Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: wtfJA8JeVXxNvv/X6AZodaT4MOQcjlUSbDf5HqosAVE=
Subject key identifier: 1F:83:7D:E5:CD:F7:6B:5F:D8:22:55:1A:21:E8:0F:72:E3:36:3F:95
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2635B91EFE598CB6DAAD02F54BB9D47EC5B0F64D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
Signing time: Fri 06 Nov 2026 16:14:07 +0000
ROA not before: Fri 06 Nov 2026 16:09:07 +0000
ROA not after: Fri 05 Nov 2027 16:14:07 +0000
asID: 834
IP address blocks: 194.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:35:b9:1e:fe:59:8c:b6:da:ad:02:f5:4b:b9:d4:7e:c5:b0:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 6 16:09:07 2026 GMT
Not After : Nov 5 16:14:07 2027 GMT
Subject: CN=1F837DE5CDF76B5FD822551A21E80F72E3363F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:21:6a:a5:2c:e7:75:0e:9c:03:33:84:52:
66:1c:32:d0:98:3c:d7:c2:2e:fd:65:53:13:05:a5:
bf:63:d6:a1:55:2a:43:a5:0d:ce:cd:18:b0:a4:01:
26:ac:75:a1:22:6b:92:ad:e2:9a:ca:97:6d:bb:ac:
0b:56:f7:3e:8e:cb:5a:36:f7:53:3e:0f:37:02:48:
06:cd:6c:74:77:ec:9a:e9:b1:1b:82:06:0d:18:39:
26:73:52:f9:83:7f:a0:09:ca:c4:ff:34:f9:01:8a:
f3:57:b7:11:a7:67:0b:95:26:69:9e:57:1a:02:3b:
7a:e4:4a:97:e1:c7:e2:74:4a:a5:4b:d6:d0:89:3c:
e5:6f:be:72:93:ef:7a:55:75:d7:07:85:3b:e2:81:
8a:97:d4:bb:d1:27:e4:56:40:12:15:f1:8a:fd:ef:
7d:12:fc:8d:13:02:86:dc:98:22:e1:33:07:99:21:
be:55:51:fb:7d:a3:12:c8:18:bd:50:91:a8:cb:3b:
af:98:56:a3:17:1d:52:49:d4:df:14:53:a7:26:b2:
dd:60:af:79:be:71:24:02:1f:27:53:9b:3e:c4:6d:
54:0e:73:c5:2b:3a:f9:66:26:e1:7e:2f:d1:db:25:
02:73:6b:3a:49:ce:8d:b2:ae:9d:66:2e:01:11:fd:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:7D:E5:CD:F7:6B:5F:D8:22:55:1A:21:E8:0F:72:E3:36:3F:95
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
11:92:82:e2:7d:b3:b5:60:51:c0:aa:06:50:a5:14:6d:25:64:
b0:72:9c:94:08:c3:61:ab:43:6e:30:76:c1:e6:d7:0f:68:ff:
9d:6d:65:8a:db:3a:a3:25:a6:90:36:88:b8:3e:e8:bf:dd:cf:
7e:f4:db:6e:72:1f:9c:dc:c4:a2:5e:0d:47:df:d2:3f:f5:6e:
87:e3:45:9d:44:59:a7:e2:39:07:ce:1a:9d:1e:07:62:4a:5d:
ad:b2:f2:c6:5e:84:31:be:6c:16:56:75:bb:15:a9:37:88:e1:
40:d2:81:f6:a9:59:75:d1:a2:f2:80:d9:c9:10:a2:5c:4e:ab:
c3:48:5b:61:92:73:cd:23:b4:2a:1c:9c:6f:34:f3:ef:02:43:
38:dc:4f:4f:30:a6:c8:fc:21:dc:0a:7e:3c:c7:44:d0:2d:5a:
dc:b6:1d:9c:20:ae:68:7a:82:a6:96:c9:75:a9:71:ae:be:e8:
a0:8e:43:68:75:aa:b9:4f:5e:4d:d3:ba:87:59:a4:e2:e1:90:
20:a9:52:6b:0e:7c:27:b5:7c:b5:10:81:9f:6b:93:ef:b8:ef:
d0:72:60:20:54:a9:b6:1b:9d:b4:57:6e:1b:aa:fd:e6:2d:18:
9f:a7:a1:d1:8e:e1:8f:d7:fc:2d:c5:97:11:b4:15:3d:1a:39:
cb:9c:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:51:08 2026 by rpki-client