Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: kxig7yQB73718Zmr628xaeiwFYOWF/qLpjkAzHGCVOg=
Subject key identifier: 78:B2:08:A6:DF:A7:C4:44:56:E4:B1:26:4C:15:CC:31:71:E3:66:A1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 57EB5997862880B610CE71F150A0CD43C7673D47
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Thu 05 Nov 2026 12:03:28 +0000
ROA not before: Thu 05 Nov 2026 11:58:28 +0000
ROA not after: Thu 04 Nov 2027 12:03:28 +0000
asID: 834
IP address blocks: 141.11.89.0/24 maxlen: 24
141.11.94.0/24 maxlen: 24
141.11.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:eb:59:97:86:28:80:b6:10:ce:71:f1:50:a0:cd:43:c7:67:3d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 5 11:58:28 2026 GMT
Not After : Nov 4 12:03:28 2027 GMT
Subject: CN=78B208A6DFA7C44456E4B1264C15CC3171E366A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:15:58:4f:36:d6:4a:c2:1a:69:67:38:f0:
ef:97:3e:89:71:c6:06:65:46:ae:9e:bd:27:5c:f7:
80:89:a0:7f:e7:b7:3f:45:00:9d:a0:71:c4:ea:dc:
f1:31:4e:c7:47:4f:7f:f9:b4:08:90:2d:27:20:16:
e1:80:00:d0:14:44:73:76:18:4a:5b:de:98:89:68:
46:47:f5:0f:81:5e:d8:bd:2b:e6:11:e4:ff:a1:a9:
eb:88:7a:e7:91:47:48:bb:a8:39:7a:3d:4b:e2:cc:
04:b5:90:57:bf:b9:5d:f0:ba:fe:59:35:64:e9:9c:
aa:09:e4:70:78:9c:83:92:73:c1:7b:66:e7:8b:87:
76:ba:1f:b3:7f:30:3d:5c:85:e6:ad:3a:f0:16:db:
61:e4:ea:22:63:b4:e3:7e:f7:6c:98:d3:7d:33:44:
73:ac:4c:5d:2d:82:66:95:57:39:94:01:fd:f2:5c:
98:29:5b:6a:72:1d:47:83:4e:2f:b9:3f:58:24:6f:
ca:3e:c1:ca:38:f1:67:59:b4:4d:ee:bd:3e:9b:cd:
67:57:79:24:31:3b:57:20:49:3d:de:12:da:6c:b2:
88:25:f8:a4:9c:41:36:88:b3:36:dc:3f:f3:cb:8e:
2a:a6:b6:a2:fd:94:ba:33:de:45:5b:7d:39:10:e9:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B2:08:A6:DF:A7:C4:44:56:E4:B1:26:4C:15:CC:31:71:E3:66:A1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.89.0/24
141.11.94.0/24
141.11.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:66:9f:5d:60:1a:9e:91:70:5a:40:57:03:3e:e6:f5:a9:09:
ac:2a:50:4d:32:2e:19:49:03:a6:87:48:cc:96:59:83:2a:cc:
c9:85:d1:20:12:fa:0a:32:79:5e:a8:a2:1b:48:72:4e:65:81:
6b:a1:98:da:1a:07:83:08:fb:b1:e3:40:dd:54:ed:a0:df:b7:
d8:8f:05:83:03:5a:f3:7f:8d:cd:10:ce:a7:b2:03:96:53:62:
cd:65:82:be:29:2d:ae:0f:aa:80:95:ae:db:e1:87:40:34:8f:
37:dd:87:b9:ca:57:62:d9:33:50:86:7a:d7:85:80:6d:35:2a:
90:bc:b7:72:3d:54:88:51:e9:2d:12:18:ad:54:26:15:3b:17:
6e:0d:00:31:cb:c8:94:ad:04:65:27:57:7a:4d:72:7d:ea:ad:
21:98:71:50:b1:bf:1e:05:9d:ad:e0:b0:9c:3e:f8:fe:66:f4:
c2:5d:c4:1d:24:4b:4e:da:d7:3f:39:30:20:a6:5f:a1:1c:42:
39:80:e7:75:78:41:95:ce:8f:93:af:63:93:82:78:69:9d:8e:
11:02:a1:7e:d9:dd:03:95:d0:4c:a7:7e:e9:a6:33:f8:2c:03:
20:aa:9e:e5:3b:9b:9a:f4:c9:65:75:c4:22:17:bf:fe:8e:ab:
eb:11:72:78
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUV+tZl4YogLYQznHxUKDNQ8dnPUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjExMDUxMTU4MjhaFw0yNzExMDQxMjAzMjhaMDMxMTAvBgNV
BAMTKDc4QjIwOEE2REZBN0M0NDQ1NkU0QjEyNjRDMTVDQzMxNzFFMzY2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvxVYTzbWSsIaaWc48O+XPolx
xgZlRq6evSdc94CJoH/ntz9FAJ2gccTq3PExTsdHT3/5tAiQLScgFuGAANAURHN2
GEpb3piJaEZH9Q+BXti9K+YR5P+hqeuIeueRR0i7qDl6PUvizAS1kFe/uV3wuv5Z
NWTpnKoJ5HB4nIOSc8F7ZueLh3a6H7N/MD1cheatOvAW22Hk6iJjtON+92yY030z
RHOsTF0tgmaVVzmUAf3yXJgpW2pyHUeDTi+5P1gkb8o+wco48WdZtE3uvT6bzWdX
eSQxO1cgST3eEtpssogl+KScQTaIszbcP/PLjiqmtqL9lLoz3kVbfTkQ6eclAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUeLIIpt+nxERW5LEmTBXMMXHjZqEwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQtZAwQA
jQteAwQAjQueMA0GCSqGSIb3DQEBCwUAA4IBAQBNZp9dYBqekXBaQFcDPub1qQms
KlBNMi4ZSQOmh0jMllmDKszJhdEgEvoKMnleqKIbSHJOZYFroZjaGgeDCPux40Dd
VO2g37fYjwWDA1rzf43NEM6nsgOWU2LNZYK+KS2uD6qAla7b4YdANI833Ye5yldi
2TNQhnrXhYBtNSqQvLdyPVSIUektEhitVCYVOxduDQAxy8iUrQRlJ1d6TXJ96q0h
mHFQsb8eBZ2t4LCcPvj+ZvTCXcQdJEtO2tc/OTAgpl+hHEI5gOd1eEGVzo+Tr2OT
gnhpnY4RAqF+2d0DldBMp37ppjP4LAMgqp7lO5ua9MlldcQiF7/+jqvrEXJ4
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:32:25 2026 by rpki-client