Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 2Djoi5rUG+sFHGk/7K5LPKaf4pV+GpIv7pgDOFdwCj8=
Subject key identifier: 54:32:43:DF:1C:24:B6:5D:14:6F:E1:7C:26:A1:6B:E4:DC:5E:8D:E8
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 741E15A4DE66069AC8CA64AFCE2C094BB3E622F8
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
Signing time: Fri 25 Sep 2026 00:02:31 +0000
ROA not before: Thu 24 Sep 2026 23:57:31 +0000
ROA not after: Fri 24 Sep 2027 00:02:31 +0000
asID: 834
IP address blocks: 5.199.1.0/24 maxlen: 24
5.199.5.0/24 maxlen: 24
5.199.6.0/24 maxlen: 24
5.199.11.0/24 maxlen: 24
5.199.13.0/24 maxlen: 24
5.199.31.0/24 maxlen: 24
5.199.33.0/24 maxlen: 24
5.199.34.0/23 maxlen: 24
5.199.36.0/23 maxlen: 24
5.199.39.0/24 maxlen: 24
5.199.41.0/24 maxlen: 24
5.199.50.0/24 maxlen: 24
5.199.52.0/22 maxlen: 24
5.199.60.0/24 maxlen: 24
5.199.64.0/18 maxlen: 24
185.169.120.0/24 maxlen: 24
212.74.34.0/24 maxlen: 24
212.74.38.0/24 maxlen: 24
212.74.43.0/24 maxlen: 24
212.74.46.0/23 maxlen: 24
212.74.50.0/24 maxlen: 24
212.74.54.0/24 maxlen: 24
212.74.57.0/24 maxlen: 24
212.74.59.0/24 maxlen: 24
212.74.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1e:15:a4:de:66:06:9a:c8:ca:64:af:ce:2c:09:4b:b3:e6:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 24 23:57:31 2026 GMT
Not After : Sep 24 00:02:31 2027 GMT
Subject: CN=543243DF1C24B65D146FE17C26A16BE4DC5E8DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:e3:e8:c5:ab:8a:67:e0:9a:90:60:8b:12:
60:9d:fc:7a:aa:f7:81:dd:ec:d7:14:7a:9c:e6:3b:
ae:c5:22:06:60:22:35:fb:bf:16:b6:f0:35:c1:07:
63:77:72:23:8b:36:4b:57:83:c4:e7:e3:68:86:e1:
0b:40:68:4d:6a:91:90:17:c9:b0:2b:3b:5f:b6:fb:
5e:d7:ed:63:c4:c9:6b:53:03:cf:d5:a5:06:ef:a2:
5b:de:7d:72:2f:7c:63:73:ec:b6:54:38:f1:c7:01:
01:25:1b:49:53:73:3c:9a:b1:d6:7c:41:f8:34:fb:
e7:61:3d:94:d5:56:44:55:10:38:a5:5a:41:4a:19:
96:31:9a:f5:18:4a:3e:67:2e:66:20:b6:ef:a5:d5:
d2:8f:7a:a2:7e:f7:6d:e5:65:4c:cf:18:5b:d3:bb:
da:4e:89:47:85:b2:f7:35:19:24:70:80:62:82:3f:
d2:ae:d9:ef:6d:da:88:f6:19:e3:ff:a9:c8:19:d6:
f0:40:f4:08:c3:73:52:db:5c:9f:8a:28:db:c0:19:
3a:b6:ff:5d:5c:3b:dd:05:7f:e9:36:4b:92:90:07:
89:30:39:b4:36:45:e0:b1:93:a7:8e:7f:93:cc:ae:
8d:6c:3d:40:ab:a1:e4:98:30:b1:44:e9:3a:16:41:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:43:DF:1C:24:B6:5D:14:6F:E1:7C:26:A1:6B:E4:DC:5E:8D:E8
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.1.0/24
5.199.5.0-5.199.6.255
5.199.11.0/24
5.199.13.0/24
5.199.31.0/24
5.199.33.0-5.199.37.255
5.199.39.0/24
5.199.41.0/24
5.199.50.0/24
5.199.52.0/22
5.199.60.0/24
5.199.64.0/18
185.169.120.0/24
212.74.34.0/24
212.74.38.0/24
212.74.43.0/24
212.74.46.0/23
212.74.50.0/24
212.74.54.0/24
212.74.57.0/24
212.74.59.0-212.74.63.255
Signature Algorithm: sha256WithRSAEncryption
17:d1:b6:49:5a:cf:ce:b1:0c:87:9c:c6:ad:09:ce:45:20:c1:
eb:55:1a:51:80:00:54:c1:5a:78:97:92:0e:ad:6b:71:00:a3:
85:c3:3d:af:70:e2:24:12:3d:07:0b:eb:70:f7:8e:bf:81:8d:
cb:27:ac:f2:b4:f0:c9:79:32:27:94:4a:4a:e8:8b:25:43:9f:
90:25:b2:9e:a0:17:3d:34:1f:3d:44:bb:63:7a:5c:88:30:24:
fc:4a:13:ce:8f:92:b7:d9:8f:5a:d6:af:12:88:4c:8e:9c:8b:
ac:65:dd:bb:e7:cf:32:88:46:8a:0b:0f:45:80:1c:09:34:67:
90:45:19:c7:6d:ff:b5:0c:ae:f7:ba:62:9c:14:2e:49:6f:3d:
e8:36:d8:27:a6:be:f0:45:ab:dd:e2:f7:49:82:71:73:c7:69:
9b:21:b6:92:ec:c7:cc:26:47:9e:30:60:b6:8f:51:9a:9d:4f:
55:3f:14:f4:f1:f0:45:00:a8:a6:6e:59:ca:e6:14:d3:67:fb:
52:94:74:38:db:50:d8:fb:5b:30:d3:91:d9:6f:d8:fa:82:4c:
42:04:6b:54:0e:fa:27:50:63:17:14:c3:d9:9f:e2:d8:47:31:
99:96:5d:c7:cb:0f:cc:36:fe:89:d8:41:07:24:f7:56:43:34:
34:55:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:33:55 2026 by rpki-client