Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: gi8yNnByypJ1TWUcTsbyJPwFHkhIh4D69OqKUlVw83g=
Subject key identifier: 2D:3D:16:D4:B3:2C:8B:F9:3E:EB:01:DA:FE:6E:66:E1:5C:C7:19:00
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5414B01D5F63D483F9F0F2115ACCFE03CDA251B4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Sun 20 Sep 2026 15:32:52 +0000
ROA not before: Sun 20 Sep 2026 15:27:52 +0000
ROA not after: Sun 19 Sep 2027 15:32:52 +0000
asID: 834
IP address blocks: 90.96.68.0/22 maxlen: 24
90.96.72.0/21 maxlen: 24
90.96.80.0/20 maxlen: 24
90.96.96.0/19 maxlen: 24
90.96.176.0/20 maxlen: 24
90.96.192.0/19 maxlen: 24
90.96.224.0/21 maxlen: 24
90.96.232.0/22 maxlen: 24
90.96.248.0/21 maxlen: 24
143.20.79.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.179.0/24 maxlen: 24
143.20.206.0/24 maxlen: 24
143.20.220.0/23 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:14:b0:1d:5f:63:d4:83:f9:f0:f2:11:5a:cc:fe:03:cd:a2:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 20 15:27:52 2026 GMT
Not After : Sep 19 15:32:52 2027 GMT
Subject: CN=2D3D16D4B32C8BF93EEB01DAFE6E66E15CC71900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:3e:1f:3e:fb:e9:d5:18:2e:f3:c6:cc:af:
b2:eb:48:27:72:ac:8b:46:7f:06:1d:21:7d:5f:b2:
d0:7a:e0:6a:0d:4c:7f:ba:1d:e6:f0:23:70:0e:ee:
34:09:62:20:9b:ef:b7:4f:75:d6:f3:1f:9b:b2:b0:
57:29:a1:c9:64:0c:13:e6:3a:41:cf:1f:4a:e0:11:
9e:dc:07:b6:31:bd:cc:34:9f:5d:3f:75:43:65:e5:
37:32:47:9e:fa:04:58:58:bf:93:e8:a3:f0:ac:58:
56:5e:c2:07:97:dc:08:05:32:23:ad:db:5b:c1:b7:
83:da:23:34:c4:ef:04:da:40:69:83:f8:60:54:7e:
52:4d:0a:fd:e8:5a:b5:a4:1d:18:e4:41:e5:66:d2:
85:7a:05:d3:fc:53:38:0a:f5:b1:a2:0c:d4:e2:a7:
a0:65:3e:37:c6:eb:2d:5d:09:e1:2b:84:e4:80:01:
a3:e3:0d:13:bf:81:b6:74:cd:cc:9e:56:a1:b9:93:
68:89:c8:78:73:07:73:4e:68:1e:3f:7e:5b:0a:49:
10:7d:1f:67:bc:1b:ba:21:29:44:ff:99:dd:f3:ee:
8a:87:ca:ff:8c:e0:a8:3b:25:67:20:a1:d8:05:eb:
0e:82:99:50:76:03:96:d7:ad:da:2f:aa:07:bd:87:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:16:D4:B3:2C:8B:F9:3E:EB:01:DA:FE:6E:66:E1:5C:C7:19:00
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.68.0-90.96.127.255
90.96.176.0-90.96.235.255
90.96.248.0/21
143.20.79.0/24
143.20.162.0/24
143.20.179.0/24
143.20.206.0/24
143.20.220.0/23
143.20.228.0/24
143.20.232.0/22
143.20.240.0/22
Signature Algorithm: sha256WithRSAEncryption
11:d8:f4:15:8a:89:da:f8:67:d3:f6:6d:88:d7:43:66:55:c4:
65:5d:92:03:0e:d6:8f:3f:e9:dd:85:f2:58:39:28:7c:a2:b8:
46:20:b6:90:57:1e:8f:12:db:1d:df:f1:2a:c9:6a:4b:20:91:
04:77:67:3b:02:b9:40:dc:3b:e9:99:c2:8f:00:63:ba:6e:d9:
35:03:25:9e:4b:a6:ca:21:98:20:0c:5c:df:d5:82:a9:05:73:
ee:3d:90:9d:29:5a:55:93:c2:97:e7:1a:20:0d:34:83:e3:0b:
bf:ad:80:29:b8:00:fc:43:ed:62:36:57:16:11:d6:e3:97:f4:
d2:63:63:ee:f4:2f:39:7c:fc:a9:e8:d6:35:db:59:0b:48:91:
72:71:27:2f:8f:00:0a:66:2d:50:a4:d4:c2:b8:5e:54:43:5c:
26:1e:5c:e6:7c:eb:7f:5f:d0:c4:0e:0b:62:d2:67:68:ec:13:
b3:a4:73:21:8d:f8:8f:d7:62:d6:6d:b1:44:81:1c:ce:ae:8f:
3a:78:94:02:34:f6:4d:a8:e1:01:cd:e5:be:cb:79:ec:04:8c:
71:81:c3:e9:b7:ff:34:ae:28:09:00:eb:19:1c:31:e3:9e:45:
a2:cc:fd:e7:47:94:18:5a:06:3e:3f:97:e4:ad:1e:d9:a3:60:
52:15:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:41:55 2026 by rpki-client