Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: fQ2OLt4MQImzdUDnrKrWvijj3aczua+v+OBkawM7MeY=
Subject key identifier: 14:4A:D7:18:50:DB:E2:E4:54:4F:04:44:B2:FD:1E:34:DC:26:56:86
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 2F1D5AA4372AB92C9CDBE19BD464F9A46D382B96
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
Signing time: Fri 18 Sep 2026 11:59:59 +0000
ROA not before: Fri 18 Sep 2026 11:54:59 +0000
ROA not after: Fri 17 Sep 2027 11:59:59 +0000
asID: 834
IP address blocks: 5.199.1.0/24 maxlen: 24
5.199.5.0/24 maxlen: 24
5.199.6.0/24 maxlen: 24
5.199.11.0/24 maxlen: 24
5.199.13.0/24 maxlen: 24
5.199.31.0/24 maxlen: 24
5.199.33.0/24 maxlen: 24
5.199.34.0/23 maxlen: 24
5.199.36.0/23 maxlen: 24
5.199.39.0/24 maxlen: 24
5.199.41.0/24 maxlen: 24
5.199.50.0/24 maxlen: 24
5.199.52.0/22 maxlen: 24
5.199.60.0/24 maxlen: 24
5.199.64.0/18 maxlen: 24
185.169.120.0/24 maxlen: 24
212.74.34.0/24 maxlen: 24
212.74.38.0/24 maxlen: 24
212.74.43.0/24 maxlen: 24
212.74.46.0/23 maxlen: 24
212.74.50.0/24 maxlen: 24
212.74.54.0/24 maxlen: 24
212.74.57.0/24 maxlen: 24
212.74.59.0/24 maxlen: 24
212.74.60.0/24 maxlen: 24
212.74.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1d:5a:a4:37:2a:b9:2c:9c:db:e1:9b:d4:64:f9:a4:6d:38:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 18 11:54:59 2026 GMT
Not After : Sep 17 11:59:59 2027 GMT
Subject: CN=144AD71850DBE2E4544F0444B2FD1E34DC265686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:87:fd:2c:e9:c5:3d:91:5e:de:14:22:20:
38:48:c0:b6:3c:8d:b4:48:af:34:ed:90:fb:66:35:
ec:e4:e5:e9:07:d7:32:4e:10:58:22:3d:a2:3c:7f:
ce:62:82:bf:b9:a1:5b:b1:8e:ee:55:17:d4:5d:ca:
f4:c8:59:ea:a4:99:ba:8f:5d:7e:fd:0f:f3:a0:04:
05:1b:24:a9:70:2d:ee:db:08:0e:57:b6:8a:0e:ff:
bc:0d:c4:51:7b:43:04:89:00:37:49:ea:a6:b7:b5:
af:52:86:08:fc:a0:71:3e:f1:53:b1:6c:4b:da:af:
2b:0c:af:28:d9:bd:02:b3:fc:37:84:41:18:98:2f:
1b:69:cb:c5:fb:22:81:02:bd:80:9b:ab:c5:bf:d2:
a9:30:84:00:6d:ed:d7:a2:a7:63:e9:29:95:fc:27:
e2:ae:ab:32:4f:7d:80:28:23:c0:5c:eb:3c:dc:35:
40:29:94:42:cc:0b:e0:00:13:2f:be:72:4d:ec:45:
53:40:c5:1a:13:77:28:a3:6a:f4:cd:d5:67:6b:05:
91:81:1c:6b:35:d8:22:48:c5:0a:a1:09:47:c8:1d:
db:49:30:fc:d6:16:60:c1:ab:3e:59:2e:5e:c6:4e:
a8:ff:52:18:65:bb:e9:d0:c0:24:92:d5:a8:06:ad:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:D7:18:50:DB:E2:E4:54:4F:04:44:B2:FD:1E:34:DC:26:56:86
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.1.0/24
5.199.5.0-5.199.6.255
5.199.11.0/24
5.199.13.0/24
5.199.31.0/24
5.199.33.0-5.199.37.255
5.199.39.0/24
5.199.41.0/24
5.199.50.0/24
5.199.52.0/22
5.199.60.0/24
5.199.64.0/18
185.169.120.0/24
212.74.34.0/24
212.74.38.0/24
212.74.43.0/24
212.74.46.0/23
212.74.50.0/24
212.74.54.0/24
212.74.57.0/24
212.74.59.0-212.74.60.255
212.74.62.0/23
Signature Algorithm: sha256WithRSAEncryption
43:45:e9:94:0a:3a:74:03:0c:58:82:4c:1f:e7:1f:3a:d8:23:
ba:f6:6d:d1:65:8d:75:2e:31:e8:a8:0b:19:85:a3:2e:55:d0:
86:1a:ac:7c:92:48:d6:ec:0a:44:bd:17:38:b5:bc:34:70:e2:
02:a6:0e:bf:8b:39:7a:e5:35:e7:70:b1:55:4d:31:22:f4:12:
a6:dc:b5:4c:51:90:c2:24:8c:5f:49:01:dc:c6:07:4a:cf:03:
2e:de:b2:bc:cd:30:dd:18:d8:ce:21:12:ef:c0:af:66:53:aa:
79:7c:44:04:bb:88:e6:a1:a2:59:b6:76:8d:1f:ba:b2:8a:c2:
36:1f:ca:7a:07:76:16:ce:f7:cb:2a:e7:b0:4a:16:34:27:e6:
32:aa:42:71:7a:9d:2d:45:b4:a3:29:a7:4a:b7:5c:8d:11:0b:
8b:97:f7:ab:0c:fd:15:49:97:b2:19:e4:ea:ba:2e:28:13:3a:
3c:eb:d0:28:f5:c3:69:50:d0:eb:64:fc:6e:28:3f:d4:e6:b8:
b7:71:5f:84:75:02:aa:50:f0:89:85:75:e6:d4:4e:b2:5c:ab:
f3:89:10:ba:c3:fd:c6:a2:2c:a5:eb:1d:cb:83:7b:1d:92:75:
5f:be:10:06:23:9a:85:89:8c:9a:9c:e8:ae:40:7d:6e:f1:2e:
6f:9c:f7:91
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIULx1apDcquSyc2+Gb1GT5pG04K5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTgxMTU0NTlaFw0yNzA5MTcxMTU5NTlaMDMxMTAvBgNV
BAMTKDE0NEFENzE4NTBEQkUyRTQ1NDRGMDQ0NEIyRkQxRTM0REMyNjU2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvof9LOnFPZFe3hQiIDhIwLY8
jbRIrzTtkPtmNezk5ekH1zJOEFgiPaI8f85igr+5oVuxju5VF9RdyvTIWeqkmbqP
XX79D/OgBAUbJKlwLe7bCA5XtooO/7wNxFF7QwSJADdJ6qa3ta9Shgj8oHE+8VOx
bEvarysMryjZvQKz/DeEQRiYLxtpy8X7IoECvYCbq8W/0qkwhABt7deip2PpKZX8
J+KuqzJPfYAoI8Bc6zzcNUAplELMC+AAEy++ck3sRVNAxRoTdyijavTN1WdrBZGB
HGs12CJIxQqhCUfIHdtJMPzWFmDBqz5ZLl7GTqj/Uhhlu+nQwCSS1agGrSIjAgMB
AAGjggKiMIICnjAdBgNVHQ4EFgQUFErXGFDb4uRUTwREsv0eNNwmVoYwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAF
xwEwDAMEAAXHBQMEAAXHBgMEAAXHCwMEAAXHDQMEAAXHHzAMAwQABcchAwQBBcck
AwQABccnAwQABccpAwQABccyAwQCBcc0AwQABcc8AwQGBcdAAwQAual4AwQA1Eoi
AwQA1EomAwQA1EorAwQB1EouAwQA1EoyAwQA1Eo2AwQA1Eo5MAwDBADUSjsDBADU
SjwDBAHUSj4wDQYJKoZIhvcNAQELBQADggEBAENF6ZQKOnQDDFiCTB/nHzrYI7r2
bdFljXUuMeioCxmFoy5V0IYarHySSNbsCkS9Fzi1vDRw4gKmDr+LOXrlNedwsVVN
MSL0EqbctUxRkMIkjF9JAdzGB0rPAy7esrzNMN0Y2M4hEu/Ar2ZTqnl8RAS7iOah
olm2do0furKKwjYfynoHdhbO98sq57BKFjQn5jKqQnF6nS1FtKMpp0q3XI0RC4uX
96sM/RVJl7IZ5Oq6LigTOjzr0Cj1w2lQ0Otk/G4oP9TmuLdxX4R1AqpQ8ImFdebU
TrJcq/OJELrD/caiLKXrHcuDex2SdV++EAYjmoWJjJqc6K5AfW7xLm+c95E=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:26 2026 by rpki-client