Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: vEAaWAckxF7tjn08Hf0UZQgUTmOiZUi7XkWpoCy+iDU=
Subject key identifier: 34:45:7B:90:0C:2D:EC:05:51:36:8C:56:D3:4E:BA:4A:26:D1:7B:B7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 69A5AFA72971654D0B4D3ADD4600BD876A6E7BA4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Tue 28 Jul 2026 02:08:30 +0000
ROA not before: Tue 28 Jul 2026 02:03:30 +0000
ROA not after: Tue 27 Jul 2027 02:08:30 +0000
asID: 834
IP address blocks: 141.11.37.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.79.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.92.0/24 maxlen: 24
141.11.94.0/24 maxlen: 24
141.11.96.0/24 maxlen: 24
141.11.136.0/23 maxlen: 24
141.11.144.0/23 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.181.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
141.11.192.0/23 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a5:af:a7:29:71:65:4d:0b:4d:3a:dd:46:00:bd:87:6a:6e:7b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 28 02:03:30 2026 GMT
Not After : Jul 27 02:08:30 2027 GMT
Subject: CN=34457B900C2DEC0551368C56D34EBA4A26D17BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:b0:c2:af:94:d1:29:f9:b9:f4:7e:4b:a9:
89:d6:e3:c2:5d:92:66:77:6f:dd:4a:00:32:76:b5:
18:7d:ec:de:47:45:5c:69:77:64:ef:f0:04:ff:4d:
0a:00:df:5b:e4:9b:95:6f:59:bc:f5:56:15:e1:25:
60:46:00:ef:ca:40:35:93:51:68:09:ac:94:6d:d9:
81:5c:79:99:82:0d:c2:c0:4b:bf:c8:b9:6e:20:1a:
ed:b9:88:47:61:5e:a2:6e:b9:18:fb:4c:50:8e:57:
71:46:58:3a:76:ef:b6:e0:dc:30:cd:9c:f3:60:20:
0d:ad:18:45:f1:17:5c:5a:b9:a7:e9:fc:cc:59:ac:
c7:43:ae:14:31:30:47:df:c5:58:c3:9e:84:13:9c:
2d:c7:01:57:fb:84:70:0f:a9:ad:ce:67:df:84:19:
64:20:01:88:e3:2f:b0:30:b4:70:fc:21:af:91:70:
7e:b6:62:9e:b8:7c:61:23:c8:00:f7:26:b4:7d:6a:
dc:84:19:97:f0:73:69:e4:ca:0d:bc:75:69:25:bd:
fb:60:fa:49:e2:9f:f4:ad:b0:44:4c:e2:67:e5:83:
b3:98:c0:57:c4:30:bb:bd:f9:0c:44:cb:dc:df:87:
3b:30:36:84:4e:e8:5d:15:95:af:ad:36:65:90:6f:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:7B:90:0C:2D:EC:05:51:36:8C:56:D3:4E:BA:4A:26:D1:7B:B7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
141.11.47.0/24
141.11.79.0/24
141.11.88.0/23
141.11.92.0/24
141.11.94.0/24
141.11.96.0/24
141.11.136.0/23
141.11.144.0/23
141.11.175.0/24
141.11.181.0-141.11.182.255
141.11.192.0/23
141.11.198.0/24
141.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
69:61:5a:ad:54:d4:7e:e0:d2:66:f4:9d:25:d8:5d:1b:96:ef:
3d:27:52:08:6f:30:92:8f:70:44:3c:bc:3a:9c:3a:af:6f:76:
0c:c0:26:9c:91:98:d6:5c:0c:68:fc:3f:a4:5e:cd:85:d2:a0:
c3:c3:51:95:ac:60:5f:ad:56:fd:fc:fd:b0:f6:2b:1c:b1:80:
46:a1:a8:c7:60:48:8f:2f:38:17:82:db:a3:7a:88:c3:13:c1:
15:c8:ce:21:d3:5f:c5:cb:7f:6f:9c:c7:28:f8:f1:e4:cd:37:
5c:5e:9d:4d:cb:b0:81:ef:93:55:97:4a:3d:31:62:b0:6f:a0:
38:b9:ab:b1:cc:d6:bd:04:68:51:f9:d0:b8:f1:7b:c0:1c:b6:
56:7b:8a:99:86:10:fb:02:e1:e9:7f:13:5f:b5:22:e7:64:6a:
32:d4:04:17:8c:a2:a1:bc:61:34:ac:61:54:ad:02:82:a0:23:
ca:d4:b9:1e:08:b3:6e:fb:fa:e4:26:46:3b:4f:8d:fe:68:69:
78:40:d2:8b:c2:e7:89:b3:1d:ed:9c:d3:a7:d1:b2:29:1c:18:
39:75:a2:d9:8d:43:da:b6:fa:ec:58:96:7b:bd:5e:93:67:58:
26:78:98:b7:f0:d7:6c:b7:15:f2:1b:d5:8f:56:07:39:f6:90:
8b:bc:40:db
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUaaWvpylxZU0LTTrdRgC9h2pue6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA3MjgwMjAzMzBaFw0yNzA3MjcwMjA4MzBaMDMxMTAvBgNV
BAMTKDM0NDU3QjkwMEMyREVDMDU1MTM2OEM1NkQzNEVCQTRBMjZEMTdCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOvbDCr5TRKfm59H5LqYnW48Jd
kmZ3b91KADJ2tRh97N5HRVxpd2Tv8AT/TQoA31vkm5VvWbz1VhXhJWBGAO/KQDWT
UWgJrJRt2YFceZmCDcLAS7/IuW4gGu25iEdhXqJuuRj7TFCOV3FGWDp277bg3DDN
nPNgIA2tGEXxF1xauafp/MxZrMdDrhQxMEffxVjDnoQTnC3HAVf7hHAPqa3OZ9+E
GWQgAYjjL7AwtHD8Ia+RcH62Yp64fGEjyAD3JrR9atyEGZfwc2nkyg28dWklvftg
+knin/StsERM4mflg7OYwFfEMLu9+QxEy9zfhzswNoRO6F0Vla+tNmWQb8Y1AgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUNEV7kAwt7AVRNoxW0066SibRe7cwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAjQslAwQA
jQsvAwQAjQtPAwQBjQtYAwQAjQtcAwQAjQteAwQAjQtgAwQBjQuIAwQBjQuQAwQA
jQuvMAwDBACNC7UDBACNC7YDBAGNC8ADBACNC8YDBACNC9owDQYJKoZIhvcNAQEL
BQADggEBAGlhWq1U1H7g0mb0nSXYXRuW7z0nUghvMJKPcEQ8vDqcOq9vdgzAJpyR
mNZcDGj8P6RezYXSoMPDUZWsYF+tVv38/bD2KxyxgEahqMdgSI8vOBeC26N6iMMT
wRXIziHTX8XLf2+cxyj48eTNN1xenU3LsIHvk1WXSj0xYrBvoDi5q7HM1r0EaFH5
0Ljxe8ActlZ7ipmGEPsC4el/E1+1IudkajLUBBeMoqG8YTSsYVStAoKgI8rUuR4I
s277+uQmRjtPjf5oaXhA0ovC54mzHe2c06fRsikcGDl1otmNQ9q2+uxYlnu9XpNn
WCZ4mLfw12y3FfIb1Y9WBzn2kIu8QNs=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:09:24 2026 by rpki-client