Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: /SyGqbcZsJN8GsfEcaoztMwsq3n/O2OBxt4jWk2xSvs=
Subject key identifier: 02:F3:30:6B:6E:BB:09:7B:7D:DF:B7:C5:80:F0:81:3B:B1:8A:1D:B5
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2F095FB032BEDBD7EF76F3FD5CBE68DE42948D9B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time: Mon 21 Sep 2026 07:39:54 +0000
ROA not before: Mon 21 Sep 2026 07:34:54 +0000
ROA not after: Mon 20 Sep 2027 07:39:54 +0000
asID: 834
IP address blocks: 212.17.224.0/24 maxlen: 24
212.17.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:09:5f:b0:32:be:db:d7:ef:76:f3:fd:5c:be:68:de:42:94:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 21 07:34:54 2026 GMT
Not After : Sep 20 07:39:54 2027 GMT
Subject: CN=02F3306B6EBB097B7DDFB7C580F0813BB18A1DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:57:d2:80:34:98:66:55:3f:8c:d9:05:4e:
73:5f:aa:52:81:f3:e1:27:31:7f:0a:85:ab:ae:19:
5d:b5:57:49:32:50:40:99:72:b3:34:8c:20:44:0f:
2d:72:27:fd:14:ec:f4:c3:c0:9d:14:46:de:60:40:
00:c4:c7:1f:45:a8:97:75:79:d7:17:32:9b:ee:62:
c3:f2:59:d2:f5:1e:5f:ad:fe:1e:00:86:fa:82:69:
90:d0:51:3c:8b:50:21:27:2c:da:7e:61:fd:3c:96:
b4:2d:5c:bd:96:88:f3:67:22:16:9c:da:60:aa:c8:
50:53:d7:38:76:71:71:26:69:b6:0f:25:26:af:95:
2a:bf:1c:2a:96:04:a7:0d:ae:d8:e4:2a:5c:59:ce:
ba:71:7f:3d:40:71:e6:02:30:a3:3c:a9:a4:85:18:
d9:49:62:5c:75:94:26:ac:22:78:84:1f:d7:5d:1e:
67:99:16:8c:36:ca:74:da:d0:bf:e7:62:06:6b:12:
f5:5b:a4:b1:0e:aa:3a:77:c5:74:d9:00:49:c6:7e:
83:06:8f:fb:82:b9:2d:05:02:fb:11:b7:9a:52:3b:
e3:24:0b:62:43:80:00:72:04:38:2e:72:54:05:03:
b5:13:d9:31:52:2a:30:fd:12:d4:b2:a9:3b:c5:2f:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:30:6B:6E:BB:09:7B:7D:DF:B7:C5:80:F0:81:3B:B1:8A:1D:B5
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.224.0/24
212.17.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6a:08:a9:20:ba:d5:2e:31:8d:04:d4:44:01:ce:e7:ae:b6:
b9:06:61:50:63:67:40:5d:a6:ba:2c:72:06:dc:0d:6a:0c:e8:
40:60:5c:e8:16:86:b0:73:50:62:39:d5:c4:8b:5b:c1:d0:bc:
99:43:40:f5:ff:99:ee:bd:f1:a8:3d:ed:e6:7f:56:da:98:68:
15:b4:d0:d4:7e:25:a6:ea:fa:0e:0c:cc:2a:4b:8b:aa:a4:4b:
ba:0a:fd:17:dd:4d:5d:00:a7:88:49:2b:16:12:e4:a9:15:a6:
25:43:5a:9f:4e:10:0e:72:f5:e1:46:d9:1c:da:91:d2:c7:ec:
f5:b6:64:2b:c2:8c:03:75:4f:68:b1:bb:fd:3d:48:14:d3:13:
c0:24:0f:d7:af:a3:1f:9c:3e:f6:70:f7:27:52:5a:d7:4a:d3:
7c:80:ab:4c:f6:9e:2e:2c:c4:ef:3c:cf:cb:ff:8d:1e:3f:44:
1f:2a:6e:44:c9:ee:1d:3d:f3:47:2e:fb:51:c5:6f:74:31:ce:
f3:d7:9d:fe:f6:69:44:a1:0e:fa:0f:c6:57:a0:64:32:81:0e:
06:51:8e:4c:f9:7c:44:95:31:9b:b9:6c:c2:3f:56:6b:ad:1e:
7f:67:b7:69:ca:4e:b3:0d:3d:dd:a8:c9:85:43:cf:17:d6:dc:
73:84:c1:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIULwlfsDK+29fvdvP9XL5o3kKUjZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MjEwNzM0NTRaFw0yNzA5MjAwNzM5NTRaMDMxMTAvBgNV
BAMTKDAyRjMzMDZCNkVCQjA5N0I3RERGQjdDNTgwRjA4MTNCQjE4QTFEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFclfSgDSYZlU/jNkFTnNfqlKB
8+EnMX8KhauuGV21V0kyUECZcrM0jCBEDy1yJ/0U7PTDwJ0URt5gQADExx9FqJd1
edcXMpvuYsPyWdL1Hl+t/h4AhvqCaZDQUTyLUCEnLNp+Yf08lrQtXL2WiPNnIhac
2mCqyFBT1zh2cXEmabYPJSavlSq/HCqWBKcNrtjkKlxZzrpxfz1AceYCMKM8qaSF
GNlJYlx1lCasIniEH9ddHmeZFow2ynTa0L/nYgZrEvVbpLEOqjp3xXTZAEnGfoMG
j/uCuS0FAvsRt5pSO+MkC2JDgAByBDguclQFA7UT2TFSKjD9EtSyqTvFLyblAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUAvMwa267CXt937fFgPCBO7GKHbUwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1BHgAwQA
1BHoMA0GCSqGSIb3DQEBCwUAA4IBAQAvagipILrVLjGNBNREAc7nrra5BmFQY2dA
Xaa6LHIG3A1qDOhAYFzoFoawc1BiOdXEi1vB0LyZQ0D1/5nuvfGoPe3mf1bamGgV
tNDUfiWm6voODMwqS4uqpEu6Cv0X3U1dAKeISSsWEuSpFaYlQ1qfThAOcvXhRtkc
2pHSx+z1tmQrwowDdU9osbv9PUgU0xPAJA/Xr6MfnD72cPcnUlrXStN8gKtM9p4u
LMTvPM/L/40eP0QfKm5Eye4dPfNHLvtRxW90Mc7z153+9mlEoQ76D8ZXoGQygQ4G
UY5M+XxElTGbuWzCP1ZrrR5/Z7dpyk6zDT3dqMmFQ88X1txzhMEk
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:46 2026 by rpki-client