Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: cO1G14RKQjiRxAzQjyNcRVWoGcXRMe6RdU32jJga8Xo=
Subject key identifier: 2B:3F:54:74:D2:D8:61:60:2D:4A:B9:73:4A:03:A0:12:3A:7B:C5:D2
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 46083571D5E0B31BCDAE4149752DA8264ED3197B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time: Tue 28 Jul 2026 03:19:16 +0000
ROA not before: Tue 28 Jul 2026 03:14:16 +0000
ROA not after: Tue 27 Jul 2027 03:19:16 +0000
asID: 834
IP address blocks: 46.236.192.0/22 maxlen: 24
46.236.197.0/24 maxlen: 24
46.236.207.0/24 maxlen: 24
46.236.209.0/24 maxlen: 24
46.236.210.0/24 maxlen: 24
46.236.212.0/23 maxlen: 24
46.236.214.0/24 maxlen: 24
46.236.217.0/24 maxlen: 24
46.236.223.0/24 maxlen: 24
46.236.241.0/24 maxlen: 24
46.236.243.0/24 maxlen: 24
46.236.252.0/22 maxlen: 24
82.139.206.0/24 maxlen: 24
82.139.218.0/24 maxlen: 24
82.139.220.0/24 maxlen: 24
82.139.227.0/24 maxlen: 24
82.139.228.0/24 maxlen: 24
82.139.231.0/24 maxlen: 24
82.139.232.0/22 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
82.139.241.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
82.139.244.0/24 maxlen: 24
82.139.247.0/24 maxlen: 24
82.139.248.0/23 maxlen: 24
82.139.251.0/24 maxlen: 24
212.17.234.0/23 maxlen: 24
212.60.144.0/24 maxlen: 24
212.60.146.0/23 maxlen: 24
212.60.152.0/24 maxlen: 24
212.60.154.0/23 maxlen: 24
212.60.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:08:35:71:d5:e0:b3:1b:cd:ae:41:49:75:2d:a8:26:4e:d3:19:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 28 03:14:16 2026 GMT
Not After : Jul 27 03:19:16 2027 GMT
Subject: CN=2B3F5474D2D861602D4AB9734A03A0123A7BC5D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:28:22:8e:22:0f:e0:6e:61:fa:1f:7d:6f:
83:20:d7:f2:a0:5a:97:f7:c7:97:50:34:d7:07:3c:
af:66:9e:c5:5a:21:b0:a0:68:8e:68:15:97:df:b3:
cd:b6:5a:15:e9:63:d3:ea:1e:b3:4f:42:43:cc:8d:
05:82:0d:7e:78:81:e0:37:d8:b8:29:1b:69:d3:1d:
44:93:49:26:c7:50:fb:e2:a6:2c:4b:82:7c:7e:ce:
c0:06:b1:d1:27:bd:e0:73:9e:0c:b3:4b:3f:e0:66:
12:97:82:78:b6:02:56:25:30:72:2b:53:d9:f8:13:
e1:18:58:42:a2:be:c2:84:e9:c2:a3:da:af:82:b9:
46:c7:89:b7:7b:13:5f:62:c2:22:36:0d:58:39:c9:
06:08:92:0f:75:76:48:68:27:5b:0b:2c:f3:0f:a5:
e1:a1:cb:8e:d1:ff:80:ea:9d:a2:0e:31:30:ec:4e:
d1:1a:8d:3d:b6:0a:dc:29:91:23:6f:ef:ab:64:aa:
bb:24:c7:af:f5:72:ff:f9:0e:60:e7:ba:11:30:f3:
45:11:58:80:67:81:b1:b7:20:0c:53:9f:98:dd:58:
aa:46:37:64:d1:7d:c4:a3:49:dd:48:71:22:65:92:
7a:0e:07:6b:de:a6:8b:9c:8b:e5:31:06:66:8e:24:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:54:74:D2:D8:61:60:2D:4A:B9:73:4A:03:A0:12:3A:7B:C5:D2
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/22
46.236.197.0/24
46.236.207.0/24
46.236.209.0-46.236.210.255
46.236.212.0-46.236.214.255
46.236.217.0/24
46.236.223.0/24
46.236.241.0/24
46.236.243.0/24
46.236.252.0/22
82.139.206.0/24
82.139.218.0/24
82.139.220.0/24
82.139.227.0-82.139.228.255
82.139.231.0-82.139.236.255
82.139.238.0/24
82.139.241.0/24
82.139.243.0-82.139.244.255
82.139.247.0-82.139.249.255
82.139.251.0/24
212.17.234.0/23
212.60.144.0/24
212.60.146.0/23
212.60.152.0/24
212.60.154.0/23
212.60.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0d:f4:d0:97:1d:62:72:de:c9:24:36:9a:78:f7:58:da:bc:
ed:67:3d:25:79:19:dd:a2:53:7c:b6:0c:f2:50:71:fd:20:18:
18:f4:b0:7a:34:26:83:a7:99:7e:cf:e1:e6:6c:ba:31:ac:bd:
4a:17:10:49:3c:52:b1:15:42:4b:0b:e0:d0:e4:6b:7e:34:4a:
a2:2b:d1:1a:24:bb:6f:31:cd:09:b5:fe:b8:b1:57:0f:02:4b:
cc:0b:8f:a6:bb:61:83:fc:2e:16:bb:fb:cc:f0:2c:64:7f:27:
21:51:99:27:ff:b8:41:18:23:6e:47:b0:98:05:92:90:5c:5a:
ce:84:92:7d:45:8e:f8:0e:07:e3:58:b8:a3:76:47:9e:ce:45:
a6:c1:b4:cd:c0:c1:66:41:1d:02:8c:d1:7f:32:fe:94:8d:ae:
f8:2b:d5:cd:f3:0e:e1:07:a1:24:c4:17:85:a9:94:ef:26:0f:
80:4b:a2:1e:29:cb:38:45:e5:30:f2:52:a5:f4:b0:64:f6:d6:
38:66:50:83:d3:10:af:b8:d1:9e:68:f8:27:1c:25:02:72:5c:
d0:6f:68:c1:a4:85:9c:38:27:06:21:08:02:1d:cc:b2:1d:f0:
e2:05:42:af:4a:f2:8c:31:37:f3:e4:ca:e9:a4:b1:2d:1b:87:
f6:36:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:00 2026 by rpki-client