Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: jdOQy+87EhKCpG2M/9J5BMpK2dR8Xj/Uji9BxA3rh7c=
Subject key identifier: EF:37:F2:4A:81:B0:4B:76:12:CA:7D:3B:FA:21:F3:E5:3C:71:28:4B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3E6F38F2A64259BAB3B086729B1EE39DF687C914
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
Signing time: Sun 20 Sep 2026 04:05:56 +0000
ROA not before: Sun 20 Sep 2026 04:00:56 +0000
ROA not after: Sun 19 Sep 2027 04:05:56 +0000
asID: 834
IP address blocks: 82.21.1.0/24 maxlen: 24
82.21.96.0/24 maxlen: 24
82.21.188.0/24 maxlen: 24
82.22.21.0/24 maxlen: 24
82.22.49.0/24 maxlen: 24
82.22.161.0/24 maxlen: 24
82.23.2.0/24 maxlen: 24
82.23.14.0/24 maxlen: 24
82.23.137.0/24 maxlen: 24
82.23.172.0/24 maxlen: 24
82.24.4.0/24 maxlen: 24
82.24.21.0/24 maxlen: 24
82.24.69.0/24 maxlen: 24
82.24.71.0/24 maxlen: 24
82.24.83.0/24 maxlen: 24
82.25.10.0/24 maxlen: 24
82.25.13.0/24 maxlen: 24
82.25.30.0/24 maxlen: 24
82.25.145.0/24 maxlen: 24
82.26.78.0/23 maxlen: 24
82.26.82.0/24 maxlen: 24
82.26.119.0/24 maxlen: 24
82.26.127.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
82.26.147.0/24 maxlen: 24
82.26.155.0/24 maxlen: 24
82.27.39.0/24 maxlen: 24
82.27.45.0/24 maxlen: 24
82.27.67.0/24 maxlen: 24
82.27.79.0/24 maxlen: 24
82.27.95.0/24 maxlen: 24
82.27.110.0/24 maxlen: 24
82.27.131.0/24 maxlen: 24
82.27.133.0/24 maxlen: 24
82.27.135.0/24 maxlen: 24
82.29.64.0/24 maxlen: 24
82.38.147.0/24 maxlen: 24
82.38.168.0/24 maxlen: 24
82.38.183.0/24 maxlen: 24
82.39.166.0/24 maxlen: 24
82.39.185.0/24 maxlen: 24
82.39.228.0/22 maxlen: 24
82.39.240.0/22 maxlen: 24
82.39.246.0/24 maxlen: 24
82.41.37.0/24 maxlen: 24
82.41.129.0/24 maxlen: 24
82.41.202.0/24 maxlen: 24
82.41.232.0/24 maxlen: 24
82.41.236.0/24 maxlen: 24
82.41.238.0/24 maxlen: 24
82.47.19.0/24 maxlen: 24
82.47.28.0/24 maxlen: 24
82.47.61.0/24 maxlen: 24
82.47.114.0/24 maxlen: 24
82.47.126.0/24 maxlen: 24
82.47.128.0/24 maxlen: 24
82.47.130.0/24 maxlen: 24
82.47.136.0/24 maxlen: 24
82.47.149.0/24 maxlen: 24
82.47.155.0/24 maxlen: 24
82.47.162.0/24 maxlen: 24
82.47.165.0/24 maxlen: 24
82.47.167.0/24 maxlen: 24
82.47.170.0/24 maxlen: 24
82.47.172.0/24 maxlen: 24
82.47.174.0/24 maxlen: 24
82.47.176.0/24 maxlen: 24
82.47.181.0/24 maxlen: 24
82.47.182.0/24 maxlen: 24
82.47.185.0/24 maxlen: 24
82.47.191.0/24 maxlen: 24
82.47.195.0/24 maxlen: 24
82.47.198.0/23 maxlen: 24
82.47.201.0/24 maxlen: 24
82.47.205.0/24 maxlen: 24
82.47.206.0/24 maxlen: 24
82.47.247.0/24 maxlen: 24
82.47.249.0/24 maxlen: 24
82.47.255.0/24 maxlen: 24
84.75.3.0/24 maxlen: 24
84.75.51.0/24 maxlen: 24
84.75.55.0/24 maxlen: 24
84.75.62.0/24 maxlen: 24
84.75.64.0/24 maxlen: 24
84.75.80.0/23 maxlen: 24
84.75.133.0/24 maxlen: 24
84.75.135.0/24 maxlen: 24
84.75.139.0/24 maxlen: 24
84.75.140.0/24 maxlen: 24
84.75.146.0/23 maxlen: 24
84.75.149.0/24 maxlen: 24
84.75.153.0/24 maxlen: 24
84.75.156.0/24 maxlen: 24
84.75.168.0/24 maxlen: 24
84.75.176.0/23 maxlen: 24
84.75.185.0/24 maxlen: 24
84.75.204.0/24 maxlen: 24
84.75.222.0/23 maxlen: 24
84.75.246.0/24 maxlen: 24
84.75.252.0/23 maxlen: 24
178.83.29.0/24 maxlen: 24
178.83.30.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.40.0/24 maxlen: 24
178.83.48.0/23 maxlen: 24
178.83.56.0/24 maxlen: 24
178.83.65.0/24 maxlen: 24
178.83.108.0/24 maxlen: 24
178.83.111.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.144.0/24 maxlen: 24
178.83.152.0/24 maxlen: 24
178.83.161.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
178.83.182.0/24 maxlen: 24
178.83.191.0/24 maxlen: 24
178.83.220.0/23 maxlen: 24
178.83.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6f:38:f2:a6:42:59:ba:b3:b0:86:72:9b:1e:e3:9d:f6:87:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 20 04:00:56 2026 GMT
Not After : Sep 19 04:05:56 2027 GMT
Subject: CN=EF37F24A81B04B7612CA7D3BFA21F3E53C71284B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:72:16:5e:1b:87:b0:48:9d:65:c2:53:ae:
8b:b9:56:a6:07:ca:c1:db:c5:a9:c5:de:a4:df:70:
a8:35:f0:72:3d:4e:a3:03:e1:87:97:34:ab:31:dd:
17:11:37:6a:31:5d:06:36:6c:77:d0:be:8f:98:ce:
42:ed:0c:b5:7e:80:19:e7:a6:12:6a:40:be:93:f7:
ba:ea:0e:5a:72:61:c3:97:02:1b:0e:4c:01:f6:14:
ce:8c:2b:66:47:4d:be:a5:2b:48:e8:b8:d7:d3:4b:
7e:d3:8b:12:eb:6c:af:a8:ba:de:2d:66:05:d3:e6:
5b:f0:19:38:4a:e2:0c:1e:3b:61:03:1a:ac:ed:f7:
be:60:07:30:7c:97:b9:8d:b6:8b:c4:ec:b2:7d:01:
43:e2:a4:a2:1c:e7:33:30:cb:37:06:4a:49:8c:c9:
e2:20:d3:29:f5:a2:3c:06:8e:79:16:ab:18:ac:b4:
2a:db:62:2e:43:31:e3:7d:22:59:bc:87:f7:36:b5:
55:75:36:5b:74:45:a0:1f:19:8b:0e:72:db:d4:43:
8b:7a:21:2d:0e:6a:39:f8:04:d3:64:f0:57:3e:3c:
43:17:6d:26:6d:49:b2:92:02:2e:a8:f7:a7:1e:5e:
6d:48:ba:ce:73:ed:5b:b4:8e:6f:71:35:2d:ea:a1:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:F2:4A:81:B0:4B:76:12:CA:7D:3B:FA:21:F3:E5:3C:71:28:4B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.1.0/24
82.21.96.0/24
82.21.188.0/24
82.22.21.0/24
82.22.49.0/24
82.22.161.0/24
82.23.2.0/24
82.23.14.0/24
82.23.137.0/24
82.23.172.0/24
82.24.4.0/24
82.24.21.0/24
82.24.69.0/24
82.24.71.0/24
82.24.83.0/24
82.25.10.0/24
82.25.13.0/24
82.25.30.0/24
82.25.145.0/24
82.26.78.0/23
82.26.82.0/24
82.26.119.0/24
82.26.127.0/24
82.26.141.0-82.26.142.255
82.26.147.0/24
82.26.155.0/24
82.27.39.0/24
82.27.45.0/24
82.27.67.0/24
82.27.79.0/24
82.27.95.0/24
82.27.110.0/24
82.27.131.0/24
82.27.133.0/24
82.27.135.0/24
82.29.64.0/24
82.38.147.0/24
82.38.168.0/24
82.38.183.0/24
82.39.166.0/24
82.39.185.0/24
82.39.228.0/22
82.39.240.0/22
82.39.246.0/24
82.41.37.0/24
82.41.129.0/24
82.41.202.0/24
82.41.232.0/24
82.41.236.0/24
82.41.238.0/24
82.47.19.0/24
82.47.28.0/24
82.47.61.0/24
82.47.114.0/24
82.47.126.0/24
82.47.128.0/24
82.47.130.0/24
82.47.136.0/24
82.47.149.0/24
82.47.155.0/24
82.47.162.0/24
82.47.165.0/24
82.47.167.0/24
82.47.170.0/24
82.47.172.0/24
82.47.174.0/24
82.47.176.0/24
82.47.181.0-82.47.182.255
82.47.185.0/24
82.47.191.0/24
82.47.195.0/24
82.47.198.0/23
82.47.201.0/24
82.47.205.0-82.47.206.255
82.47.247.0/24
82.47.249.0/24
82.47.255.0/24
84.75.3.0/24
84.75.51.0/24
84.75.55.0/24
84.75.62.0/24
84.75.64.0/24
84.75.80.0/23
84.75.133.0/24
84.75.135.0/24
84.75.139.0-84.75.140.255
84.75.146.0/23
84.75.149.0/24
84.75.153.0/24
84.75.156.0/24
84.75.168.0/24
84.75.176.0/23
84.75.185.0/24
84.75.204.0/24
84.75.222.0/23
84.75.246.0/24
84.75.252.0/23
178.83.29.0-178.83.30.255
178.83.36.0/24
178.83.40.0/24
178.83.48.0/23
178.83.56.0/24
178.83.65.0/24
178.83.108.0/24
178.83.111.0/24
178.83.129.0/24
178.83.131.0/24
178.83.144.0/24
178.83.152.0/24
178.83.161.0/24
178.83.165.0/24
178.83.182.0/24
178.83.191.0/24
178.83.220.0/23
178.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5d:52:90:2e:62:e8:08:a1:60:cd:07:38:91:9f:0e:06:1e:
41:2d:66:aa:6a:5d:ec:d1:a3:19:8d:09:c5:c8:e6:88:aa:f9:
ff:7d:49:61:83:68:27:82:f9:bb:9b:ec:7d:19:15:1e:17:a0:
15:85:65:f4:5a:9a:80:c4:d4:c8:46:e1:bf:a3:05:ff:56:b5:
06:2c:60:73:e2:06:e4:13:60:f5:ff:a1:cb:64:69:6b:dc:58:
e4:cf:23:22:f3:4b:e6:dd:50:e4:1b:e8:04:00:05:0d:b2:b8:
37:0b:a7:3d:40:dd:d4:91:0c:c0:d2:80:4f:01:7b:11:ef:0d:
74:f1:50:63:a6:da:05:ce:d0:3d:58:26:ca:24:05:a4:80:72:
42:8f:0f:4a:ea:d7:5d:3b:95:0f:f0:d9:9f:78:fa:e7:32:95:
6c:00:5b:e3:c9:de:18:69:01:65:8f:73:4d:17:21:4d:08:b7:
c5:7c:c0:b4:7b:1e:bb:db:af:0a:20:6e:69:34:67:72:9d:af:
df:c5:36:69:41:d1:46:97:5e:b6:04:3e:8c:67:de:85:fa:3a:
03:75:28:57:e1:2f:0b:69:a4:da:4b:0f:b6:a4:88:f8:02:54:
13:d4:7d:8e:87:01:4a:8d:1e:5d:dd:fe:52:be:c2:97:bb:09:
17:34:7b:5a
-----BEGIN CERTIFICATE-----
MIIH2zCCBsOgAwIBAgIUPm848qZCWbqzsIZymx7jnfaHyRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjAwNDAwNTZaFw0yNzA5MTkwNDA1NTZaMDMxMTAvBgNV
BAMTKEVGMzdGMjRBODFCMDRCNzYxMkNBN0QzQkZBMjFGM0U1M0M3MTI4NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7XIWXhuHsEidZcJTrou5VqYH
ysHbxanF3qTfcKg18HI9TqMD4YeXNKsx3RcRN2oxXQY2bHfQvo+YzkLtDLV+gBnn
phJqQL6T97rqDlpyYcOXAhsOTAH2FM6MK2ZHTb6lK0jouNfTS37TixLrbK+out4t
ZgXT5lvwGThK4gweO2EDGqzt975gBzB8l7mNtovE7LJ9AUPipKIc5zMwyzcGSkmM
yeIg0yn1ojwGjnkWqxistCrbYi5DMeN9Ilm8h/c2tVV1Nlt0RaAfGYsOctvUQ4t6
IS0Oajn4BNNk8Fc+PEMXbSZtSbKSAi6o96ceXm1Ius5z7Vu0jm9xNS3qoYeNAgMB
AAGjggTlMIIE4TAdBgNVHQ4EFgQU7zfySoGwS3YSyn07+iHz5TxxKEswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC+wYIKwYBBQUHAQcBAf8EggLqMIIC5jCCAuIEAgABMIIC
2gMEAFIVAQMEAFIVYAMEAFIVvAMEAFIWFQMEAFIWMQMEAFIWoQMEAFIXAgMEAFIX
DgMEAFIXiQMEAFIXrAMEAFIYBAMEAFIYFQMEAFIYRQMEAFIYRwMEAFIYUwMEAFIZ
CgMEAFIZDQMEAFIZHgMEAFIZkQMEAVIaTgMEAFIaUgMEAFIadwMEAFIafzAMAwQA
UhqNAwQAUhqOAwQAUhqTAwQAUhqbAwQAUhsnAwQAUhstAwQAUhtDAwQAUhtPAwQA
UhtfAwQAUhtuAwQAUhuDAwQAUhuFAwQAUhuHAwQAUh1AAwQAUiaTAwQAUiaoAwQA
Uia3AwQAUiemAwQAUie5AwQCUifkAwQCUifwAwQAUif2AwQAUiklAwQAUimBAwQA
UinKAwQAUinoAwQAUinsAwQAUinuAwQAUi8TAwQAUi8cAwQAUi89AwQAUi9yAwQA
Ui9+AwQAUi+AAwQAUi+CAwQAUi+IAwQAUi+VAwQAUi+bAwQAUi+iAwQAUi+lAwQA
Ui+nAwQAUi+qAwQAUi+sAwQAUi+uAwQAUi+wMAwDBABSL7UDBABSL7YDBABSL7kD
BABSL78DBABSL8MDBAFSL8YDBABSL8kwDAMEAFIvzQMEAFIvzgMEAFIv9wMEAFIv
+QMEAFIv/wMEAFRLAwMEAFRLMwMEAFRLNwMEAFRLPgMEAFRLQAMEAVRLUAMEAFRL
hQMEAFRLhzAMAwQAVEuLAwQAVEuMAwQBVEuSAwQAVEuVAwQAVEuZAwQAVEucAwQA
VEuoAwQBVEuwAwQAVEu5AwQAVEvMAwQBVEveAwQAVEv2AwQBVEv8MAwDBACyUx0D
BACyUx4DBACyUyQDBACyUygDBAGyUzADBACyUzgDBACyU0EDBACyU2wDBACyU28D
BACyU4EDBACyU4MDBACyU5ADBACyU5gDBACyU6EDBACyU6UDBACyU7YDBACyU78D
BAGyU9wDBACyU+cwDQYJKoZIhvcNAQELBQADggEBADNdUpAuYugIoWDNBziRnw4G
HkEtZqpqXezRoxmNCcXI5oiq+f99SWGDaCeC+bub7H0ZFR4XoBWFZfRamoDE1MhG
4b+jBf9WtQYsYHPiBuQTYPX/octkaWvcWOTPIyLzS+bdUOQb6AQABQ2yuDcLpz1A
3dSRDMDSgE8BexHvDXTxUGOm2gXO0D1YJsokBaSAckKPD0rq1107lQ/w2Z94+ucy
lWwAW+PJ3hhpAWWPc00XIU0It8V8wLR7Hrvbrwogbmk0Z3Kdr9/FNmlB0UaXXrYE
Poxn3oX6OgN1KFfhLwtppNpLD7akiPgCVBPUfY6HAUqNHl3d/lK+wpe7CRc0e1o=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:35 2026 by rpki-client