Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          /SyGqbcZsJN8GsfEcaoztMwsq3n/O2OBxt4jWk2xSvs=
Subject key identifier:   02:F3:30:6B:6E:BB:09:7B:7D:DF:B7:C5:80:F0:81:3B:B1:8A:1D:B5
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       2F095FB032BEDBD7EF76F3FD5CBE68DE42948D9B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time:             Mon 21 Sep 2026 07:39:54 +0000
ROA not before:           Mon 21 Sep 2026 07:34:54 +0000
ROA not after:            Mon 20 Sep 2027 07:39:54 +0000
asID:                     834
IP address blocks:        212.17.224.0/24 maxlen: 24
                          212.17.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:09:5f:b0:32:be:db:d7:ef:76:f3:fd:5c:be:68:de:42:94:8d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Sep 21 07:34:54 2026 GMT
            Not After : Sep 20 07:39:54 2027 GMT
        Subject: CN=02F3306B6EBB097B7DDFB7C580F0813BB18A1DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:57:d2:80:34:98:66:55:3f:8c:d9:05:4e:
                    73:5f:aa:52:81:f3:e1:27:31:7f:0a:85:ab:ae:19:
                    5d:b5:57:49:32:50:40:99:72:b3:34:8c:20:44:0f:
                    2d:72:27:fd:14:ec:f4:c3:c0:9d:14:46:de:60:40:
                    00:c4:c7:1f:45:a8:97:75:79:d7:17:32:9b:ee:62:
                    c3:f2:59:d2:f5:1e:5f:ad:fe:1e:00:86:fa:82:69:
                    90:d0:51:3c:8b:50:21:27:2c:da:7e:61:fd:3c:96:
                    b4:2d:5c:bd:96:88:f3:67:22:16:9c:da:60:aa:c8:
                    50:53:d7:38:76:71:71:26:69:b6:0f:25:26:af:95:
                    2a:bf:1c:2a:96:04:a7:0d:ae:d8:e4:2a:5c:59:ce:
                    ba:71:7f:3d:40:71:e6:02:30:a3:3c:a9:a4:85:18:
                    d9:49:62:5c:75:94:26:ac:22:78:84:1f:d7:5d:1e:
                    67:99:16:8c:36:ca:74:da:d0:bf:e7:62:06:6b:12:
                    f5:5b:a4:b1:0e:aa:3a:77:c5:74:d9:00:49:c6:7e:
                    83:06:8f:fb:82:b9:2d:05:02:fb:11:b7:9a:52:3b:
                    e3:24:0b:62:43:80:00:72:04:38:2e:72:54:05:03:
                    b5:13:d9:31:52:2a:30:fd:12:d4:b2:a9:3b:c5:2f:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F3:30:6B:6E:BB:09:7B:7D:DF:B7:C5:80:F0:81:3B:B1:8A:1D:B5
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.17.224.0/24
                  212.17.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:08:a9:20:ba:d5:2e:31:8d:04:d4:44:01:ce:e7:ae:b6:
         b9:06:61:50:63:67:40:5d:a6:ba:2c:72:06:dc:0d:6a:0c:e8:
         40:60:5c:e8:16:86:b0:73:50:62:39:d5:c4:8b:5b:c1:d0:bc:
         99:43:40:f5:ff:99:ee:bd:f1:a8:3d:ed:e6:7f:56:da:98:68:
         15:b4:d0:d4:7e:25:a6:ea:fa:0e:0c:cc:2a:4b:8b:aa:a4:4b:
         ba:0a:fd:17:dd:4d:5d:00:a7:88:49:2b:16:12:e4:a9:15:a6:
         25:43:5a:9f:4e:10:0e:72:f5:e1:46:d9:1c:da:91:d2:c7:ec:
         f5:b6:64:2b:c2:8c:03:75:4f:68:b1:bb:fd:3d:48:14:d3:13:
         c0:24:0f:d7:af:a3:1f:9c:3e:f6:70:f7:27:52:5a:d7:4a:d3:
         7c:80:ab:4c:f6:9e:2e:2c:c4:ef:3c:cf:cb:ff:8d:1e:3f:44:
         1f:2a:6e:44:c9:ee:1d:3d:f3:47:2e:fb:51:c5:6f:74:31:ce:
         f3:d7:9d:fe:f6:69:44:a1:0e:fa:0f:c6:57:a0:64:32:81:0e:
         06:51:8e:4c:f9:7c:44:95:31:9b:b9:6c:c2:3f:56:6b:ad:1e:
         7f:67:b7:69:ca:4e:b3:0d:3d:dd:a8:c9:85:43:cf:17:d6:dc:
         73:84:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:46 2026 by rpki-client