Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: auTfgB8zIXPvAMDmFNnxmrVHwxodCDHPU6+LOz1NvLw=
Subject key identifier: B1:88:94:F5:A3:F9:50:A1:C5:E8:7D:E2:2D:5D:FA:43:DF:59:B1:E4
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 505106B47CDDC0D3B566AA6C83BA62C037D928E4
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time: Fri 31 Oct 2025 15:07:24 +0000
ROA not before: Fri 31 Oct 2025 15:02:24 +0000
ROA not after: Fri 30 Oct 2026 15:07:24 +0000
asID: 834
IP address blocks: 139.28.50.0/24 maxlen: 24
188.119.69.0/24 maxlen: 24
193.32.186.0/24 maxlen: 24
193.187.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:51:06:b4:7c:dd:c0:d3:b5:66:aa:6c:83:ba:62:c0:37:d9:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 31 15:02:24 2025 GMT
Not After : Oct 30 15:07:24 2026 GMT
Subject: CN=B18894F5A3F950A1C5E87DE22D5DFA43DF59B1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:18:04:7a:cd:87:04:5a:f7:42:fb:4e:7c:
ad:f1:24:77:92:cc:02:a8:48:6d:3c:00:77:d7:0d:
72:97:fa:89:2b:0a:f5:80:bd:b2:1f:43:44:f5:34:
d4:35:1b:b5:6d:c8:d0:ae:e0:b1:7a:d7:7b:96:67:
1b:16:9a:39:27:42:26:24:7e:f4:d2:f6:49:e2:35:
96:3d:6a:c8:f1:40:a9:62:4b:d5:62:e8:46:50:37:
8b:e5:66:03:0f:59:89:1c:82:56:a2:37:bc:cd:4c:
64:ca:fa:ee:cb:10:38:da:4f:f2:97:7b:54:73:1f:
64:3d:a5:dc:db:e0:6c:6f:8f:9c:1b:04:b0:04:30:
33:4f:6e:00:1f:71:f5:d2:74:cc:25:6f:31:9a:99:
29:8a:f0:64:68:13:80:a4:ce:e3:91:29:9c:b4:0f:
f1:92:43:c3:2c:63:84:a8:f2:99:52:02:35:67:4a:
0a:69:88:42:40:2f:70:7f:43:ea:04:b9:3e:a5:34:
7f:dd:d5:54:e0:ee:54:7e:4f:27:fb:14:d0:b8:53:
14:90:a7:0b:d6:db:df:d8:e9:66:2d:ee:57:64:6b:
88:1f:19:a2:64:cc:b8:bc:1f:f6:a2:cd:ff:78:f7:
8b:9d:b9:d0:9b:e8:ed:3b:da:97:7d:5a:6f:93:19:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:94:F5:A3:F9:50:A1:C5:E8:7D:E2:2D:5D:FA:43:DF:59:B1:E4
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.50.0/24
188.119.69.0/24
193.32.186.0/24
193.187.111.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4e:2f:da:6e:bb:0b:b1:8e:a0:10:96:fc:48:a3:38:ba:49:
78:8b:58:bf:f1:d3:3a:1f:c7:a6:75:f5:4b:0e:69:e0:06:01:
ba:75:4e:33:c6:01:eb:72:91:b5:eb:90:2b:27:ce:25:6a:b6:
fa:dd:4f:d0:09:04:0a:a3:f9:6d:76:f3:27:3f:44:aa:b1:b2:
f1:d8:69:6c:f0:bf:01:38:59:ce:27:e9:5b:40:e1:ef:4f:11:
17:70:be:e2:9a:78:9e:e9:97:9e:7d:35:e9:29:3c:65:0c:6e:
61:26:68:ac:0b:23:c3:88:c0:85:06:a8:64:24:df:0f:f1:a4:
44:f0:ef:a8:75:1e:03:f8:6f:2a:ec:44:02:8b:9a:42:df:80:
eb:b0:75:45:38:49:7e:d5:b1:40:34:1b:9a:82:31:31:b4:97:
17:f4:73:4a:c5:cf:2b:2b:0c:5a:81:61:af:3a:32:b3:20:05:
6e:26:28:28:49:aa:b3:3e:a3:25:a3:45:75:ee:3c:63:88:f9:
0f:1b:dd:9a:b4:32:66:f4:ff:98:44:62:a9:65:3d:53:ba:fe:
ef:30:11:2a:7f:b3:20:c1:ea:c7:b6:a9:0e:e8:44:c6:b9:0f:
be:2b:8b:aa:75:7b:e9:06:e2:f1:2f:d5:84:12:30:15:3a:ed:
dd:b8:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:53 2025 by rpki-client