Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: LtLDGPit6szbUrUuH8XVL+FTsyGF73NjJhDKtoZdOa8=
Subject key identifier: 92:BB:88:5C:EF:EA:38:4D:BF:E1:0C:03:2E:26:89:CB:88:2B:38:28
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2F8EBD23D1950E9858F95E8DFA2F5DBD8235899F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time: Sat 19 Sep 2026 06:11:44 +0000
ROA not before: Sat 19 Sep 2026 06:06:44 +0000
ROA not after: Sat 18 Sep 2027 06:11:44 +0000
asID: 834
IP address blocks: 212.17.224.0/24 maxlen: 24
212.17.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8e:bd:23:d1:95:0e:98:58:f9:5e:8d:fa:2f:5d:bd:82:35:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 19 06:06:44 2026 GMT
Not After : Sep 18 06:11:44 2027 GMT
Subject: CN=92BB885CEFEA384DBFE10C032E2689CB882B3828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:00:a2:e4:a6:50:98:40:df:93:57:27:cc:
c4:c1:1a:59:6c:17:d5:0c:33:7f:71:63:aa:ab:00:
bf:40:69:cf:91:a1:f1:8a:2a:fb:16:83:4d:92:0c:
be:a8:27:e5:0a:7d:1b:6a:22:38:af:6e:c5:3d:40:
e5:d9:b2:38:e4:73:49:9c:04:78:e0:80:b9:52:9d:
0e:78:69:08:55:5d:db:69:7d:27:41:49:3f:0e:c3:
af:67:0a:f3:5d:5a:ba:98:32:2e:e8:13:f4:b6:c8:
c3:2b:51:f0:73:86:52:fe:77:e3:b0:0c:79:66:71:
ae:9a:34:10:8c:c8:a7:6e:2f:15:a0:4d:9f:72:9e:
12:f9:9a:74:d4:74:05:a4:0d:13:93:65:54:8b:21:
4b:52:f4:9a:cb:2c:74:72:40:6a:14:b2:07:b2:9f:
c2:ec:c9:a4:ba:26:16:6c:31:81:72:09:90:8f:54:
ed:6b:15:40:66:c8:3a:c2:00:c7:81:ff:00:14:7f:
a0:5d:04:7c:6f:82:c8:8f:68:04:9c:bb:7f:34:f2:
f3:7a:04:2b:e6:89:88:53:95:24:21:43:f0:72:f1:
0e:60:b1:36:58:10:14:06:e3:41:00:3b:32:bd:6a:
40:13:7e:34:64:59:33:71:9a:95:d5:9a:99:3b:6c:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:88:5C:EF:EA:38:4D:BF:E1:0C:03:2E:26:89:CB:88:2B:38:28
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.224.0/24
212.17.232.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7c:65:3f:63:c7:0b:54:a4:47:b6:9c:4a:de:33:16:9b:06:
f4:75:79:b9:9d:5e:08:c6:8c:cb:e5:bf:a2:f9:98:bb:36:0d:
aa:ed:ff:30:d5:df:4d:26:55:91:27:91:a6:40:06:95:34:f4:
47:08:c0:d6:41:48:48:9f:ae:65:30:96:11:28:86:79:33:1b:
74:eb:a2:93:c7:3d:82:d5:32:06:a8:c8:37:ef:54:be:6b:c8:
35:8e:59:c3:14:58:37:57:ac:ac:2d:e3:82:31:f7:3c:94:75:
84:fa:1d:31:b8:d3:76:23:e2:25:1c:4b:b7:25:bf:67:8d:c0:
86:5d:62:00:e2:28:26:73:28:b7:d2:f6:fd:74:e1:13:fb:10:
c1:24:d7:dd:94:e7:f3:fc:0a:39:ed:89:d9:18:cc:76:e6:12:
36:a1:ef:4b:1a:d2:fe:3f:c5:92:25:0a:91:4d:95:25:64:6d:
4b:f2:a7:66:77:fa:c5:ad:e3:0f:1f:94:45:42:29:74:e4:d9:
4a:9a:1a:9c:e6:ff:f9:49:d4:ab:ed:11:0c:2b:46:94:32:a9:
52:04:e4:bf:83:72:00:00:19:f1:be:e5:a9:25:94:39:90:cc:
41:f2:c2:a5:0a:62:11:f2:5c:3c:fc:21:12:74:af:9d:d5:77:
a0:7d:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:45:03 2026 by rpki-client