Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 4TS+q3uAlDpV7UWwiD1zIR99fiXwd+PPr7ztCo6zuRM=
Subject key identifier: 1F:55:16:28:33:17:A2:0A:C8:20:92:4B:2D:D4:9C:D2:6E:80:2C:90
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 015514E9277507BDFA64E5D6582D13954550E2E7
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS834.roa
Signing time: Mon 13 Apr 2026 13:26:20 +0000
ROA not before: Mon 13 Apr 2026 13:21:20 +0000
ROA not after: Mon 12 Apr 2027 13:26:20 +0000
asID: 834
IP address blocks: 147.125.128.0/24 maxlen: 24
147.125.131.0/24 maxlen: 24
147.125.139.0/24 maxlen: 24
147.125.148.0/23 maxlen: 24
147.125.150.0/24 maxlen: 24
147.125.157.0/24 maxlen: 24
147.125.158.0/23 maxlen: 24
147.125.160.0/19 maxlen: 24
147.125.192.0/22 maxlen: 24
147.125.198.0/24 maxlen: 24
147.125.204.0/24 maxlen: 24
147.125.207.0/24 maxlen: 24
147.125.209.0/24 maxlen: 24
147.125.210.0/23 maxlen: 24
147.125.212.0/23 maxlen: 24
147.125.240.0/24 maxlen: 24
147.125.243.0/24 maxlen: 24
147.125.244.0/23 maxlen: 24
147.125.246.0/24 maxlen: 24
147.125.252.0/24 maxlen: 24
147.125.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:55:14:e9:27:75:07:bd:fa:64:e5:d6:58:2d:13:95:45:50:e2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 13 13:21:20 2026 GMT
Not After : Apr 12 13:26:20 2027 GMT
Subject: CN=1F5516283317A20AC820924B2DD49CD26E802C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:e6:b3:42:c5:a3:bc:27:4c:50:5a:a2:23:
b6:3c:5d:f2:f3:ca:ca:db:5d:05:a8:1d:eb:56:93:
d5:70:1c:53:d9:15:ae:99:bf:36:14:f0:12:51:78:
3a:98:ee:51:1f:f4:c9:9b:99:9d:4f:ae:27:45:88:
3f:0f:9e:11:c0:a3:28:0c:ea:a3:9a:f8:12:e3:f9:
2f:b5:7f:57:50:91:f9:6e:48:ac:aa:f9:5b:22:65:
b5:fc:b5:9b:00:fb:a3:65:e4:58:29:08:72:ef:e2:
2d:99:79:4a:15:d9:d8:7f:26:6f:58:86:ed:05:99:
e1:13:e9:f5:b2:20:6d:fc:6b:39:9b:60:6d:54:37:
cd:58:3b:7f:44:d1:f7:eb:9b:37:a9:dc:4c:80:8a:
2f:a9:ec:9d:65:a1:7c:d1:6d:a9:a0:1d:00:63:d8:
f4:2d:d0:f3:0e:b8:e3:0c:d3:70:03:dd:ea:6d:fe:
52:8d:2b:0e:06:df:b4:31:c6:24:46:a3:49:d4:ca:
59:87:a0:8e:37:91:64:96:a1:cf:84:48:a3:71:c3:
d7:9e:62:73:44:d1:8f:f6:95:32:bd:62:3f:81:c8:
48:6e:1c:54:2d:1e:49:1d:4f:96:02:3a:0d:50:5e:
8f:10:f8:4c:7e:a6:dc:61:bf:e3:e3:8e:78:6a:ab:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:16:28:33:17:A2:0A:C8:20:92:4B:2D:D4:9C:D2:6E:80:2C:90
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.128.0/24
147.125.131.0/24
147.125.139.0/24
147.125.148.0-147.125.150.255
147.125.157.0-147.125.195.255
147.125.198.0/24
147.125.204.0/24
147.125.207.0/24
147.125.209.0-147.125.213.255
147.125.240.0/24
147.125.243.0-147.125.246.255
147.125.252.0/24
147.125.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:51:06:49:be:33:5e:da:d7:82:c2:48:a6:2d:32:c7:e2:9c:
22:0f:03:d6:dd:0d:6c:ec:82:a6:27:d4:be:8b:40:9c:e5:3b:
c1:d4:9f:db:58:42:81:43:0f:52:81:d5:a1:6a:6c:c3:3e:ff:
12:a5:9c:eb:a2:4b:18:a1:39:09:c8:dc:00:e2:8f:a3:64:bc:
0e:06:33:17:3d:13:34:b5:ce:b1:be:5f:60:6a:2f:54:7d:34:
d6:8d:8d:bd:31:25:28:c0:11:1e:b9:f7:1d:ac:90:9c:12:95:
70:0f:9d:3d:3e:23:cd:88:8c:15:ff:64:ce:ea:55:73:a7:02:
ab:73:9e:b8:b4:db:91:ab:81:d7:78:09:37:a9:ab:6b:51:a2:
5f:69:7d:52:16:13:82:53:fe:14:1c:9d:c9:6e:18:db:51:99:
b4:31:cf:35:f6:9a:d8:52:d9:43:71:d3:9c:1a:84:ef:5e:2c:
56:e0:b4:6b:c3:d7:7d:54:01:2c:8a:b3:6d:f3:96:d3:a7:6c:
27:f6:33:5e:f1:75:c2:f3:cc:c6:69:6c:a6:84:ef:1b:c2:2b:
83:13:62:86:73:5a:e4:08:a1:22:5f:11:bf:23:55:30:4d:a1:
e2:dc:cb:21:3d:ba:e5:d1:6a:53:05:84:6c:ec:cb:e7:3e:32:
54:62:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:53:33 2026 by rpki-client