Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: K7YagWT65Bz3at1a6RJDByJVLNuTRZY+XV3KJQ0phC8=
Subject key identifier: 47:02:E4:06:F4:5D:5C:DB:38:99:8B:E2:EB:4B:E3:3E:66:89:F1:75
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 52B43C1493C63FCE873911A89572369CB65020C8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Thu 03 Sep 2026 19:18:02 +0000
ROA not before: Thu 03 Sep 2026 19:13:02 +0000
ROA not after: Thu 02 Sep 2027 19:18:02 +0000
asID: 834
IP address blocks: 152.89.250.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b4:3c:14:93:c6:3f:ce:87:39:11:a8:95:72:36:9c:b6:50:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 3 19:13:02 2026 GMT
Not After : Sep 2 19:18:02 2027 GMT
Subject: CN=4702E406F45D5CDB38998BE2EB4BE33E6689F175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:a0:c5:a5:3a:9b:c8:98:80:9e:1f:d8:3a:
23:60:6a:89:51:8e:ef:09:35:c2:79:bd:38:d8:da:
f3:e6:0d:2d:b4:34:cf:c8:64:0d:15:1f:33:91:ae:
d9:83:59:99:d6:4c:1f:67:84:86:95:75:0f:4c:eb:
22:9e:f3:03:18:48:95:5f:d5:9c:7f:e4:5e:25:1c:
c3:0a:85:44:87:ad:59:b6:2d:33:55:53:8d:d2:5d:
f3:4f:bc:46:0c:ff:e8:30:a5:65:10:9e:fc:ea:95:
de:12:c5:1b:99:5c:4d:a3:78:1f:bc:cb:9b:73:5f:
c1:a4:f4:29:c4:eb:6d:08:16:0d:c7:d1:98:ef:f2:
ce:e6:b1:b3:d4:dd:9c:62:85:e0:96:86:c3:d2:4c:
7f:6b:29:91:28:d2:fe:8f:f9:a6:65:16:47:e0:ec:
5c:be:2b:bd:26:df:b9:88:35:f0:91:e3:29:84:9a:
d3:80:ee:28:7e:59:da:92:eb:f5:61:28:1d:ba:81:
32:40:fe:c1:9c:b8:c5:ea:cc:aa:d7:f0:8d:01:d2:
51:b9:9a:3f:a6:a0:cc:b4:99:a2:c8:ef:e6:c8:05:
ed:fd:8d:0c:0c:26:0b:9c:78:ba:d0:f3:27:55:65:
a0:bf:9d:40:ba:90:88:80:ba:f2:21:d1:13:d2:e8:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:E4:06:F4:5D:5C:DB:38:99:8B:E2:EB:4B:E3:3E:66:89:F1:75
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.250.0/24
193.151.181.0/24
194.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a8:0a:61:24:76:0f:5c:df:f2:b8:50:bc:26:aa:a0:a8:e1:
80:89:d9:c7:fa:4d:9a:1d:21:2d:46:89:80:4e:70:af:82:c9:
7c:6d:57:a2:01:bc:c7:5b:29:f8:0f:9d:a7:54:7e:5c:52:cd:
5f:5e:99:cd:24:19:2c:de:2a:a2:c8:92:2d:83:89:95:d4:03:
c8:78:4f:ff:bd:bd:9c:c6:a6:6e:52:96:de:cf:44:a2:42:49:
4b:87:e3:fb:e4:a7:19:cc:7b:07:1a:82:70:af:b4:60:6c:ac:
80:cf:a1:f3:59:12:21:e8:b3:0f:3a:fa:84:f2:8a:ee:2e:10:
12:30:3c:6c:cd:15:3b:9a:47:20:a9:4a:a8:7c:49:b3:5a:85:
8a:ea:42:fa:d6:38:a5:cd:19:c4:4c:a2:ee:6b:4f:46:ee:dc:
05:6b:9d:c7:89:38:b1:9b:7f:1a:eb:ec:b1:2c:aa:f3:24:33:
5e:83:0e:59:6d:7d:b5:3e:e0:46:c1:34:4c:65:96:aa:1d:9f:
cb:d8:0d:ab:12:bf:43:d5:87:2d:ef:db:35:75:32:b0:3a:cb:
f9:36:3c:fd:75:26:41:7d:e3:45:87:f8:4b:1f:e2:0e:48:c1:
d7:56:f5:3a:be:6b:1e:66:d4:2b:da:ee:b1:72:07:4a:70:07:
c2:3e:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:02:30 2026 by rpki-client