e:
b9:8c:15:b6:30:66:5b:6c:fb:35:12:f0:3a:8a:4a:
c4:e2:95:7a:51:6b:c7:1b:74:7b:f8:05:f5:65:b5:
45:d0:20:c2:95:b4:24:80:92:20:4d:e8:ce:63:15:
51:b7:db:ac:7a:fa:c3:b4:5d:34:ea:7c:a9:41:b8:
1c:0b:f4:38:78:5f:1e:cf:17:f8:39:c5:1f:1c:9f:
2d:9f:e7:5e:9b:f6:2f:fa:63:e3:28:de:4f:c1:fa:
0d:2a:05:ff:b2:80:9f:70:c7:df:e4:b5:6d:80:cc:
cc:a9:e0:49:9f:af:4a:f9:69:b1:c5:e3:cd:7e:76:
06:7f:52:f5:0a:7b:b8:d0:55:85:1e:c9:f9:6a:12:
81:2f:b3:7d:bb:02:77:09:24:bd:3a:eb:e9:3a:da:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:74:FE:C6:9E:DE:11:D8:FB:5E:2D:70:B9:60:78:65:52:C0:B8
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/24
5.199.5.0/24
5.199.18.0/24
5.199.29.0/24
5.199.32.0/24
5.199.42.0/24
5.199.45.0-5.199.52.255
5.199.64.0/18
185.169.121.0/24
212.74.34.0/24
212.74.38.0/24
212.74.42.0/23
212.74.46.0/23
212.74.50.0/24
212.74.52.0/24
212.74.54.0/24
212.74.57.0/24
212.74.59.0-212.74.63.255
Signature Algorithm: sha256WithRSAEncryption
18:50:2b:62:f5:42:07:90:98:03:28:0b:82:db:30:72:4f:41:
52:27:f6:91:33:bd:a0:e7:40:cf:ef:a0:70:08:6f:21:9e:22:
0a:46:36:63:78:f5:d6:11:68:ff:b1:48:10:f6:e1:37:b4:c1:
b0:71:6c:ee:39:cc:4d:60:b9:56:05:bf:10:19:85:70:3c:d9:
c2:c7:d3:d1:b7:ca:db:e0:18:9f:c9:04:a9:7d:cc:20:dd:46:
ce:38:d5:15:33:21:6c:3b:5d:cf:c6:ee:c5:79:1d:b0:b7:30:
f4:9d:a1:3c:b2:ca:a1:4d:cc:b5:a8:dc:85:20:79:d1:ea:75:
fc:ff:94:68:ad:0c:4b:21:11:a7:e8:80:23:8b:84:9b:4f:57:
da:eb:b7:24:46:d5:c2:7b:14:2e:b6:8d:c4:ea:34:d2:1d:4c:
70:e8:ea:1c:cd:f8:bb:89:69:53:2b:68:fb:9e:45:2a:a1:01:
87:01:7f:26:bc:fa:fe:a3:a0:9b:17:8e:25:86:5a:e2:f2:f7:
89:48:1d:17:77:a6:1d:85:7f:b9:69:61:7c:96:dc:ea:2f:d2:
11:41:57:8f:31:52:fd:da:21:c3:c2:ae:be:ac:11:79:17:11:
cc:f9:f6:d2:88:6d:7c:e8:46:d4:21:3e:ed:06:76:e5:34:b9:
86:28:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:45:04 2026 by rpki-client