Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: Gc5CehP71EHNi4wVcdfyYUSoYHX7HuP/7jM4namTUAc=
Subject key identifier: 26:0F:70:F5:0C:EE:50:A4:F5:BD:9C:DC:3E:DE:63:5C:80:D4:C6:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 626C60B39AB0E81BB36E13D86698236714327FD1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
Signing time: Thu 16 Apr 2026 19:58:33 +0000
ROA not before: Thu 16 Apr 2026 19:53:33 +0000
ROA not after: Thu 15 Apr 2027 19:58:33 +0000
asID: 834
IP address blocks: 82.21.0.0/24 maxlen: 24
82.21.3.0/24 maxlen: 24
82.22.28.0/23 maxlen: 24
82.22.37.0/24 maxlen: 24
82.22.126.0/24 maxlen: 24
82.25.11.0/24 maxlen: 24
82.25.20.0/24 maxlen: 24
82.25.44.0/24 maxlen: 24
82.26.65.0/24 maxlen: 24
82.26.129.0/24 maxlen: 24
82.38.19.0/24 maxlen: 24
82.38.61.0/24 maxlen: 24
82.38.131.0/24 maxlen: 24
82.38.146.0/24 maxlen: 24
82.38.149.0/24 maxlen: 24
82.38.151.0/24 maxlen: 24
82.38.168.0/23 maxlen: 24
82.38.175.0/24 maxlen: 24
82.39.171.0/24 maxlen: 24
82.39.207.0/24 maxlen: 24
82.39.228.0/23 maxlen: 24
82.39.232.0/24 maxlen: 24
82.39.240.0/22 maxlen: 24
82.40.51.0/24 maxlen: 24
82.40.62.0/23 maxlen: 24
82.41.120.0/24 maxlen: 24
82.41.170.0/24 maxlen: 24
82.41.210.0/23 maxlen: 24
82.41.221.0/24 maxlen: 24
82.47.19.0/24 maxlen: 24
82.47.20.0/23 maxlen: 24
82.47.22.0/24 maxlen: 24
82.47.24.0/23 maxlen: 24
82.47.26.0/24 maxlen: 24
82.47.28.0/22 maxlen: 24
82.47.36.0/23 maxlen: 24
82.47.38.0/24 maxlen: 24
82.47.40.0/23 maxlen: 24
82.47.42.0/24 maxlen: 24
82.47.44.0/23 maxlen: 24
82.47.46.0/24 maxlen: 24
82.47.49.0/24 maxlen: 24
82.47.50.0/23 maxlen: 24
82.47.53.0/24 maxlen: 24
82.47.54.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.58.0/24 maxlen: 24
82.47.60.0/22 maxlen: 24
82.47.96.0/21 maxlen: 24
82.47.105.0/24 maxlen: 24
82.47.106.0/24 maxlen: 24
82.47.108.0/22 maxlen: 24
82.47.113.0/24 maxlen: 24
82.47.114.0/23 maxlen: 24
82.47.116.0/24 maxlen: 24
82.47.118.0/23 maxlen: 24
82.47.120.0/21 maxlen: 24
82.47.128.0/23 maxlen: 24
82.47.131.0/24 maxlen: 24
82.47.132.0/23 maxlen: 24
82.47.134.0/24 maxlen: 24
82.47.136.0/21 maxlen: 24
82.47.144.0/24 maxlen: 24
82.47.146.0/24 maxlen: 24
82.47.149.0/24 maxlen: 24
82.47.150.0/23 maxlen: 24
82.47.152.0/21 maxlen: 24
82.47.160.0/20 maxlen: 24
82.47.176.0/22 maxlen: 24
82.47.181.0/24 maxlen: 24
82.47.183.0/24 maxlen: 24
82.47.185.0/24 maxlen: 24
82.47.186.0/23 maxlen: 24
82.47.188.0/23 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/23 maxlen: 24
82.47.210.0/24 maxlen: 24
82.47.212.0/24 maxlen: 24
82.47.214.0/23 maxlen: 24
82.47.216.0/24 maxlen: 24
82.47.218.0/23 maxlen: 24
82.47.221.0/24 maxlen: 24
82.47.222.0/23 maxlen: 24
82.47.224.0/23 maxlen: 24
82.47.228.0/23 maxlen: 24
82.47.231.0/24 maxlen: 24
82.47.240.0/22 maxlen: 24
82.47.252.0/23 maxlen: 24
82.47.254.0/24 maxlen: 24
84.75.8.0/24 maxlen: 24
84.75.12.0/22 maxlen: 24
84.75.20.0/22 maxlen: 24
84.75.25.0/24 maxlen: 24
84.75.27.0/24 maxlen: 24
84.75.44.0/22 maxlen: 24
84.75.56.0/22 maxlen: 24
84.75.77.0/24 maxlen: 24
84.75.80.0/23 maxlen: 24
84.75.82.0/24 maxlen: 24
84.75.84.0/24 maxlen: 24
84.75.139.0/24 maxlen: 24
84.75.204.0/24 maxlen: 24
84.75.222.0/23 maxlen: 24
84.75.224.0/20 maxlen: 24
84.75.240.0/21 maxlen: 24
84.75.248.0/22 maxlen: 24
84.75.252.0/23 maxlen: 24
178.83.13.0/24 maxlen: 24
178.83.17.0/24 maxlen: 24
178.83.34.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.164.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
178.83.180.0/23 maxlen: 24
178.83.184.0/24 maxlen: 24
178.83.191.0/24 maxlen: 24
178.83.193.0/24 maxlen: 24
178.83.197.0/24 maxlen: 24
178.83.207.0/24 maxlen: 24
178.83.212.0/24 maxlen: 24
178.83.215.0/24 maxlen: 24
178.83.226.0/24 maxlen: 24
178.83.246.0/24 maxlen: 24
178.83.248.0/22 maxlen: 24
178.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6c:60:b3:9a:b0:e8:1b:b3:6e:13:d8:66:98:23:67:14:32:7f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 19:53:33 2026 GMT
Not After : Apr 15 19:58:33 2027 GMT
Subject: CN=260F70F50CEE50A4F5BD9CDC3EDE635C80D4C6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:e0:91:7b:91:22:aa:f4:9d:b7:bc:60:4f:
e8:64:8d:13:3b:27:98:60:84:70:bd:9a:d9:a3:3f:
9b:f1:dc:43:af:57:ed:38:84:2d:0b:8e:ea:96:12:
d1:b1:99:29:9c:cc:2b:c9:96:fe:ea:eb:98:57:26:
88:ee:fd:ca:b8:32:d8:ac:97:fa:e8:51:94:e0:b5:
1f:ee:1b:64:4c:0a:69:36:55:0d:a8:93:45:e5:48:
02:93:36:57:c5:d5:4a:cc:fe:72:79:4e:51:77:70:
de:4a:4d:32:4b:73:c6:00:8d:c5:0c:e1:07:10:59:
26:81:ac:c1:05:44:72:c2:90:62:36:eb:34:a5:49:
d6:e9:cd:cc:1c:4e:1f:2c:69:fc:a0:be:d8:75:95:
5c:36:87:0a:d0:e0:a3:6e:97:06:54:00:89:79:1a:
95:2b:eb:0e:12:8f:d1:32:73:da:a7:71:24:2a:75:
33:19:09:f2:e9:6f:42:87:0c:20:69:64:75:04:8c:
71:ee:61:56:5c:dd:c2:01:46:7b:2a:0b:dc:62:e9:
94:a3:0a:00:57:b5:12:a2:ca:25:9e:e1:ee:96:17:
d0:4d:6f:53:bf:e0:d2:00:83:e9:fe:93:03:27:8c:
05:6b:ce:d0:59:7a:40:64:2b:07:4c:5d:92:aa:56:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:70:F5:0C:EE:50:A4:F5:BD:9C:DC:3E:DE:63:5C:80:D4:C6:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.0.0/24
82.21.3.0/24
82.22.28.0/23
82.22.37.0/24
82.22.126.0/24
82.25.11.0/24
82.25.20.0/24
82.25.44.0/24
82.26.65.0/24
82.26.129.0/24
82.38.19.0/24
82.38.61.0/24
82.38.131.0/24
82.38.146.0/24
82.38.149.0/24
82.38.151.0/24
82.38.168.0/23
82.38.175.0/24
82.39.171.0/24
82.39.207.0/24
82.39.228.0/23
82.39.232.0/24
82.39.240.0/22
82.40.51.0/24
82.40.62.0/23
82.41.120.0/24
82.41.170.0/24
82.41.210.0/23
82.41.221.0/24
82.47.19.0-82.47.22.255
82.47.24.0-82.47.26.255
82.47.28.0/22
82.47.36.0-82.47.38.255
82.47.40.0-82.47.42.255
82.47.44.0-82.47.46.255
82.47.49.0-82.47.51.255
82.47.53.0-82.47.54.255
82.47.56.0/24
82.47.58.0/24
82.47.60.0/22
82.47.96.0/21
82.47.105.0-82.47.106.255
82.47.108.0/22
82.47.113.0-82.47.116.255
82.47.118.0-82.47.129.255
82.47.131.0-82.47.134.255
82.47.136.0-82.47.144.255
82.47.146.0/24
82.47.149.0-82.47.179.255
82.47.181.0/24
82.47.183.0/24
82.47.185.0-82.47.190.255
82.47.208.0-82.47.210.255
82.47.212.0/24
82.47.214.0-82.47.216.255
82.47.218.0/23
82.47.221.0-82.47.225.255
82.47.228.0/23
82.47.231.0/24
82.47.240.0/22
82.47.252.0-82.47.254.255
84.75.8.0/24
84.75.12.0/22
84.75.20.0/22
84.75.25.0/24
84.75.27.0/24
84.75.44.0/22
84.75.56.0/22
84.75.77.0/24
84.75.80.0-84.75.82.255
84.75.84.0/24
84.75.139.0/24
84.75.204.0/24
84.75.222.0-84.75.253.255
178.83.13.0/24
178.83.17.0/24
178.83.34.0/24
178.83.155.0/24
178.83.164.0/24
178.83.177.0/24
178.83.180.0/23
178.83.184.0/24
178.83.191.0/24
178.83.193.0/24
178.83.197.0/24
178.83.207.0/24
178.83.212.0/24
178.83.215.0/24
178.83.226.0/24
178.83.246.0/24
178.83.248.0/22
178.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:73:1f:b2:25:25:b1:1c:0f:5b:32:c0:75:fb:ed:2d:91:e1:
27:6c:c5:17:25:ac:80:45:43:a3:d2:a7:87:04:f0:9a:b5:a9:
30:1e:26:c6:73:93:a7:aa:1a:28:4f:b2:48:b7:ac:88:b2:da:
b2:3f:0e:20:a0:70:15:99:3a:df:70:26:59:d0:77:4f:ec:ac:
2e:3d:a8:1f:7e:aa:f4:e6:2b:d2:48:64:a7:b5:fb:14:25:c5:
59:9b:13:a0:a0:7e:ad:a1:a8:ac:7e:28:05:51:21:87:df:61:
a2:6c:c3:c2:10:1a:16:22:2c:62:28:c5:c4:ad:81:3a:3b:cd:
c8:c0:57:01:04:8f:b9:b5:2d:2b:15:ff:37:8d:e6:ea:7d:21:
33:fd:00:bc:48:35:f2:d5:72:e1:20:ac:35:0e:e8:9b:40:68:
f2:75:25:53:a4:ae:74:54:61:26:01:a6:4d:1d:4d:b1:a8:be:
c8:6f:91:59:58:32:0f:36:d7:d1:78:dc:a1:ed:8c:1e:fb:49:
e8:48:bd:53:25:a4:c2:7b:cf:83:88:6d:db:cd:79:ed:ba:69:
9d:94:da:ff:b7:f0:00:47:d9:ce:17:cf:82:07:67:20:ca:a1:
7b:a4:18:fc:80:9c:f5:8c:d4:f0:f8:fa:ca:00:20:75:8f:b5:
b9:c0:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:31:30 2026 by rpki-client