Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: Ye6XC3gp8qEEOUdSf1PUP5jR3TknXHA/CtGgEQ7/cuo=
Subject key identifier: 58:8A:06:7D:0E:27:38:A2:D1:86:7E:52:27:F0:55:93:D0:80:FE:C0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5EF9068954F8BF694AA6E5F1EEDD630DA85F4140
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Wed 04 Nov 2026 19:33:25 +0000
ROA not before: Wed 04 Nov 2026 19:28:25 +0000
ROA not after: Wed 03 Nov 2027 19:33:25 +0000
asID: 834
IP address blocks: 90.96.110.0/23 maxlen: 24
90.96.114.0/23 maxlen: 24
90.96.116.0/23 maxlen: 24
90.96.123.0/24 maxlen: 24
90.96.127.0/24 maxlen: 24
90.96.196.0/22 maxlen: 24
90.96.200.0/21 maxlen: 24
90.96.208.0/20 maxlen: 24
90.96.224.0/21 maxlen: 24
90.96.232.0/22 maxlen: 24
90.96.248.0/21 maxlen: 24
143.20.7.0/24 maxlen: 24
143.20.11.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.18.0/24 maxlen: 24
143.20.22.0/24 maxlen: 24
143.20.28.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.53.0/24 maxlen: 24
143.20.57.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.72.0/23 maxlen: 24
143.20.75.0/24 maxlen: 24
143.20.78.0/24 maxlen: 24
143.20.86.0/24 maxlen: 24
143.20.102.0/23 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.108.0/22 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.120.0/23 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.136.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.141.0/24 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.146.0/23 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.197.0/24 maxlen: 24
143.20.200.0/22 maxlen: 24
143.20.206.0/23 maxlen: 24
143.20.214.0/24 maxlen: 24
143.20.217.0/24 maxlen: 24
143.20.218.0/24 maxlen: 24
143.20.220.0/23 maxlen: 24
143.20.222.0/24 maxlen: 24
143.20.226.0/24 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.236.0/23 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.247.0/24 maxlen: 24
143.20.249.0/24 maxlen: 24
143.20.250.0/24 maxlen: 24
143.20.252.0/24 maxlen: 24
143.20.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f9:06:89:54:f8:bf:69:4a:a6:e5:f1:ee:dd:63:0d:a8:5f:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 4 19:28:25 2026 GMT
Not After : Nov 3 19:33:25 2027 GMT
Subject: CN=588A067D0E2738A2D1867E5227F05593D080FEC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:31:bd:fd:75:f0:15:d3:53:03:d7:f5:97:
82:a8:f8:fc:e1:39:ce:40:e6:6e:e3:aa:83:23:3c:
a5:bc:1a:9c:27:10:29:83:28:b6:56:81:51:27:32:
f2:dd:57:08:96:15:c8:af:ed:ed:3f:26:8b:8a:cc:
a0:7d:a8:23:da:a1:07:ef:23:13:34:93:99:10:d1:
da:2c:7c:9e:e9:8f:10:01:7b:e1:29:25:dd:6f:e4:
74:e3:fb:e2:82:c5:2b:92:4b:64:5f:8d:e8:c8:32:
be:e4:13:47:d8:6c:0a:7e:4d:59:d5:6d:06:56:bc:
06:bf:3a:6e:bb:d7:cf:6b:e5:f5:f1:95:cd:bd:e2:
90:92:8e:c0:83:39:00:e9:0b:f2:9b:b4:ee:9b:9a:
cd:28:8d:78:51:d4:18:e8:ee:e0:ad:f8:af:51:95:
9d:b9:14:1d:45:8a:4b:fb:f7:f5:6e:4a:20:ac:c7:
0d:f2:7b:fa:71:f9:6d:5e:91:cb:92:9e:64:fc:f4:
c4:37:6f:d1:20:ba:43:05:8a:8e:64:57:56:6a:34:
e9:4f:72:9a:68:95:10:fe:c4:e1:4d:7f:a8:1d:b2:
20:0f:99:6d:1f:16:34:2d:c0:31:32:6e:5b:c1:4d:
05:f4:b9:84:4e:c5:0f:1b:59:f4:88:78:30:8b:bb:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:06:7D:0E:27:38:A2:D1:86:7E:52:27:F0:55:93:D0:80:FE:C0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.110.0/23
90.96.114.0-90.96.117.255
90.96.123.0/24
90.96.127.0/24
90.96.196.0-90.96.235.255
90.96.248.0/21
143.20.7.0/24
143.20.11.0/24
143.20.13.0/24
143.20.18.0/24
143.20.22.0/24
143.20.28.0/24
143.20.39.0/24
143.20.48.0/24
143.20.53.0/24
143.20.57.0/24
143.20.63.0/24
143.20.72.0/23
143.20.75.0/24
143.20.78.0/24
143.20.86.0/24
143.20.102.0/23
143.20.105.0/24
143.20.108.0/22
143.20.113.0/24
143.20.120.0/23
143.20.128.0/24
143.20.131.0/24
143.20.136.0/24
143.20.139.0/24
143.20.141.0/24
143.20.145.0-143.20.147.255
143.20.152.0/24
143.20.157.0/24
143.20.162.0/24
143.20.167.0-143.20.168.255
143.20.176.0/24
143.20.178.0/23
143.20.190.0/24
143.20.197.0/24
143.20.200.0/22
143.20.206.0/23
143.20.214.0/24
143.20.217.0-143.20.218.255
143.20.220.0-143.20.222.255
143.20.226.0/24
143.20.228.0/24
143.20.232.0-143.20.237.255
143.20.239.0-143.20.243.255
143.20.247.0/24
143.20.249.0-143.20.250.255
143.20.252.0/24
143.20.254.0/23
Signature Algorithm: sha256WithRSAEncryption
07:e2:b1:ae:14:92:c0:8c:be:59:03:8c:a1:89:6e:23:bb:2c:
6a:19:0e:a3:e9:90:3b:f6:84:3b:3e:9e:c9:22:69:d0:57:53:
27:fa:f0:53:ea:b3:7d:88:51:07:55:8d:44:65:c9:ee:26:91:
ad:2f:75:a4:9e:4b:94:9a:b0:50:53:fa:e7:3d:de:37:8c:12:
8b:d5:20:a7:58:a0:fb:4a:1f:9e:7d:5a:61:0a:f1:4b:aa:38:
42:34:c2:a1:85:da:6a:8a:d5:c7:9b:10:55:21:22:86:41:9b:
a8:ce:c3:be:3a:c1:8b:0e:7e:32:6b:9f:d6:ab:e1:d1:03:65:
71:20:bc:8d:90:01:85:1c:d9:fb:7a:80:2d:1e:e0:4b:5e:ce:
cc:8e:be:cc:a6:4a:f0:b2:6c:dc:5c:3c:ac:d5:91:4f:7d:62:
46:e2:93:07:48:02:bf:24:c8:94:a7:14:ef:fe:e2:da:10:9e:
8c:e3:a2:84:08:02:8a:0a:4e:b8:1f:f4:c2:05:67:51:c1:b7:
f4:84:a3:fd:12:99:31:09:d6:3b:bb:ba:9b:4f:6f:61:b6:7c:
de:9b:b0:29:da:21:80:e5:6e:71:fa:08:ed:7c:b6:d5:8e:bc:
0b:20:d7:a4:67:9f:af:84:05:9d:b3:db:d3:42:34:8d:41:41:
60:5a:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:16:38 2026 by rpki-client