Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: bW10ZxJnGf/epozqEReyXRwl/cisMT9ectRzPygH4WQ=
Subject key identifier: A8:16:77:C4:6D:5E:37:51:9A:95:62:FC:B0:A9:C8:19:E7:13:69:33
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 576F7D14B27D5683A7E0A6DB0C76D8B9A1A06F6B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Sun 20 Sep 2026 06:51:56 +0000
ROA not before: Sun 20 Sep 2026 06:46:56 +0000
ROA not after: Sun 19 Sep 2027 06:51:56 +0000
asID: 834
IP address blocks: 141.11.144.0/24 maxlen: 24
141.11.157.0/24 maxlen: 24
141.11.158.0/23 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.181.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:7d:14:b2:7d:56:83:a7:e0:a6:db:0c:76:d8:b9:a1:a0:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 06:46:56 2026 GMT
Not After : Sep 19 06:51:56 2027 GMT
Subject: CN=A81677C46D5E37519A9562FCB0A9C819E7136933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:85:bd:c5:b3:ac:f6:6e:f6:c5:70:2c:6d:
35:c5:a0:b1:0a:3e:82:5c:10:8c:ff:95:90:60:2e:
17:5e:26:03:ab:ff:7c:62:05:c8:a3:ea:bf:99:c8:
2e:11:ee:b4:7e:02:46:d6:6e:60:9d:ac:ad:44:fc:
8b:e4:b3:40:ba:ac:8b:3c:d4:46:4d:de:a0:c4:42:
c7:fb:ca:83:83:69:45:93:d8:70:4b:43:bd:75:c1:
75:54:4d:9a:a2:8a:e7:3b:81:a7:2a:86:ed:bb:c5:
2f:19:d8:20:ab:94:31:d9:4b:e3:14:91:53:15:31:
e8:50:39:bf:32:ea:be:77:97:84:0f:e8:20:9b:76:
50:cf:1a:1a:27:c8:5c:99:9f:80:3a:ba:e3:4b:ef:
90:f6:75:73:10:01:68:89:18:93:06:d7:6d:0e:13:
e8:b0:b6:49:80:6d:c6:18:b7:2d:78:25:13:d6:ad:
cb:e6:2d:e6:56:fa:71:76:8f:fb:0a:91:73:28:4e:
88:da:1c:aa:d6:0c:c8:7e:8c:6c:f5:9e:54:92:87:
87:ab:e4:6b:74:40:55:35:50:9d:e5:21:ad:d2:94:
6a:7b:9a:1e:01:52:fd:16:6c:c4:32:fd:e0:b9:93:
6b:c5:16:db:06:95:04:69:23:6e:2b:e5:f2:ef:72:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:77:C4:6D:5E:37:51:9A:95:62:FC:B0:A9:C8:19:E7:13:69:33
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.144.0/24
141.11.157.0-141.11.159.255
141.11.175.0/24
141.11.181.0-141.11.182.255
Signature Algorithm: sha256WithRSAEncryption
1c:ae:1c:73:08:30:4a:0e:c9:c9:05:c5:97:b3:54:d1:c3:2a:
bc:06:f3:71:b8:c2:f7:e5:3c:51:e7:e9:68:30:97:ac:e4:d2:
2b:3c:bc:b7:4d:82:2b:4f:9a:6e:20:0c:5c:0b:e7:5d:8c:71:
66:1e:a8:7c:a5:8a:50:16:7f:5c:86:b5:d7:22:b1:c2:16:67:
77:f3:75:4f:92:75:6a:67:17:70:99:16:ef:38:16:0c:a2:29:
fe:90:f5:60:bd:af:ed:4c:b9:9c:86:0b:39:a4:15:84:d5:8a:
52:6b:99:bb:2c:7d:9c:a4:76:a7:cd:47:fc:8d:45:8a:77:f3:
4c:34:fa:58:35:2a:0d:a3:04:d4:3f:4c:3e:e9:25:59:17:24:
a6:be:3f:d8:98:ad:63:47:2d:4d:14:d6:98:be:10:d9:c0:73:
28:01:36:ff:3f:7f:55:fc:cd:db:66:27:d5:38:67:11:20:53:
ab:d8:6e:c6:7d:19:37:a4:8f:01:46:2f:10:9a:a4:24:f5:46:
a4:5d:ea:e7:61:13:90:d8:13:94:9c:40:35:ce:8c:a3:05:50:
c4:03:bb:8f:e4:f9:fe:54:25:5f:76:e0:db:7f:ef:0c:5e:87:
01:f4:3b:46:ca:83:1b:be:b2:ff:d9:e0:34:32:b5:84:b4:8f:
6f:ff:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:22:37 2026 by rpki-client