Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 3CQjZmvbM6qdDG7Z4QkIBLPcKgef/bN81mIJ+prtvr4=
Subject key identifier: 18:27:AB:C1:D4:CC:A2:6C:11:97:25:35:BD:1E:52:88:92:E6:B2:7A
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 66D542460AFBD951699783A086158EDD775C555F
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
Signing time: Sat 14 Nov 2026 09:47:28 +0000
ROA not before: Sat 14 Nov 2026 09:42:28 +0000
ROA not after: Sat 13 Nov 2027 09:47:28 +0000
asID: 834
IP address blocks: 152.237.225.0/24 maxlen: 24
152.237.234.0/23 maxlen: 24
152.237.236.0/24 maxlen: 24
152.237.240.0/23 maxlen: 24
152.237.243.0/24 maxlen: 24
152.237.245.0/24 maxlen: 24
152.237.250.0/23 maxlen: 24
152.237.252.0/23 maxlen: 24
177.177.227.0/24 maxlen: 24
177.177.240.0/24 maxlen: 24
177.177.242.0/23 maxlen: 24
177.177.245.0/24 maxlen: 24
177.177.247.0/24 maxlen: 24
177.177.248.0/23 maxlen: 24
177.177.251.0/24 maxlen: 24
177.177.252.0/23 maxlen: 24
186.241.163.0/24 maxlen: 24
186.241.165.0/24 maxlen: 24
186.241.166.0/24 maxlen: 24
186.241.169.0/24 maxlen: 24
186.241.170.0/24 maxlen: 24
186.241.172.0/23 maxlen: 24
186.241.174.0/24 maxlen: 24
186.241.177.0/24 maxlen: 24
186.241.181.0/24 maxlen: 24
186.241.190.0/24 maxlen: 24
201.4.18.0/23 maxlen: 24
201.4.30.0/24 maxlen: 24
201.50.16.0/24 maxlen: 24
201.50.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d5:42:46:0a:fb:d9:51:69:97:83:a0:86:15:8e:dd:77:5c:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Nov 14 09:42:28 2026 GMT
Not After : Nov 13 09:47:28 2027 GMT
Subject: CN=1827ABC1D4CCA26C11972535BD1E528892E6B27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:c7:d6:47:7a:f6:3a:52:21:2e:b8:d3:77:
ef:df:52:5f:fa:94:6e:2f:2b:37:83:dd:8b:07:af:
7a:bf:9e:23:55:52:73:c2:ef:33:61:7d:26:ad:8e:
2e:f0:5b:9d:3e:df:4b:f7:af:bd:29:dd:5c:f7:54:
fd:b4:bb:3b:ad:e7:55:38:ce:23:26:aa:1e:d3:a0:
c8:36:bf:83:9d:b3:84:45:0f:3c:47:83:e7:26:cb:
ff:a6:8f:a1:87:dc:05:60:c4:dc:aa:ca:2a:f5:61:
ec:5f:66:d9:27:fe:c5:b9:da:22:96:18:a8:10:3a:
e3:6e:86:e3:93:25:7a:3d:96:5e:29:ea:71:29:14:
65:37:4b:30:86:dc:e5:9e:2f:7b:64:9f:c4:77:4f:
34:ad:c5:8e:19:c9:dd:26:f7:ee:8c:b0:d3:02:b2:
bf:0d:03:41:02:9a:44:90:6f:89:35:47:52:11:bc:
5e:a6:e8:4c:3b:76:85:5b:88:98:eb:82:29:dc:31:
22:16:c3:1d:b0:39:23:a8:01:75:0c:3e:66:c0:89:
61:67:a7:a6:df:4a:51:17:bb:c5:25:6f:43:a7:89:
ad:db:f1:b1:a8:ca:73:bb:81:c0:32:d9:4b:52:51:
5f:f3:e5:e0:47:9a:78:8e:36:82:e3:61:f6:7d:d3:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:AB:C1:D4:CC:A2:6C:11:97:25:35:BD:1E:52:88:92:E6:B2:7A
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.225.0/24
152.237.234.0-152.237.236.255
152.237.240.0/23
152.237.243.0/24
152.237.245.0/24
152.237.250.0-152.237.253.255
177.177.227.0/24
177.177.240.0/24
177.177.242.0/23
177.177.245.0/24
177.177.247.0-177.177.249.255
177.177.251.0-177.177.253.255
186.241.163.0/24
186.241.165.0-186.241.166.255
186.241.169.0-186.241.170.255
186.241.172.0-186.241.174.255
186.241.177.0/24
186.241.181.0/24
186.241.190.0/24
201.4.18.0/23
201.4.30.0/24
201.50.16.0/24
201.50.30.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b2:eb:58:04:29:81:e5:10:c0:b4:d2:ff:ce:d0:1e:f2:68:
57:21:3c:ce:6c:16:3e:b8:f8:d9:b6:6f:30:da:6e:87:6a:75:
78:41:2a:60:e7:46:d1:16:04:9a:45:bb:99:a4:b3:11:04:2d:
45:06:39:9e:be:3e:d9:26:6b:0d:65:56:59:5c:64:2c:3e:6d:
13:08:cc:1b:ee:f8:f0:10:04:7f:6a:71:8f:e2:83:c8:6b:cc:
4f:0b:b1:1d:bb:1a:ea:52:e5:3a:ab:80:21:13:ee:fc:ea:cf:
e3:a9:fe:fa:6a:cc:ee:b3:77:af:60:76:1d:19:e5:68:96:ea:
3f:ea:cf:35:92:98:47:d4:21:41:84:0e:6c:ef:75:9a:88:e2:
95:b2:e8:86:4a:33:ca:29:21:1f:57:2d:0c:8d:63:d9:79:ab:
73:c0:d2:36:61:b8:2c:59:57:8b:2b:6e:80:1d:19:1e:ef:bd:
cf:65:85:15:fa:85:01:d7:81:1d:ca:e1:6f:66:e7:fd:d5:32:
0e:7c:82:78:eb:89:f1:dc:26:d3:e8:b1:19:26:6b:7e:65:7f:
36:d8:02:b5:a1:e3:be:5f:00:11:01:be:47:67:bc:42:7c:1b:
cf:2f:c5:52:af:1e:ab:b1:29:71:31:d5:b4:24:87:bd:f9:47:
78:24:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:46:19 2026 by rpki-client