Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: wm40XhWgn7ED+HkzbSE3nJOoUrQpeOx0Ds5b/Ci2PKs=
Subject key identifier: 39:DA:D6:1F:5A:BD:72:20:59:36:5D:A0:45:8D:C8:2D:C6:A7:4C:76
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0CBD734A761C64C0B49BDABD68D3DEED30AED684
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
Signing time: Fri 17 Apr 2026 03:38:45 +0000
ROA not before: Fri 17 Apr 2026 03:33:45 +0000
ROA not after: Fri 16 Apr 2027 03:38:45 +0000
asID: 834
IP address blocks: 51.146.180.0/22 maxlen: 24
51.146.232.0/23 maxlen: 24
51.146.234.0/24 maxlen: 24
51.146.236.0/24 maxlen: 24
51.146.238.0/23 maxlen: 24
51.146.240.0/22 maxlen: 24
51.146.244.0/23 maxlen: 24
51.146.246.0/24 maxlen: 24
51.146.249.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.64.0/22 maxlen: 24
51.194.68.0/23 maxlen: 24
51.194.70.0/24 maxlen: 24
51.194.72.0/21 maxlen: 24
51.194.80.0/24 maxlen: 24
51.194.82.0/23 maxlen: 24
51.194.84.0/22 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.98.0/23 maxlen: 24
51.194.112.0/23 maxlen: 24
51.194.115.0/24 maxlen: 24
51.194.116.0/22 maxlen: 24
51.194.128.0/24 maxlen: 24
51.194.130.0/23 maxlen: 24
51.194.132.0/22 maxlen: 24
51.194.136.0/23 maxlen: 24
51.194.138.0/24 maxlen: 24
51.194.140.0/22 maxlen: 24
51.194.144.0/20 maxlen: 24
51.194.160.0/20 maxlen: 24
51.194.176.0/21 maxlen: 24
51.194.184.0/22 maxlen: 24
51.194.188.0/24 maxlen: 24
51.194.190.0/23 maxlen: 24
51.194.208.0/23 maxlen: 24
51.194.210.0/24 maxlen: 24
51.194.213.0/24 maxlen: 24
51.194.214.0/23 maxlen: 24
51.194.216.0/23 maxlen: 24
51.194.218.0/24 maxlen: 24
51.194.220.0/22 maxlen: 24
51.194.224.0/23 maxlen: 24
51.194.226.0/24 maxlen: 24
51.194.228.0/24 maxlen: 24
51.194.230.0/24 maxlen: 24
51.194.232.0/21 maxlen: 24
51.194.240.0/23 maxlen: 24
51.194.243.0/24 maxlen: 24
51.194.244.0/24 maxlen: 24
51.194.246.0/23 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.250.0/23 maxlen: 24
51.194.252.0/22 maxlen: 24
78.105.112.0/20 maxlen: 24
78.105.140.0/22 maxlen: 24
78.105.144.0/20 maxlen: 24
78.105.160.0/19 maxlen: 24
78.105.192.0/19 maxlen: 24
78.105.232.0/21 maxlen: 24
78.105.240.0/21 maxlen: 24
94.194.0.0/16 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bd:73:4a:76:1c:64:c0:b4:9b:da:bd:68:d3:de:ed:30:ae:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 17 03:33:45 2026 GMT
Not After : Apr 16 03:38:45 2027 GMT
Subject: CN=39DAD61F5ABD722059365DA0458DC82DC6A74C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:ce:33:14:b3:ac:52:7f:af:18:94:a1:86:
81:a0:e8:83:43:d8:27:42:38:16:71:7c:8b:b9:74:
0b:09:72:99:6a:88:57:f8:84:70:3f:a6:f6:6d:80:
01:9a:b9:7c:68:15:5b:0d:c3:34:45:24:9d:26:47:
05:ea:61:05:cf:42:ae:27:5d:41:09:6a:9f:bb:5d:
ca:9d:0c:88:cc:e4:34:1c:7d:40:2f:ec:2c:2e:7b:
f5:6b:1f:80:20:c1:39:81:52:fa:a5:1c:c6:7a:00:
68:df:72:19:2e:a5:07:be:f1:ba:02:00:f0:3d:94:
b8:ae:a1:22:ca:6f:c7:9a:90:5d:3f:db:97:cc:26:
a8:2c:b2:2d:ea:0b:45:0c:6e:f6:cb:6c:b9:00:2e:
fd:5e:a1:d8:f1:5e:4d:88:83:60:ae:ca:54:d3:48:
ad:11:35:b6:5a:26:25:34:52:06:3a:24:46:8c:42:
18:24:2d:f5:e6:43:aa:1c:35:0d:13:5d:7b:e3:38:
1d:7c:35:b7:5d:de:e7:d3:75:9e:09:7c:e8:cd:83:
6e:94:8a:16:88:25:f2:e9:fd:a5:19:5f:74:52:6a:
4b:a0:4a:10:29:c8:55:c4:4c:17:18:2b:70:1d:61:
9a:e1:e4:a2:f6:ac:0c:75:5d:69:40:6b:34:2e:22:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:D6:1F:5A:BD:72:20:59:36:5D:A0:45:8D:C8:2D:C6:A7:4C:76
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.180.0/22
51.146.232.0-51.146.234.255
51.146.236.0/24
51.146.238.0-51.146.246.255
51.146.249.0/24
51.194.33.0/24
51.194.38.0/24
51.194.64.0-51.194.70.255
51.194.72.0-51.194.80.255
51.194.82.0-51.194.87.255
51.194.97.0-51.194.99.255
51.194.112.0/23
51.194.115.0-51.194.119.255
51.194.128.0/24
51.194.130.0-51.194.138.255
51.194.140.0-51.194.188.255
51.194.190.0/23
51.194.208.0-51.194.210.255
51.194.213.0-51.194.218.255
51.194.220.0-51.194.226.255
51.194.228.0/24
51.194.230.0/24
51.194.232.0-51.194.241.255
51.194.243.0-51.194.244.255
51.194.246.0/23
51.194.249.0-51.194.255.255
78.105.112.0/20
78.105.140.0-78.105.223.255
78.105.232.0-78.105.247.255
94.194.0.0/16
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:59:be:c2:a8:40:b4:79:f4:f2:18:0b:f0:c0:fb:3f:aa:3d:
1d:2e:84:5b:42:95:8e:b6:ce:75:bf:5e:f6:db:6d:d1:e9:13:
49:6b:46:2b:2d:e5:eb:30:28:06:39:7e:8c:71:42:e2:d2:b6:
47:9e:d1:18:5d:71:fd:78:9f:47:91:d7:fb:ac:cd:0e:bd:85:
96:26:e5:c5:04:58:aa:d5:34:a4:61:72:fd:d6:fc:3e:b6:fd:
ce:ad:5a:69:88:4a:78:74:84:64:9a:d2:5a:96:ba:b3:e3:f4:
b7:d0:60:6e:31:3a:4b:b8:74:9a:c5:08:15:72:e5:12:d2:44:
18:b8:63:56:45:75:31:0b:2b:fe:c4:14:6a:04:fc:36:dc:0c:
bb:d6:00:5e:2e:95:b2:1a:07:47:66:86:a5:45:e5:9a:c2:13:
e8:bf:e3:ac:ca:37:85:5e:c7:be:41:80:2d:fb:dc:f4:a5:a4:
08:47:a9:6d:95:53:e5:82:da:e2:11:77:10:c6:a1:f1:f6:d9:
cd:82:9b:45:e9:0a:48:09:ca:6d:92:0b:64:df:16:30:13:ca:
96:a3:4b:81:04:d1:aa:79:9e:ba:28:82:f1:ee:80:8e:cd:57:
7f:82:66:8e:67:cf:e7:5a:26:2f:b4:e7:05:39:b2:d9:c7:93:
9c:b5:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:37 2026 by rpki-client