Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 2UJMRkASbEuIYOOfNSBdYo76kwHPbLA5GzJ3JX5Wpkc=
Subject key identifier: 06:2C:F4:79:F1:63:0E:B1:4A:68:E1:F9:25:64:BF:05:DC:86:7D:B8
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 67E23AB36622DEED2429B3D673B27CF92ABDA5BB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Sun 26 Jul 2026 11:33:32 +0000
ROA not before: Sun 26 Jul 2026 11:28:32 +0000
ROA not after: Sun 25 Jul 2027 11:33:32 +0000
asID: 834
IP address blocks: 143.20.7.0/24 maxlen: 24
143.20.8.0/23 maxlen: 24
143.20.11.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
143.20.16.0/24 maxlen: 24
143.20.18.0/24 maxlen: 24
143.20.22.0/24 maxlen: 24
143.20.28.0/24 maxlen: 24
143.20.32.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
143.20.36.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.42.0/23 maxlen: 24
143.20.45.0/24 maxlen: 24
143.20.47.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.50.0/24 maxlen: 24
143.20.53.0/24 maxlen: 24
143.20.56.0/23 maxlen: 24
143.20.59.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.70.0/23 maxlen: 24
143.20.72.0/23 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.80.0/24 maxlen: 24
143.20.86.0/23 maxlen: 24
143.20.103.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.106.0/23 maxlen: 24
143.20.109.0/24 maxlen: 24
143.20.110.0/23 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.120.0/24 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.132.0/24 maxlen: 24
143.20.136.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.140.0/23 maxlen: 24
143.20.144.0/23 maxlen: 24
143.20.147.0/24 maxlen: 24
143.20.151.0/24 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.173.0/24 maxlen: 24
143.20.175.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.188.0/22 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.194.0/24 maxlen: 24
143.20.200.0/22 maxlen: 24
143.20.206.0/23 maxlen: 24
143.20.213.0/24 maxlen: 24
143.20.214.0/24 maxlen: 24
143.20.216.0/23 maxlen: 24
143.20.218.0/24 maxlen: 24
143.20.220.0/22 maxlen: 24
143.20.226.0/23 maxlen: 24
143.20.228.0/23 maxlen: 24
143.20.231.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.236.0/23 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.247.0/24 maxlen: 24
143.20.248.0/22 maxlen: 24
143.20.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 02:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e2:3a:b3:66:22:de:ed:24:29:b3:d6:73:b2:7c:f9:2a:bd:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 26 11:28:32 2026 GMT
Not After : Jul 25 11:33:32 2027 GMT
Subject: CN=062CF479F1630EB14A68E1F92564BF05DC867DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:bc:89:1c:52:ea:b6:5d:7f:56:cf:aa:02:
7a:e0:78:2c:35:8c:26:62:a7:26:46:08:bb:4e:58:
6c:62:e8:aa:ac:99:89:ed:ac:8b:14:88:f7:dc:1f:
46:b6:07:e5:7e:41:32:a9:73:4a:c9:7e:d2:1b:a2:
4d:55:9b:76:c1:31:de:54:81:53:de:19:9f:6c:89:
ff:db:32:38:a2:3d:d1:6b:55:44:c1:a4:7c:78:8a:
5e:ca:6a:d3:1e:c7:68:d1:d9:3d:15:dd:d0:64:af:
56:87:0f:64:6e:eb:d4:38:09:6c:91:e0:19:f1:68:
3a:e0:d1:3a:51:c9:4c:7b:5e:79:28:16:61:6e:3e:
84:5e:02:7a:e6:ff:93:e1:67:01:b0:f0:bb:a1:91:
b6:6c:17:a2:80:6b:8b:b0:59:64:d8:79:8b:20:0a:
39:db:e0:13:cb:52:4e:50:ab:fb:db:23:f5:d6:63:
73:bc:0e:08:91:2b:76:31:20:d1:36:dc:0e:cf:03:
61:a2:3d:ff:bc:4b:d4:ec:4b:c2:0f:85:79:aa:73:
ed:af:a3:a3:a6:1b:bd:25:c2:42:a9:d4:a1:b5:41:
36:ca:39:75:2c:ba:48:2d:71:ac:23:52:7e:eb:74:
16:14:32:cf:f4:1b:15:49:f9:d0:8d:97:d7:75:6b:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:F4:79:F1:63:0E:B1:4A:68:E1:F9:25:64:BF:05:DC:86:7D:B8
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.7.0-143.20.9.255
143.20.11.0/24
143.20.13.0-143.20.14.255
143.20.16.0/24
143.20.18.0/24
143.20.22.0/24
143.20.28.0/24
143.20.32.0/24
143.20.35.0-143.20.36.255
143.20.39.0/24
143.20.42.0/23
143.20.45.0/24
143.20.47.0-143.20.48.255
143.20.50.0/24
143.20.53.0/24
143.20.56.0/23
143.20.59.0/24
143.20.63.0/24
143.20.65.0/24
143.20.70.0-143.20.74.255
143.20.77.0/24
143.20.80.0/24
143.20.86.0/23
143.20.103.0/24
143.20.105.0-143.20.107.255
143.20.109.0-143.20.111.255
143.20.113.0/24
143.20.116.0-143.20.118.255
143.20.120.0/24
143.20.128.0/24
143.20.131.0-143.20.132.255
143.20.136.0/24
143.20.139.0-143.20.141.255
143.20.144.0/23
143.20.147.0/24
143.20.151.0-143.20.152.255
143.20.157.0/24
143.20.162.0/24
143.20.167.0-143.20.168.255
143.20.173.0/24
143.20.175.0-143.20.176.255
143.20.178.0/23
143.20.188.0-143.20.192.255
143.20.194.0/24
143.20.200.0/22
143.20.206.0/23
143.20.213.0-143.20.214.255
143.20.216.0-143.20.218.255
143.20.220.0/22
143.20.226.0-143.20.229.255
143.20.231.0-143.20.237.255
143.20.239.0-143.20.243.255
143.20.247.0-143.20.251.255
143.20.254.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:3b:77:10:bf:7d:56:30:79:7a:84:ca:8a:4c:6d:e1:5d:b5:
3a:48:03:df:6e:2d:16:71:da:0c:6d:80:8f:22:ce:20:4f:2a:
25:cf:09:60:88:62:00:d6:d6:e8:e6:4f:8c:5d:15:ba:44:49:
b9:eb:fc:c4:36:42:52:b1:43:b2:f2:4e:3f:c2:40:55:ce:12:
dd:85:ed:b3:43:97:3b:39:f8:55:5b:86:61:88:54:d5:76:e9:
33:67:4c:7b:b8:46:24:ab:07:07:46:37:1c:d3:ad:9e:89:7e:
8d:f7:b3:2d:0c:73:58:c3:fa:3e:e1:a9:0b:d1:80:89:6b:61:
0d:b9:1c:8a:54:74:3f:d7:8a:2f:35:0d:d3:10:85:3c:bb:a3:
6c:e7:94:cd:fd:67:6b:2e:12:b4:d0:a4:6f:74:65:3c:86:6a:
76:d8:10:0a:6e:8e:01:0a:3e:c2:eb:08:44:ae:a4:7b:2c:b5:
6c:4f:7f:84:c7:8f:6f:8e:9b:23:c0:de:71:7c:f9:20:61:f5:
77:0b:51:ae:88:cf:94:d2:e8:74:60:57:cc:1d:19:a5:55:93:
31:7a:db:c1:99:ea:4d:f3:33:39:9f:90:b5:8b:dd:84:f7:51:
7f:bb:b8:ff:6a:21:f6:67:90:46:84:6d:d3:92:d0:6c:85:ee:
b8:ad:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:07:09 2026 by rpki-client