Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 6iawP12y9zFajA5GhdoTv2qJq2ZNNgBIS2fx0M+k/BE=
Subject key identifier: 08:A3:77:97:87:1C:18:09:A1:A8:2C:77:11:9C:35:49:1E:E5:B4:FC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 36601968C3C05484F3C2A5C3404682B6BA52DB87
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Mon 21 Sep 2026 00:02:06 +0000
ROA not before: Sun 20 Sep 2026 23:57:06 +0000
ROA not after: Mon 20 Sep 2027 00:02:06 +0000
asID: 834
IP address blocks: 141.11.142.0/23 maxlen: 24
141.11.144.0/24 maxlen: 24
141.11.157.0/24 maxlen: 24
141.11.158.0/23 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.181.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:60:19:68:c3:c0:54:84:f3:c2:a5:c3:40:46:82:b6:ba:52:db:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 23:57:06 2026 GMT
Not After : Sep 20 00:02:06 2027 GMT
Subject: CN=08A37797871C1809A1A82C77119C35491EE5B4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:89:3a:b2:3c:55:e8:03:d7:8b:b0:70:fc:
c8:c5:87:78:bf:6b:72:a4:8e:95:23:d4:8c:83:8c:
c5:89:33:74:ff:6a:bd:7a:d0:46:8a:60:ff:b2:30:
fa:c7:84:0e:5e:be:22:45:0e:b2:6c:67:00:7d:f6:
43:26:d4:a1:ff:e2:58:c6:f4:a0:63:56:ac:d4:2a:
e7:01:de:d0:eb:d7:eb:b8:6e:7b:08:cd:46:18:01:
47:45:1f:a3:00:bf:bc:ad:ef:c3:bb:e7:69:ce:a3:
e5:17:44:ee:7c:07:d0:85:4c:05:63:09:e4:70:f5:
c5:4e:e3:55:87:4a:38:8e:41:4e:c8:09:a0:cc:fa:
58:7b:ca:09:40:cb:ec:55:a2:fa:04:29:0b:ec:80:
2a:1a:30:83:10:c8:a9:57:21:01:37:f8:41:c3:8c:
74:f0:8a:4c:3a:df:92:8f:d5:ee:27:dc:94:d4:25:
d8:1a:4d:e8:d2:46:4d:5e:71:82:f7:a1:7e:ca:38:
88:a3:56:1a:b3:86:3f:c7:77:ad:a9:90:8d:81:40:
44:a7:89:40:50:1d:4a:d5:70:0c:3e:94:78:63:22:
8b:30:7e:39:98:2d:c9:b2:dc:3a:b6:90:1c:04:4c:
67:62:6e:45:0e:c7:59:9d:05:dd:66:cc:5b:81:d7:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:77:97:87:1C:18:09:A1:A8:2C:77:11:9C:35:49:1E:E5:B4:FC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.142.0-141.11.144.255
141.11.157.0-141.11.159.255
141.11.175.0/24
141.11.181.0-141.11.182.255
Signature Algorithm: sha256WithRSAEncryption
d4:64:4c:fa:b7:24:c0:14:41:05:f0:d3:15:8e:81:76:ea:da:
2f:ce:95:a4:4e:de:dd:4a:6a:ae:c1:03:fa:e0:25:08:3d:49:
57:da:72:a9:ac:1c:8d:48:00:f0:3b:ff:26:7f:19:29:f1:7e:
8f:be:44:4a:7e:38:7b:cf:d7:79:f8:8d:0b:23:58:56:28:16:
db:83:b6:78:30:3c:11:eb:1f:a4:f9:5c:dc:f9:53:f9:d1:ce:
e4:88:fa:80:20:44:a8:4d:82:2a:15:06:df:1c:f2:5b:ec:bf:
74:57:af:74:99:1b:65:55:bc:e7:d7:c9:30:6e:36:38:d6:69:
90:d4:55:37:58:77:97:29:51:1f:72:75:10:ec:9f:82:37:a5:
7e:a0:15:f3:7f:a9:c2:02:17:05:5b:30:dd:01:97:0d:e5:57:
26:4b:8b:46:96:5e:f9:77:5c:dd:c2:2b:bb:fd:66:b5:de:ae:
2b:6f:2d:3e:65:53:6e:eb:8e:e9:5e:c1:67:8d:67:a4:86:6a:
1e:85:73:b2:69:23:0e:77:47:8e:fd:16:30:db:51:c4:5e:79:
74:5a:a0:ee:f6:f2:fa:41:57:74:1b:bf:aa:28:6b:30:84:76:
bf:d5:8a:1b:ea:cc:69:51:11:21:d7:50:84:34:5a:ba:83:a9:
f6:c9:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:52:13 2026 by rpki-client