Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          LtLDGPit6szbUrUuH8XVL+FTsyGF73NjJhDKtoZdOa8=
Subject key identifier:   92:BB:88:5C:EF:EA:38:4D:BF:E1:0C:03:2E:26:89:CB:88:2B:38:28
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       2F8EBD23D1950E9858F95E8DFA2F5DBD8235899F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time:             Sat 19 Sep 2026 06:11:44 +0000
ROA not before:           Sat 19 Sep 2026 06:06:44 +0000
ROA not after:            Sat 18 Sep 2027 06:11:44 +0000
asID:                     834
IP address blocks:        212.17.224.0/24 maxlen: 24
                          212.17.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8e:bd:23:d1:95:0e:98:58:f9:5e:8d:fa:2f:5d:bd:82:35:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Sep 19 06:06:44 2026 GMT
            Not After : Sep 18 06:11:44 2027 GMT
        Subject: CN=92BB885CEFEA384DBFE10C032E2689CB882B3828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:00:a2:e4:a6:50:98:40:df:93:57:27:cc:
                    c4:c1:1a:59:6c:17:d5:0c:33:7f:71:63:aa:ab:00:
                    bf:40:69:cf:91:a1:f1:8a:2a:fb:16:83:4d:92:0c:
                    be:a8:27:e5:0a:7d:1b:6a:22:38:af:6e:c5:3d:40:
                    e5:d9:b2:38:e4:73:49:9c:04:78:e0:80:b9:52:9d:
                    0e:78:69:08:55:5d:db:69:7d:27:41:49:3f:0e:c3:
                    af:67:0a:f3:5d:5a:ba:98:32:2e:e8:13:f4:b6:c8:
                    c3:2b:51:f0:73:86:52:fe:77:e3:b0:0c:79:66:71:
                    ae:9a:34:10:8c:c8:a7:6e:2f:15:a0:4d:9f:72:9e:
                    12:f9:9a:74:d4:74:05:a4:0d:13:93:65:54:8b:21:
                    4b:52:f4:9a:cb:2c:74:72:40:6a:14:b2:07:b2:9f:
                    c2:ec:c9:a4:ba:26:16:6c:31:81:72:09:90:8f:54:
                    ed:6b:15:40:66:c8:3a:c2:00:c7:81:ff:00:14:7f:
                    a0:5d:04:7c:6f:82:c8:8f:68:04:9c:bb:7f:34:f2:
                    f3:7a:04:2b:e6:89:88:53:95:24:21:43:f0:72:f1:
                    0e:60:b1:36:58:10:14:06:e3:41:00:3b:32:bd:6a:
                    40:13:7e:34:64:59:33:71:9a:95:d5:9a:99:3b:6c:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:88:5C:EF:EA:38:4D:BF:E1:0C:03:2E:26:89:CB:88:2B:38:28
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.17.224.0/24
                  212.17.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:65:3f:63:c7:0b:54:a4:47:b6:9c:4a:de:33:16:9b:06:
         f4:75:79:b9:9d:5e:08:c6:8c:cb:e5:bf:a2:f9:98:bb:36:0d:
         aa:ed:ff:30:d5:df:4d:26:55:91:27:91:a6:40:06:95:34:f4:
         47:08:c0:d6:41:48:48:9f:ae:65:30:96:11:28:86:79:33:1b:
         74:eb:a2:93:c7:3d:82:d5:32:06:a8:c8:37:ef:54:be:6b:c8:
         35:8e:59:c3:14:58:37:57:ac:ac:2d:e3:82:31:f7:3c:94:75:
         84:fa:1d:31:b8:d3:76:23:e2:25:1c:4b:b7:25:bf:67:8d:c0:
         86:5d:62:00:e2:28:26:73:28:b7:d2:f6:fd:74:e1:13:fb:10:
         c1:24:d7:dd:94:e7:f3:fc:0a:39:ed:89:d9:18:cc:76:e6:12:
         36:a1:ef:4b:1a:d2:fe:3f:c5:92:25:0a:91:4d:95:25:64:6d:
         4b:f2:a7:66:77:fa:c5:ad:e3:0f:1f:94:45:42:29:74:e4:d9:
         4a:9a:1a:9c:e6:ff:f9:49:d4:ab:ed:11:0c:2b:46:94:32:a9:
         52:04:e4:bf:83:72:00:00:19:f1:be:e5:a9:25:94:39:90:cc:
         41:f2:c2:a5:0a:62:11:f2:5c:3c:fc:21:12:74:af:9d:d5:77:
         a0:7d:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:45:03 2026 by rpki-client