Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: KUdN8Wf3YLgt6CFT3TlA++KHZ+4jBLFeZsp/vMaacmw=
Subject key identifier: 3C:BF:40:6E:16:AB:D6:E3:F4:B6:65:7E:DB:DA:20:0E:F2:93:5C:95
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 07705E35F57239456933AFF9CC12A4480C2DF70B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time: Sun 20 Sep 2026 12:03:41 +0000
ROA not before: Sun 20 Sep 2026 11:58:41 +0000
ROA not after: Sun 19 Sep 2027 12:03:41 +0000
asID: 834
IP address blocks: 2.57.18.0/24 maxlen: 24
5.181.135.0/24 maxlen: 24
5.182.109.0/24 maxlen: 24
5.182.110.0/24 maxlen: 24
45.87.185.0/24 maxlen: 24
45.88.98.0/24 maxlen: 24
45.89.253.0/24 maxlen: 24
45.93.44.0/24 maxlen: 24
45.93.47.0/24 maxlen: 24
45.95.22.0/23 maxlen: 24
45.133.172.0/24 maxlen: 24
45.137.28.0/23 maxlen: 24
45.137.118.0/24 maxlen: 24
45.139.183.0/24 maxlen: 24
89.19.49.0/24 maxlen: 24
89.19.50.0/24 maxlen: 24
92.118.162.0/24 maxlen: 24
92.119.33.0/24 maxlen: 24
92.119.34.0/23 maxlen: 24
92.242.184.0/24 maxlen: 24
130.185.124.0/24 maxlen: 24
141.98.89.0/24 maxlen: 24
179.61.134.0/24 maxlen: 24
179.61.148.0/24 maxlen: 24
179.61.152.0/24 maxlen: 24
179.61.208.0/23 maxlen: 24
179.61.226.0/24 maxlen: 24
179.61.248.0/24 maxlen: 24
179.61.253.0/24 maxlen: 24
181.41.195.0/24 maxlen: 24
181.41.219.0/24 maxlen: 24
181.214.7.0/24 maxlen: 24
181.214.27.0/24 maxlen: 24
181.214.164.0/23 maxlen: 24
181.214.166.0/24 maxlen: 24
181.214.182.0/24 maxlen: 24
181.214.209.0/24 maxlen: 24
181.214.218.0/24 maxlen: 24
181.214.238.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
181.215.3.0/24 maxlen: 24
181.215.12.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.31.0/24 maxlen: 24
181.215.55.0/24 maxlen: 24
181.215.58.0/24 maxlen: 24
181.215.64.0/24 maxlen: 24
181.215.73.0/24 maxlen: 24
181.215.91.0/24 maxlen: 24
181.215.95.0/24 maxlen: 24
181.215.108.0/24 maxlen: 24
181.215.112.0/24 maxlen: 24
181.215.147.0/24 maxlen: 24
181.215.170.0/24 maxlen: 24
181.215.182.0/24 maxlen: 24
181.215.238.0/24 maxlen: 24
181.215.240.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
185.158.135.0/24 maxlen: 24
185.158.149.0/24 maxlen: 24
185.173.35.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.65.0/24 maxlen: 24
191.96.102.0/23 maxlen: 24
191.96.108.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.116.0/24 maxlen: 24
191.96.120.0/24 maxlen: 24
191.96.126.0/24 maxlen: 24
191.96.136.0/24 maxlen: 24
191.96.149.0/24 maxlen: 24
191.96.153.0/24 maxlen: 24
191.96.157.0/24 maxlen: 24
191.96.173.0/24 maxlen: 24
191.96.175.0/24 maxlen: 24
191.96.180.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.96.190.0/24 maxlen: 24
191.96.206.0/23 maxlen: 24
191.96.222.0/24 maxlen: 24
191.96.245.0/24 maxlen: 24
191.96.255.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
191.101.39.0/24 maxlen: 24
191.101.66.0/23 maxlen: 24
191.101.88.0/23 maxlen: 24
191.101.97.0/24 maxlen: 24
191.101.102.0/24 maxlen: 24
191.101.116.0/24 maxlen: 24
191.101.120.0/24 maxlen: 24
191.101.124.0/23 maxlen: 24
191.101.151.0/24 maxlen: 24
191.101.171.0/24 maxlen: 24
191.101.176.0/23 maxlen: 24
191.101.182.0/24 maxlen: 24
191.101.192.0/24 maxlen: 24
191.101.198.0/24 maxlen: 24
191.101.204.0/24 maxlen: 24
191.101.236.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
191.101.252.0/24 maxlen: 24
193.107.210.0/24 maxlen: 24
194.53.141.0/24 maxlen: 24
194.110.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:70:5e:35:f5:72:39:45:69:33:af:f9:cc:12:a4:48:0c:2d:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 20 11:58:41 2026 GMT
Not After : Sep 19 12:03:41 2027 GMT
Subject: CN=3CBF406E16ABD6E3F4B6657EDBDA200EF2935C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:2e:10:37:f2:12:1e:56:ee:dd:2b:8f:2e:
ef:6a:d6:cf:c1:1f:18:f4:9b:10:c0:70:3f:0b:35:
f6:30:78:bc:9b:63:22:d6:15:d7:f6:e5:51:59:eb:
b0:7c:a6:36:0b:ce:08:45:00:7e:8a:13:b9:8b:ae:
78:20:5a:ca:54:07:3f:5f:da:8f:a7:3f:eb:57:b8:
d7:34:61:23:70:c6:d2:d9:72:3a:c5:42:33:8c:33:
47:ca:43:f1:a7:82:2e:63:ad:e2:22:ba:e4:86:51:
f4:2b:fd:2c:bf:84:b0:a1:c6:a0:31:37:06:30:b1:
45:a1:39:4c:d8:26:1f:e5:d6:80:b0:38:0e:39:7c:
63:9b:c3:6a:c8:52:d2:d1:e6:f6:f0:7e:5c:9c:dd:
36:3f:63:2c:6a:ae:3c:2d:cd:66:ee:7d:2f:ec:a2:
ee:49:08:6a:cd:97:05:ab:41:59:c3:be:5a:45:a0:
3c:c5:f5:32:5b:fd:84:69:78:f4:1c:3a:4e:cf:22:
6e:93:7e:74:bc:64:59:31:39:fc:9a:df:5d:4a:15:
26:8e:40:f5:39:a3:f4:a6:4d:55:9c:09:30:5c:2d:
9e:59:5f:63:8c:bf:74:58:bd:0e:76:49:cd:e6:1c:
70:09:08:6a:6a:63:ac:20:a3:8a:bd:49:4e:c7:08:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:40:6E:16:AB:D6:E3:F4:B6:65:7E:DB:DA:20:0E:F2:93:5C:95
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
5.181.135.0/24
5.182.109.0-5.182.110.255
45.87.185.0/24
45.88.98.0/24
45.89.253.0/24
45.93.44.0/24
45.93.47.0/24
45.95.22.0/23
45.133.172.0/24
45.137.28.0/23
45.137.118.0/24
45.139.183.0/24
89.19.49.0-89.19.50.255
92.118.162.0/24
92.119.33.0-92.119.35.255
92.242.184.0/24
130.185.124.0/24
141.98.89.0/24
179.61.134.0/24
179.61.148.0/24
179.61.152.0/24
179.61.208.0/23
179.61.226.0/24
179.61.248.0/24
179.61.253.0/24
181.41.195.0/24
181.41.219.0/24
181.214.7.0/24
181.214.27.0/24
181.214.164.0-181.214.166.255
181.214.182.0/24
181.214.209.0/24
181.214.218.0/24
181.214.238.0/24
181.214.240.0/24
181.215.3.0/24
181.215.12.0/24
181.215.22.0/24
181.215.31.0/24
181.215.55.0/24
181.215.58.0/24
181.215.64.0/24
181.215.73.0/24
181.215.91.0/24
181.215.95.0/24
181.215.108.0/24
181.215.112.0/24
181.215.147.0/24
181.215.170.0/24
181.215.182.0/24
181.215.238.0/24
181.215.240.0/24
185.151.58.0/24
185.158.105.0/24
185.158.135.0/24
185.158.149.0/24
185.173.35.0/24
191.96.24.0/24
191.96.61.0/24
191.96.65.0/24
191.96.102.0/23
191.96.108.0/24
191.96.111.0/24
191.96.116.0/24
191.96.120.0/24
191.96.126.0/24
191.96.136.0/24
191.96.149.0/24
191.96.153.0/24
191.96.157.0/24
191.96.173.0/24
191.96.175.0/24
191.96.180.0/24
191.96.185.0/24
191.96.190.0/24
191.96.206.0/23
191.96.222.0/24
191.96.245.0/24
191.96.255.0/24
191.101.29.0/24
191.101.39.0/24
191.101.66.0/23
191.101.88.0/23
191.101.97.0/24
191.101.102.0/24
191.101.116.0/24
191.101.120.0/24
191.101.124.0/23
191.101.151.0/24
191.101.171.0/24
191.101.176.0/23
191.101.182.0/24
191.101.192.0/24
191.101.198.0/24
191.101.204.0/24
191.101.236.0/24
191.101.240.0/24
191.101.252.0/24
193.107.210.0/24
194.53.141.0/24
194.110.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:36:5d:2c:ac:65:84:ab:82:4c:d6:24:55:b7:80:d0:b9:
73:b7:75:10:9e:f8:c4:b7:35:9d:db:75:ac:38:b4:1a:72:c7:
f2:bf:bd:47:72:68:a8:be:12:d3:44:69:56:1e:84:6b:ad:0c:
c8:27:97:2a:ce:f5:56:3a:ad:2b:33:80:21:53:00:f8:94:2d:
6f:a3:cf:e5:37:26:63:dc:5f:8d:27:6a:16:e4:5d:ca:a8:b6:
43:43:5b:67:ec:eb:b7:38:04:27:a1:79:75:54:6c:54:46:a9:
2e:76:27:3d:70:8f:9b:7d:0a:af:95:a3:39:2e:4e:8e:2c:9b:
af:cc:e4:1e:ad:f3:06:ce:60:6f:af:be:38:0c:f6:62:9f:9c:
21:be:71:d5:53:b6:4f:a2:c4:c3:ec:eb:71:83:a9:55:26:84:
50:e4:ca:9f:1b:09:b3:00:24:e5:3b:f9:0b:a9:70:8e:1c:e4:
9e:0a:ea:2d:09:81:ca:1b:90:b3:fe:fa:f5:d0:4a:ee:8c:bf:
41:f4:e6:38:30:55:16:62:82:10:67:70:ae:6f:22:75:c9:c1:
de:37:0e:ce:7c:a7:33:53:1f:88:28:0e:e7:fe:ba:34:d8:f5:
b8:68:95:76:e9:b0:6d:66:43:ca:e5:3a:18:de:ad:c2:c9:e2:
d5:3e:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:40 2026 by rpki-client