Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: V0DOVYytBVFx7FML9VfM5zr0c0ITv8oFUb3Ly5s5+Bc=
Subject key identifier: EB:8D:07:EB:14:8C:E8:24:07:35:0E:85:FA:17:63:83:03:90:95:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6D124B1A9B977686502AF2235207D4DD2898BD42
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
Signing time: Sun 27 Sep 2026 06:01:00 +0000
ROA not before: Sun 27 Sep 2026 05:56:00 +0000
ROA not after: Sun 26 Sep 2027 06:01:00 +0000
asID: 834
IP address blocks: 69.90.35.0/24 maxlen: 24
69.90.119.0/24 maxlen: 24
76.74.213.0/24 maxlen: 24
96.62.96.0/23 maxlen: 24
96.62.217.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
140.150.239.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.18.0/23 maxlen: 24
143.14.23.0/24 maxlen: 24
143.14.33.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.66.0/24 maxlen: 24
143.14.68.0/24 maxlen: 24
143.14.82.0/23 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.124.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.130.0/24 maxlen: 24
143.14.140.0/24 maxlen: 24
143.14.152.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
143.14.181.0/24 maxlen: 24
143.14.182.0/24 maxlen: 24
143.14.185.0/24 maxlen: 24
143.14.187.0/24 maxlen: 24
143.14.191.0/24 maxlen: 24
143.14.194.0/24 maxlen: 24
143.14.198.0/24 maxlen: 24
143.14.218.0/24 maxlen: 24
143.14.229.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.248.0/23 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
146.103.52.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
147.79.55.0/24 maxlen: 24
148.135.172.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
150.241.200.0/23 maxlen: 24
150.241.242.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.123.0/24 maxlen: 24
155.117.136.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.150.0/24 maxlen: 24
155.117.156.0/24 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.186.0/24 maxlen: 24
155.117.200.0/23 maxlen: 24
155.117.241.0/24 maxlen: 24
155.117.249.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.82.0/23 maxlen: 24
162.141.90.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
162.141.140.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.3.0/24 maxlen: 24
167.148.94.0/24 maxlen: 24
167.148.123.0/24 maxlen: 24
167.148.141.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
168.222.17.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.24.0/24 maxlen: 24
168.222.41.0/24 maxlen: 24
168.222.45.0/24 maxlen: 24
168.222.52.0/24 maxlen: 24
168.222.54.0/24 maxlen: 24
168.222.67.0/24 maxlen: 24
168.222.68.0/24 maxlen: 24
168.222.70.0/24 maxlen: 24
168.222.73.0/24 maxlen: 24
168.222.74.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
168.222.92.0/24 maxlen: 24
168.222.116.0/23 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:12:4b:1a:9b:97:76:86:50:2a:f2:23:52:07:d4:dd:28:98:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 27 05:56:00 2026 GMT
Not After : Sep 26 06:01:00 2027 GMT
Subject: CN=EB8D07EB148CE82407350E85FA17638303909576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:e7:da:be:0b:d0:d0:14:1c:5f:4f:37:aa:
96:b2:f2:83:f5:b7:67:b1:8a:62:6c:00:08:51:87:
a6:5d:18:fc:6a:62:98:7c:b0:a6:db:27:45:9b:14:
e8:62:8c:1c:ca:d4:c7:cf:bc:df:bb:96:b6:42:ac:
d9:62:03:d6:bb:1b:be:fd:56:f9:ac:14:6d:2e:58:
f4:c9:c2:28:b5:28:e2:c1:b0:e2:56:0c:be:52:e4:
e2:92:1c:57:8c:e7:f3:c7:34:c9:3d:5f:cb:08:fb:
1b:c6:29:85:70:a6:89:a7:86:89:2f:78:5c:6f:38:
c8:57:d5:7f:a8:93:c3:28:3c:6a:ef:b0:34:7d:57:
98:a0:bc:48:5a:1a:6d:e5:3a:ba:67:c4:f8:31:73:
7c:54:15:bf:03:b8:32:5e:39:53:4d:8a:28:5c:af:
d5:1d:e9:4f:b6:22:fc:51:e4:39:3b:e3:1f:52:2c:
13:21:6c:ad:56:e2:3e:ce:88:8f:90:09:47:7c:a3:
14:4e:90:a7:62:91:76:b6:7e:79:5c:65:3f:4a:54:
96:54:87:fc:e7:e3:04:ba:69:cc:e5:54:5b:55:ae:
d6:78:af:ae:8a:96:51:76:8f:c3:b9:f0:e1:e3:cf:
f4:ce:bc:55:b6:ff:3b:90:17:50:3b:b7:e5:71:fb:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:07:EB:14:8C:E8:24:07:35:0E:85:FA:17:63:83:03:90:95:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.35.0/24
69.90.119.0/24
76.74.213.0/24
96.62.96.0/23
96.62.217.0/24
96.62.231.0/24
140.150.239.0/24
140.233.184.0/24
143.14.16.0/24
143.14.18.0/23
143.14.23.0/24
143.14.33.0/24
143.14.55.0/24
143.14.66.0/24
143.14.68.0/24
143.14.82.0/23
143.14.91.0/24
143.14.124.0/24
143.14.126.0/24
143.14.129.0-143.14.130.255
143.14.140.0/24
143.14.152.0/24
143.14.171.0/24
143.14.181.0-143.14.182.255
143.14.185.0/24
143.14.187.0/24
143.14.191.0/24
143.14.194.0/24
143.14.198.0/24
143.14.218.0/24
143.14.229.0/24
143.14.245.0/24
143.14.248.0/23
145.223.1.0-145.223.2.255
146.103.52.0/24
147.79.4.0/24
147.79.55.0/24
148.135.172.0/24
148.135.187.0/24
150.241.136.0/24
150.241.200.0/23
150.241.242.0/24
150.241.254.0/24
155.117.63.0/24
155.117.79.0/24
155.117.109.0/24
155.117.123.0/24
155.117.136.0/24
155.117.139.0/24
155.117.141.0/24
155.117.150.0/24
155.117.156.0/24
155.117.171.0/24
155.117.186.0/24
155.117.200.0/23
155.117.241.0/24
155.117.249.0/24
162.141.13.0/24
162.141.39.0/24
162.141.66.0/24
162.141.70.0/24
162.141.82.0/23
162.141.90.0/24
162.141.126.0/24
162.141.140.0/24
162.141.161.0/24
162.141.163.0/24
167.148.3.0/24
167.148.94.0/24
167.148.123.0/24
167.148.141.0/24
167.148.194.0/24
167.148.215.0/24
168.222.17.0/24
168.222.23.0-168.222.24.255
168.222.41.0/24
168.222.45.0/24
168.222.52.0/24
168.222.54.0/24
168.222.67.0-168.222.68.255
168.222.70.0/24
168.222.73.0-168.222.74.255
168.222.91.0-168.222.92.255
168.222.116.0/23
168.222.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:56:92:37:73:e8:03:09:0c:cd:a9:b2:a6:28:d6:fa:2c:27:
5d:1e:80:81:3e:d0:35:f2:b1:8a:34:bb:a7:16:1c:7b:a8:80:
29:2f:58:68:a2:4e:75:e2:01:17:44:f1:c1:07:70:9f:52:28:
47:03:94:eb:10:30:06:39:13:25:99:da:56:d0:6f:06:41:61:
e0:97:a3:77:61:f9:61:b2:e7:e6:ce:7e:6e:29:2a:06:5d:17:
31:cd:bf:85:c2:eb:5e:c5:08:bc:6e:26:01:3e:98:87:7d:ec:
c0:c3:a7:78:5b:55:34:19:05:a7:55:f6:14:c7:81:ec:5e:68:
76:7c:31:95:3a:7a:9a:4e:f1:64:19:7d:22:ba:c7:c5:27:15:
e1:58:0f:31:fe:e4:ef:c2:aa:60:3e:10:35:d5:b6:47:1f:7f:
09:36:d1:c3:1c:b4:fb:76:32:4b:f7:35:cd:0f:56:a5:aa:d2:
ad:80:03:06:9d:3a:e0:c9:c7:cf:95:e7:a3:fc:52:5d:b2:c0:
99:ac:ed:eb:88:66:aa:10:b7:8a:5c:ad:03:bd:6f:a3:5e:1c:
5a:54:1e:a2:a8:2f:45:61:c5:dd:08:c5:8e:0c:c2:1e:f3:a9:
b8:a4:48:bb:6a:43:c8:51:4c:6c:dd:9c:45:da:40:b6:9d:be:
98:4b:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:15:06 2026 by rpki-client