Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          oJ562dUdOeHykN5tLoGahgk5J4cAPf24O02IZKupF9s=
Subject key identifier:   5D:6C:86:12:17:CC:01:96:70:D6:66:72:FF:24:C9:89:4F:22:21:76
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       13B5F4BF034DA590D1350A9ACBB12C776474C29F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time:             Fri 12 Jun 2026 11:20:52 +0000
ROA not before:           Fri 12 Jun 2026 11:15:52 +0000
ROA not after:            Fri 11 Jun 2027 11:20:52 +0000
asID:                     834
IP address blocks:        2.57.18.0/24 maxlen: 24
                          5.181.125.0/24 maxlen: 24
                          5.181.126.0/24 maxlen: 24
                          5.181.135.0/24 maxlen: 24
                          5.182.109.0/24 maxlen: 24
                          5.182.110.0/24 maxlen: 24
                          45.87.184.0/23 maxlen: 24
                          45.88.97.0/24 maxlen: 24
                          45.88.98.0/24 maxlen: 24
                          45.89.253.0/24 maxlen: 24
                          45.93.44.0/24 maxlen: 24
                          45.95.22.0/24 maxlen: 24
                          45.133.172.0/24 maxlen: 24
                          45.137.116.0/23 maxlen: 24
                          45.137.118.0/24 maxlen: 24
                          45.139.183.0/24 maxlen: 24
                          89.19.49.0/24 maxlen: 24
                          89.19.50.0/24 maxlen: 24
                          92.118.162.0/24 maxlen: 24
                          92.119.33.0/24 maxlen: 24
                          92.119.34.0/24 maxlen: 24
                          92.242.184.0/24 maxlen: 24
                          92.242.186.0/24 maxlen: 24
                          109.106.3.0/24 maxlen: 24
                          130.185.124.0/24 maxlen: 24
                          130.185.127.0/24 maxlen: 24
                          141.98.89.0/24 maxlen: 24
                          179.61.140.0/24 maxlen: 24
                          179.61.148.0/24 maxlen: 24
                          179.61.150.0/24 maxlen: 24
                          179.61.226.0/24 maxlen: 24
                          179.61.248.0/24 maxlen: 24
                          179.61.253.0/24 maxlen: 24
                          181.41.196.0/24 maxlen: 24
                          181.41.210.0/23 maxlen: 24
                          181.214.0.0/24 maxlen: 24
                          181.214.4.0/24 maxlen: 24
                          181.214.7.0/24 maxlen: 24
                          181.214.212.0/23 maxlen: 24
                          181.214.218.0/24 maxlen: 24
                          181.214.220.0/24 maxlen: 24
                          181.214.254.0/24 maxlen: 24
                          181.215.3.0/24 maxlen: 24
                          181.215.12.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          181.215.55.0/24 maxlen: 24
                          181.215.73.0/24 maxlen: 24
                          181.215.84.0/24 maxlen: 24
                          181.215.88.0/24 maxlen: 24
                          181.215.91.0/24 maxlen: 24
                          181.215.108.0/24 maxlen: 24
                          181.215.112.0/24 maxlen: 24
                          181.215.147.0/24 maxlen: 24
                          181.215.170.0/24 maxlen: 24
                          181.215.193.0/24 maxlen: 24
                          181.215.198.0/24 maxlen: 24
                          181.215.240.0/24 maxlen: 24
                          185.137.12.0/24 maxlen: 24
                          185.137.95.0/24 maxlen: 24
                          185.139.0.0/24 maxlen: 24
                          185.139.3.0/24 maxlen: 24
                          185.141.166.0/24 maxlen: 24
                          185.142.25.0/24 maxlen: 24
                          185.145.37.0/24 maxlen: 24
                          185.151.58.0/24 maxlen: 24
                          185.158.105.0/24 maxlen: 24
                          185.158.135.0/24 maxlen: 24
                          185.158.149.0/24 maxlen: 24
                          191.96.4.0/24 maxlen: 24
                          191.96.6.0/24 maxlen: 24
                          191.96.24.0/24 maxlen: 24
                          191.96.37.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.65.0/24 maxlen: 24
                          191.96.80.0/24 maxlen: 24
                          191.96.102.0/24 maxlen: 24
                          191.96.111.0/24 maxlen: 24
                          191.96.116.0/24 maxlen: 24
                          191.96.120.0/24 maxlen: 24
                          191.96.126.0/24 maxlen: 24
                          191.96.136.0/24 maxlen: 24
                          191.96.143.0/24 maxlen: 24
                          191.96.145.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          191.96.153.0/24 maxlen: 24
                          191.96.157.0/24 maxlen: 24
                          191.96.164.0/24 maxlen: 24
                          191.96.180.0/24 maxlen: 24
                          191.96.182.0/24 maxlen: 24
                          191.96.190.0/24 maxlen: 24
                          191.96.206.0/23 maxlen: 24
                          191.96.222.0/24 maxlen: 24
                          191.96.230.0/24 maxlen: 24
                          191.101.9.0/24 maxlen: 24
                          191.101.20.0/24 maxlen: 24
                          191.101.22.0/24 maxlen: 24
                          191.101.29.0/24 maxlen: 24
                          191.101.66.0/23 maxlen: 24
                          191.101.76.0/24 maxlen: 24
                          191.101.88.0/24 maxlen: 24
                          191.101.97.0/24 maxlen: 24
                          191.101.123.0/24 maxlen: 24
                          191.101.125.0/24 maxlen: 24
                          191.101.135.0/24 maxlen: 24
                          191.101.136.0/24 maxlen: 24
                          191.101.144.0/23 maxlen: 24
                          191.101.151.0/24 maxlen: 24
                          191.101.171.0/24 maxlen: 24
                          191.101.176.0/23 maxlen: 24
                          191.101.180.0/24 maxlen: 24
                          191.101.182.0/24 maxlen: 24
                          191.101.186.0/24 maxlen: 24
                          191.101.189.0/24 maxlen: 24
                          191.101.192.0/24 maxlen: 24
                          191.101.198.0/24 maxlen: 24
                          191.101.204.0/24 maxlen: 24
                          191.101.206.0/24 maxlen: 24
                          191.101.223.0/24 maxlen: 24
                          191.101.247.0/24 maxlen: 24
                          191.101.252.0/24 maxlen: 24
                          193.107.210.0/23 maxlen: 24
                          194.53.141.0/24 maxlen: 24
                          194.110.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 14:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:f4:bf:03:4d:a5:90:d1:35:0a:9a:cb:b1:2c:77:64:74:c2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jun 12 11:15:52 2026 GMT
            Not After : Jun 11 11:20:52 2027 GMT
        Subject: CN=5D6C861217CC019670D66672FF24C9894F222176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:e4:0c:69:4d:41:3b:f5:99:b9:62:9d:1b:
                    b6:7b:ac:19:bc:3e:b6:74:80:d1:61:54:ab:b3:c9:
                    77:62:0b:14:69:62:f5:f6:e3:3e:91:16:52:ce:eb:
                    3d:e2:dc:91:22:f7:ca:95:f6:ad:cb:dd:d4:cf:8c:
                    fc:0f:5f:37:1a:a3:28:9d:bd:3d:e8:2d:75:e8:97:
                    25:c2:e3:02:57:7b:a1:44:a0:4c:df:c1:23:a2:8c:
                    11:19:4f:9b:39:0b:a4:fa:e8:39:af:a1:87:79:3c:
                    2b:a7:0a:e0:a7:14:29:f5:d1:67:3b:80:47:93:ea:
                    c9:d4:a9:d9:3d:03:df:13:9b:55:cc:e8:9f:34:f5:
                    11:f8:ad:12:f3:8d:fc:49:61:1a:6e:1c:04:de:22:
                    25:5a:2f:07:a2:3e:b2:99:b2:69:18:f0:53:de:46:
                    2c:f5:e5:61:15:88:89:55:aa:58:b3:ee:c1:ec:1c:
                    bc:09:68:93:23:06:ac:07:13:da:96:11:21:fa:11:
                    99:ab:cd:77:c5:d1:5d:31:6d:34:42:34:f7:d0:21:
                    10:e7:81:1e:93:59:c2:4d:9c:68:f5:1d:f8:50:98:
                    ad:ce:e4:03:8e:80:7a:eb:f8:0f:db:4d:dd:a1:c0:
                    8f:41:df:27:56:6e:fc:d8:4b:26:af:2a:c6:ce:93:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:86:12:17:CC:01:96:70:D6:66:72:FF:24:C9:89:4F:22:21:76
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.18.0/24
                  5.181.125.0-5.181.126.255
                  5.181.135.0/24
                  5.182.109.0-5.182.110.255
                  45.87.184.0/23
                  45.88.97.0-45.88.98.255
                  45.89.253.0/24
                  45.93.44.0/24
                  45.95.22.0/24
                  45.133.172.0/24
                  45.137.116.0-45.137.118.255
                  45.139.183.0/24
                  89.19.49.0-89.19.50.255
                  92.118.162.0/24
                  92.119.33.0-92.119.34.255
                  92.242.184.0/24
                  92.242.186.0/24
                  109.106.3.0/24
                  130.185.124.0/24
                  130.185.127.0/24
                  141.98.89.0/24
                  179.61.140.0/24
                  179.61.148.0/24
                  179.61.150.0/24
                  179.61.226.0/24
                  179.61.248.0/24
                  179.61.253.0/24
                  181.41.196.0/24
                  181.41.210.0/23
                  181.214.0.0/24
                  181.214.4.0/24
                  181.214.7.0/24
                  181.214.212.0/23
                  181.214.218.0/24
                  181.214.220.0/24
                  181.214.254.0/24
                  181.215.3.0/24
                  181.215.12.0/24
                  181.215.31.0/24
                  181.215.55.0/24
                  181.215.73.0/24
                  181.215.84.0/24
                  181.215.88.0/24
                  181.215.91.0/24
                  181.215.108.0/24
                  181.215.112.0/24
                  181.215.147.0/24
                  181.215.170.0/24
                  181.215.193.0/24
                  181.215.198.0/24
                  181.215.240.0/24
                  185.137.12.0/24
                  185.137.95.0/24
                  185.139.0.0/24
                  185.139.3.0/24
                  185.141.166.0/24
                  185.142.25.0/24
                  185.145.37.0/24
                  185.151.58.0/24
                  185.158.105.0/24
                  185.158.135.0/24
                  185.158.149.0/24
                  191.96.4.0/24
                  191.96.6.0/24
                  191.96.24.0/24
                  191.96.37.0/24
                  191.96.61.0/24
                  191.96.65.0/24
                  191.96.80.0/24
                  191.96.102.0/24
                  191.96.111.0/24
                  191.96.116.0/24
                  191.96.120.0/24
                  191.96.126.0/24
                  191.96.136.0/24
                  191.96.143.0/24
                  191.96.145.0/24
                  191.96.149.0/24
                  191.96.153.0/24
                  191.96.157.0/24
                  191.96.164.0/24
                  191.96.180.0/24
                  191.96.182.0/24
                  191.96.190.0/24
                  191.96.206.0/23
                  191.96.222.0/24
                  191.96.230.0/24
                  191.101.9.0/24
                  191.101.20.0/24
                  191.101.22.0/24
                  191.101.29.0/24
                  191.101.66.0/23
                  191.101.76.0/24
                  191.101.88.0/24
                  191.101.97.0/24
                  191.101.123.0/24
                  191.101.125.0/24
                  191.101.135.0-191.101.136.255
                  191.101.144.0/23
                  191.101.151.0/24
                  191.101.171.0/24
                  191.101.176.0/23
                  191.101.180.0/24
                  191.101.182.0/24
                  191.101.186.0/24
                  191.101.189.0/24
                  191.101.192.0/24
                  191.101.198.0/24
                  191.101.204.0/24
                  191.101.206.0/24
                  191.101.223.0/24
                  191.101.247.0/24
                  191.101.252.0/24
                  193.107.210.0/23
                  194.53.141.0/24
                  194.110.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:69:c9:b1:21:23:31:e4:27:f0:20:51:9c:c8:f1:d2:b4:13:
         27:e1:68:f2:94:8b:9d:57:f6:5f:2c:7f:53:d1:ba:06:a7:b2:
         33:73:2e:a9:64:93:1f:16:3f:20:cb:42:c2:64:54:ae:bd:77:
         ca:50:f8:ad:16:4c:8c:33:f8:2a:7d:1e:32:cd:be:94:ca:4a:
         33:9b:d0:5e:78:75:6c:35:62:55:c1:f7:5e:6c:f9:f6:72:e3:
         73:ac:6b:95:d3:ec:2d:e1:e1:4f:8e:eb:e6:c2:f5:f8:32:3b:
         53:25:2b:f8:e7:3f:f7:8a:af:ab:cd:df:6a:55:f4:6d:b7:1c:
         3a:11:9a:e8:66:ad:60:52:5d:5a:9c:9c:3c:65:42:30:32:26:
         24:50:61:db:99:4e:25:37:1c:a8:a3:cd:04:ea:9a:0d:61:66:
         53:e5:79:64:79:71:84:52:c6:ae:ef:09:f1:b3:b9:b2:d9:9c:
         4e:16:53:36:aa:a0:b1:68:27:f2:43:ff:02:d1:2a:dd:29:73:
         ff:6f:b7:12:04:6d:bf:05:ac:e8:cb:19:46:e6:ad:9a:29:a6:
         5a:fe:ba:dc:2c:e8:40:09:e6:87:37:79:5e:0a:b7:42:11:41:
         a5:07:cd:c1:aa:19:23:b0:ef:5b:42:4a:68:dd:17:52:75:35:
         ca:84:14:3a
-----BEGIN CERTIFICATE-----
MIIH8TCCBtmgAwIBAgIUE7X0vwNNpZDRNQqay7Esd2R0wp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA2MTIxMTE1NTJaFw0yNzA2MTExMTIwNTJaMDMxMTAvBgNV
BAMTKDVENkM4NjEyMTdDQzAxOTY3MEQ2NjY3MkZGMjRDOTg5NEYyMjIxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEOQMaU1BO/WZuWKdG7Z7rBm8
PrZ0gNFhVKuzyXdiCxRpYvX24z6RFlLO6z3i3JEi98qV9q3L3dTPjPwPXzcaoyid
vT3oLXXolyXC4wJXe6FEoEzfwSOijBEZT5s5C6T66DmvoYd5PCunCuCnFCn10Wc7
gEeT6snUqdk9A98Tm1XM6J809RH4rRLzjfxJYRpuHATeIiVaLweiPrKZsmkY8FPe
Riz15WEViIlVqliz7sHsHLwJaJMjBqwHE9qWESH6EZmrzXfF0V0xbTRCNPfQIRDn
gR6TWcJNnGj1HfhQmK3O5AOOgHrr+A/bTd2hwI9B3ydWbvzYSyavKsbOk03zAgMB
AAGjggT7MIIE9zAdBgNVHQ4EFgQUXWyGEhfMAZZw1mZy/yTJiU8iIXYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDEQYIKwYBBQUHAQcBAf8EggMAMIIC/DCCAvgEAgABMIIC
8AMEAAI5EjAMAwQABbV9AwQABbV+AwQABbWHMAwDBAAFtm0DBAAFtm4DBAEtV7gw
DAMEAC1YYQMEAC1YYgMEAC1Z/QMEAC1dLAMEAC1fFgMEAC2FrDAMAwQCLYl0AwQA
LYl2AwQALYu3MAwDBABZEzEDBABZEzIDBABcdqIwDAMEAFx3IQMEAFx3IgMEAFzy
uAMEAFzyugMEAG1qAwMEAIK5fAMEAIK5fwMEAI1iWQMEALM9jAMEALM9lAMEALM9
lgMEALM94gMEALM9+AMEALM9/QMEALUpxAMEAbUp0gMEALXWAAMEALXWBAMEALXW
BwMEAbXW1AMEALXW2gMEALXW3AMEALXW/gMEALXXAwMEALXXDAMEALXXHwMEALXX
NwMEALXXSQMEALXXVAMEALXXWAMEALXXWwMEALXXbAMEALXXcAMEALXXkwMEALXX
qgMEALXXwQMEALXXxgMEALXX8AMEALmJDAMEALmJXwMEALmLAAMEALmLAwMEALmN
pgMEALmOGQMEALmRJQMEALmXOgMEALmeaQMEALmehwMEALmelQMEAL9gBAMEAL9g
BgMEAL9gGAMEAL9gJQMEAL9gPQMEAL9gQQMEAL9gUAMEAL9gZgMEAL9gbwMEAL9g
dAMEAL9geAMEAL9gfgMEAL9giAMEAL9gjwMEAL9gkQMEAL9glQMEAL9gmQMEAL9g
nQMEAL9gpAMEAL9gtAMEAL9gtgMEAL9gvgMEAb9gzgMEAL9g3gMEAL9g5gMEAL9l
CQMEAL9lFAMEAL9lFgMEAL9lHQMEAb9lQgMEAL9lTAMEAL9lWAMEAL9lYQMEAL9l
ewMEAL9lfTAMAwQAv2WHAwQAv2WIAwQBv2WQAwQAv2WXAwQAv2WrAwQBv2WwAwQA
v2W0AwQAv2W2AwQAv2W6AwQAv2W9AwQAv2XAAwQAv2XGAwQAv2XMAwQAv2XOAwQA
v2XfAwQAv2X3AwQAv2X8AwQBwWvSAwQAwjWNAwQAwm4NMA0GCSqGSIb3DQEBCwUA
A4IBAQCyacmxISMx5CfwIFGcyPHStBMn4WjylIudV/ZfLH9T0boGp7Izcy6pZJMf
Fj8gy0LCZFSuvXfKUPitFkyMM/gqfR4yzb6Uykozm9BeeHVsNWJVwfdebPn2cuNz
rGuV0+wt4eFPjuvmwvX4MjtTJSv45z/3iq+rzd9qVfRttxw6EZroZq1gUl1anJw8
ZUIwMiYkUGHbmU4lNxyoo80E6poNYWZT5XlkeXGEUsau7wnxs7my2ZxOFlM2qqCx
aCfyQ/8C0SrdKXP/b7cSBG2/BazoyxlG5q2aKaZa/rrcLOhACeaHN3leCrdCEUGl
B83BqhkjsO9bQkpo3RdSdTXKhBQ6
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:49 2026 by rpki-client