Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: iMoNZq2mhq4IseDlim0n9c/dasofAUDyvvQO2E/Hslk=
Subject key identifier: 5F:EA:82:A8:D9:0C:9E:D6:A8:00:69:87:CD:F2:E3:FC:B5:26:2D:8A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 594AADE10249501F0BB4E4D3A06730E9D1131CF4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Tue 22 Jul 2025 10:11:26 +0000
ROA not before: Tue 22 Jul 2025 10:06:26 +0000
ROA not after: Tue 21 Jul 2026 10:11:26 +0000
asID: 834
IP address blocks: 143.20.11.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.99.0/24 maxlen: 24
143.20.106.0/24 maxlen: 24
143.20.142.0/24 maxlen: 24
143.20.155.0/24 maxlen: 24
143.20.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4a:ad:e1:02:49:50:1f:0b:b4:e4:d3:a0:67:30:e9:d1:13:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 22 10:06:26 2025 GMT
Not After : Jul 21 10:11:26 2026 GMT
Subject: CN=5FEA82A8D90C9ED6A8006987CDF2E3FCB5262D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:11:f5:98:f7:36:88:9e:83:f8:fd:53:76:
d8:94:21:98:0a:b4:22:89:a7:08:4a:08:19:26:20:
3f:ee:a5:6e:4c:ed:e6:ff:29:ea:77:21:86:46:4e:
34:40:79:de:f3:4e:bd:2f:c5:56:86:51:25:49:ac:
09:26:41:f9:84:9f:6d:4a:31:7e:e3:80:e1:50:97:
f2:5f:d7:88:3c:55:f2:21:bf:58:02:bb:57:71:a0:
17:24:1f:f4:b5:cf:a3:84:1c:60:8c:06:f8:b3:fc:
c5:d3:34:ae:7a:be:9a:49:46:13:d8:fd:86:80:56:
a4:e4:49:db:2b:0d:d2:45:f5:bf:37:99:0c:67:d6:
c6:d3:3a:4e:56:7e:d5:ed:1f:a2:2a:ee:5b:87:30:
f6:f3:c3:18:ed:0c:41:b7:dd:75:12:01:53:1c:2f:
59:28:8d:e3:13:1e:fc:36:d8:fa:3c:c1:83:de:0f:
65:11:21:01:28:74:6f:32:71:79:7c:03:24:f6:97:
38:06:72:bc:b0:4c:b3:ba:36:4d:8c:a6:08:0f:81:
04:c6:6b:b9:8f:c8:f0:70:7a:8b:61:8f:83:4c:e8:
5e:43:86:e7:b1:43:90:06:96:36:2d:27:ab:d0:37:
52:aa:b3:b0:e9:6b:9e:17:09:69:1a:5a:07:e7:09:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:82:A8:D9:0C:9E:D6:A8:00:69:87:CD:F2:E3:FC:B5:26:2D:8A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.11.0/24
143.20.77.0/24
143.20.99.0/24
143.20.106.0/24
143.20.142.0/24
143.20.155.0/24
143.20.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d7:f1:9e:fa:e8:b6:22:39:40:e2:47:63:91:cf:38:f0:46:
d1:c3:6a:29:03:fb:5f:ca:6c:ff:a6:dd:b7:b3:95:71:ed:0d:
41:d1:95:17:46:bb:02:3f:c2:05:bf:78:43:21:f8:4c:2e:17:
78:33:13:87:20:4b:12:6d:6b:7c:d3:66:45:bc:52:e3:ae:1e:
17:73:cc:c6:74:b0:6c:f8:22:b0:a2:a5:da:3e:2a:3d:3a:63:
73:d6:86:4a:d8:d9:ea:f5:20:46:2b:2d:b6:c5:fd:f5:f4:69:
26:ec:4f:d6:ad:55:1f:49:be:b0:26:8e:67:61:25:7a:9c:65:
3d:a8:85:72:a9:d1:a4:48:2e:5e:da:21:2f:30:55:78:6a:5f:
8d:d8:64:6e:b7:db:4e:e6:9a:86:c7:d7:5f:52:6d:7c:2e:ca:
33:01:19:6e:4b:30:50:09:8c:ff:5b:74:2c:ac:9b:25:34:e2:
fb:ef:d9:de:00:93:17:ea:21:99:bd:0b:45:32:a7:3f:b0:42:
62:52:14:5c:c2:8d:5f:2f:5f:e8:07:07:95:08:fd:df:58:27:
7e:0c:9a:bb:fe:eb:e8:0b:59:22:dc:e8:8a:94:a6:28:d4:99:
46:6a:09:ac:eb:86:cd:d2:a0:93:72:fd:b1:20:b6:85:e8:ce:
ae:a7:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:26 2025 by rpki-client