Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: cVolKtOM0FNH2RJvixydN9yPe7sSIkO3CPaASzpeGm8=
Subject key identifier: 0A:8F:6A:69:6A:59:EF:DD:32:70:29:E8:3C:0C:26:57:5C:36:21:B4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2757C522DB8D5D7B257C54D5338B95A912C7725F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Mon 20 Jul 2026 16:36:31 +0000
ROA not before: Mon 20 Jul 2026 16:31:31 +0000
ROA not after: Mon 19 Jul 2027 16:36:31 +0000
asID: 834
IP address blocks: 96.62.77.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.231.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.92.0/24 maxlen: 24
143.14.121.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.186.0/23 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.209.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
143.14.250.0/24 maxlen: 24
143.14.253.0/24 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
146.103.59.0/24 maxlen: 24
147.79.17.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
148.135.172.0/23 maxlen: 24
148.135.181.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
150.241.143.0/24 maxlen: 24
150.241.199.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.242.0/23 maxlen: 24
150.241.251.0/24 maxlen: 24
155.117.8.0/22 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.76.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.118.0/23 maxlen: 24
155.117.126.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.159.0/24 maxlen: 24
155.117.167.0/24 maxlen: 24
155.117.168.0/23 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.179.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.214.0/23 maxlen: 24
155.117.218.0/24 maxlen: 24
155.117.220.0/23 maxlen: 24
155.117.228.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
155.117.245.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.65.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.80.0/23 maxlen: 24
167.148.84.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
167.148.119.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
168.222.8.0/23 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.14.0/23 maxlen: 24
168.222.18.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.30.0/23 maxlen: 24
168.222.32.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.41.0/24 maxlen: 24
168.222.44.0/24 maxlen: 24
168.222.46.0/23 maxlen: 24
168.222.50.0/23 maxlen: 24
168.222.52.0/23 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
168.222.62.0/24 maxlen: 24
168.222.66.0/24 maxlen: 24
168.222.68.0/22 maxlen: 24
168.222.72.0/22 maxlen: 24
168.222.76.0/24 maxlen: 24
168.222.78.0/23 maxlen: 24
168.222.80.0/24 maxlen: 24
168.222.82.0/24 maxlen: 24
168.222.85.0/24 maxlen: 24
168.222.90.0/23 maxlen: 24
168.222.92.0/22 maxlen: 24
168.222.98.0/23 maxlen: 24
168.222.105.0/24 maxlen: 24
168.222.106.0/23 maxlen: 24
168.222.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:57:c5:22:db:8d:5d:7b:25:7c:54:d5:33:8b:95:a9:12:c7:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 16:31:31 2026 GMT
Not After : Jul 19 16:36:31 2027 GMT
Subject: CN=0A8F6A696A59EFDD327029E83C0C26575C3621B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:6e:15:a0:37:d9:fe:45:d7:98:2f:da:5a:
83:0f:31:1b:01:a9:53:18:79:39:49:2f:a6:31:9a:
c6:65:72:89:b5:5d:c1:f2:36:01:2f:42:24:c5:8a:
a7:77:55:7b:12:b6:97:a8:f1:99:0a:a6:72:40:19:
25:c7:9b:79:a4:c1:e9:b6:06:fa:46:e8:38:3f:0b:
0d:95:a8:65:db:77:9d:2e:1e:8c:02:bb:ac:44:40:
73:51:b8:f2:63:cf:05:14:15:82:19:8f:cf:0c:63:
0b:9b:39:78:6d:57:09:e0:ed:09:43:97:15:4a:00:
29:09:c5:6b:fd:d5:77:15:ef:c9:fd:77:ad:50:cd:
8e:e1:5b:aa:ee:45:2c:79:a8:1f:b4:d5:71:2a:c8:
f4:38:6a:0f:58:1d:32:20:be:46:c1:1d:a3:4a:f5:
8f:a8:57:28:6a:e1:fd:ae:9e:b0:5d:68:69:ac:b9:
85:9f:8e:6f:67:d2:10:fe:d9:74:98:c3:a6:33:24:
e2:8f:77:b4:cf:f0:ff:f5:98:ea:22:7a:da:d1:6c:
5b:a2:70:11:cf:03:bf:58:e6:31:5f:85:32:66:5e:
5b:7d:6e:b0:69:5f:1e:bb:98:a3:60:17:92:97:12:
04:ac:e2:11:a5:e4:c9:69:41:ad:d8:ee:ad:3a:30:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:6A:69:6A:59:EF:DD:32:70:29:E8:3C:0C:26:57:5C:36:21:B4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
96.62.96.0/23
96.62.231.0/24
140.233.181.0/24
143.14.12.0/24
143.14.16.0/24
143.14.18.0/24
143.14.33.0/24
143.14.68.0/24
143.14.91.0-143.14.92.255
143.14.121.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0/24
143.14.140.0/24
143.14.181.0-143.14.182.255
143.14.185.0-143.14.187.255
143.14.191.0/24
143.14.194.0/24
143.14.209.0/24
143.14.218.0/24
143.14.245.0/24
143.14.248.0-143.14.250.255
143.14.253.0/24
145.223.1.0-145.223.2.255
146.103.48.0/24
146.103.51.0/24
146.103.59.0/24
147.79.17.0/24
147.79.31.0/24
148.135.172.0/23
148.135.181.0/24
148.135.194.0/24
150.241.143.0/24
150.241.199.0-150.241.201.255
150.241.240.0/24
150.241.242.0/23
150.241.251.0/24
155.117.8.0/22
155.117.23.0/24
155.117.38.0/24
155.117.63.0/24
155.117.76.0/24
155.117.86.0/24
155.117.97.0/24
155.117.112.0/24
155.117.118.0/23
155.117.126.0/24
155.117.136.0/24
155.117.141.0/24
155.117.159.0/24
155.117.167.0-155.117.169.255
155.117.171.0/24
155.117.179.0/24
155.117.184.0/24
155.117.190.0/24
155.117.202.0/24
155.117.207.0/24
155.117.210.0/24
155.117.214.0/23
155.117.218.0/24
155.117.220.0/23
155.117.228.0/24
155.117.240.0/24
155.117.245.0/24
162.141.5.0/24
162.141.8.0/24
162.141.44.0/24
162.141.65.0/24
162.141.80.0/24
162.141.82.0/23
162.141.97.0/24
162.141.105.0/24
162.141.107.0/24
162.141.158.0/24
162.141.161.0/24
162.141.163.0/24
167.148.8.0/24
167.148.80.0/23
167.148.84.0/24
167.148.86.0/24
167.148.119.0/24
167.148.194.0/24
168.222.8.0/23
168.222.12.0/24
168.222.14.0/23
168.222.18.0/24
168.222.23.0/24
168.222.30.0-168.222.32.255
168.222.34.0/24
168.222.41.0/24
168.222.44.0/24
168.222.46.0/23
168.222.50.0-168.222.54.255
168.222.61.0-168.222.62.255
168.222.66.0/24
168.222.68.0-168.222.76.255
168.222.78.0-168.222.80.255
168.222.82.0/24
168.222.85.0/24
168.222.90.0-168.222.95.255
168.222.98.0/23
168.222.105.0-168.222.107.255
168.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
18:7a:f8:03:4b:01:6e:d7:83:93:1c:7c:6d:a5:d4:f7:97:bb:
5d:35:6c:cc:14:16:de:f8:5f:9c:5e:55:b5:c5:43:67:e5:4f:
88:c8:07:d5:5a:b3:06:58:78:01:7f:8c:bc:7d:83:e6:5f:d8:
26:ec:5e:62:ff:e6:9a:58:7b:91:84:fe:0c:4d:68:e0:2b:83:
8a:aa:83:cc:1c:ea:4d:d8:59:61:91:50:2d:ac:02:d2:cc:61:
f4:9f:82:9c:8f:a6:d8:a3:b8:19:46:b5:5f:c0:0e:d6:37:8b:
c6:49:aa:e1:af:83:34:59:cc:25:25:8b:65:52:3f:e3:9d:ff:
43:97:d8:98:52:6d:8c:91:36:9b:f6:f7:2a:69:f4:85:d9:20:
14:68:ec:27:0d:2d:da:47:14:6e:a9:9c:33:db:57:c3:9b:5a:
84:e5:bf:bb:b7:cb:1f:43:e1:06:c9:3c:a9:87:c8:d7:b8:bd:
42:b4:b4:f0:88:c1:fe:1c:68:f6:fa:c3:9f:34:38:bf:0d:b2:
27:24:f7:85:51:5e:41:8d:3b:ff:ad:c4:3f:64:c3:55:c9:04:
4f:44:7d:3f:54:e9:21:f5:38:00:03:b7:20:4e:2c:67:da:3d:
47:be:82:27:18:d9:4f:53:de:ed:9d:35:92:72:28:8f:a1:6a:
53:9a:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:51 2026 by rpki-client