Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: DLpRsJPxGeMGSstB87PJCiYyF+r8uQMBjui3+VOc26c=
Subject key identifier: 40:CD:8B:19:EC:DE:5D:88:6A:E8:4E:FF:87:B1:75:3B:8B:43:03:F2
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 77CEB29A753017B04AD3AE1CFA1C8F2C5A8E8ED8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
Signing time: Mon 20 Jul 2026 15:59:00 +0000
ROA not before: Mon 20 Jul 2026 15:54:00 +0000
ROA not after: Mon 19 Jul 2027 15:59:00 +0000
asID: 834
IP address blocks: 46.236.192.0/22 maxlen: 24
46.236.197.0/24 maxlen: 24
46.236.207.0/24 maxlen: 24
46.236.209.0/24 maxlen: 24
46.236.210.0/24 maxlen: 24
46.236.212.0/23 maxlen: 24
46.236.214.0/24 maxlen: 24
46.236.217.0/24 maxlen: 24
46.236.223.0/24 maxlen: 24
46.236.241.0/24 maxlen: 24
46.236.243.0/24 maxlen: 24
46.236.252.0/22 maxlen: 24
82.139.206.0/24 maxlen: 24
82.139.218.0/24 maxlen: 24
82.139.220.0/24 maxlen: 24
82.139.227.0/24 maxlen: 24
82.139.228.0/23 maxlen: 24
82.139.231.0/24 maxlen: 24
82.139.232.0/22 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.238.0/23 maxlen: 24
82.139.241.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
82.139.244.0/24 maxlen: 24
82.139.247.0/24 maxlen: 24
82.139.248.0/23 maxlen: 24
82.139.251.0/24 maxlen: 24
212.17.225.0/24 maxlen: 24
212.17.226.0/23 maxlen: 24
212.17.233.0/24 maxlen: 24
212.17.234.0/23 maxlen: 24
212.17.236.0/22 maxlen: 24
212.60.144.0/24 maxlen: 24
212.60.146.0/23 maxlen: 24
212.60.148.0/24 maxlen: 24
212.60.152.0/24 maxlen: 24
212.60.154.0/23 maxlen: 24
212.60.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ce:b2:9a:75:30:17:b0:4a:d3:ae:1c:fa:1c:8f:2c:5a:8e:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 20 15:54:00 2026 GMT
Not After : Jul 19 15:59:00 2027 GMT
Subject: CN=40CD8B19ECDE5D886AE84EFF87B1753B8B4303F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:84:4d:40:62:5b:cf:2f:bb:1a:61:f0:34:
db:e8:b8:8e:8b:75:07:75:13:b0:20:6e:5b:89:c8:
dc:29:85:ee:cf:93:39:a1:59:8a:67:50:45:03:54:
27:76:3a:84:79:80:d0:69:53:c9:08:64:78:41:d5:
f1:34:c1:21:20:e3:5b:91:bf:a0:45:cf:cb:86:b8:
44:76:cb:43:ed:dc:52:4f:31:2a:f1:0a:c9:21:e4:
35:aa:00:50:a4:44:7e:51:a6:6f:49:8e:d6:af:34:
e3:cc:ae:ef:ea:11:1f:52:c4:67:1a:11:08:f1:15:
b7:ef:53:fc:a9:e7:ef:53:6e:38:ad:f0:55:a0:a6:
af:ba:01:93:2e:88:5d:68:47:56:d2:74:98:18:d2:
86:f2:3c:ab:cc:4f:45:d0:cf:b4:16:f4:4a:b4:fa:
7a:bb:7b:c9:77:05:ff:92:d0:ab:91:a7:0a:16:f9:
b0:ea:ef:99:91:d9:fb:c4:c1:13:0e:ad:c7:33:5a:
f2:ae:5d:03:48:68:7a:12:a3:8e:e4:86:49:aa:1f:
54:77:da:5c:10:59:33:eb:c8:83:20:26:c9:46:d9:
bb:17:e0:f5:9e:fa:56:19:12:5d:8f:37:f5:9f:5a:
08:c8:30:d9:b3:14:74:2c:d8:1e:93:ab:2d:d5:c6:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:8B:19:EC:DE:5D:88:6A:E8:4E:FF:87:B1:75:3B:8B:43:03:F2
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/22
46.236.197.0/24
46.236.207.0/24
46.236.209.0-46.236.210.255
46.236.212.0-46.236.214.255
46.236.217.0/24
46.236.223.0/24
46.236.241.0/24
46.236.243.0/24
46.236.252.0/22
82.139.206.0/24
82.139.218.0/24
82.139.220.0/24
82.139.227.0-82.139.229.255
82.139.231.0-82.139.236.255
82.139.238.0/23
82.139.241.0/24
82.139.243.0-82.139.244.255
82.139.247.0-82.139.249.255
82.139.251.0/24
212.17.225.0-212.17.227.255
212.17.233.0-212.17.239.255
212.60.144.0/24
212.60.146.0-212.60.148.255
212.60.152.0/24
212.60.154.0/23
212.60.157.0/24
Signature Algorithm: sha256WithRSAEncryption
26:00:54:e7:64:a7:78:c9:57:d3:fe:c7:ea:ef:dd:e5:98:d3:
d1:c8:41:ad:50:6d:98:42:e1:df:cf:50:61:b0:04:f8:14:b6:
77:15:f9:39:ad:21:d0:0f:e0:f3:c3:37:6d:a0:01:65:91:b8:
95:0b:d5:3e:cb:a5:a8:a2:4f:6b:56:53:20:8c:ec:8c:20:16:
5a:f4:ff:60:80:fe:47:4f:36:05:be:13:d7:cf:8c:f2:6c:70:
1b:c8:64:64:20:4c:15:72:73:bb:52:46:d1:da:d0:54:bd:b0:
1b:e7:fa:fa:ca:2e:fe:be:c8:9f:23:0d:7c:77:ec:a9:75:3e:
31:6e:04:1d:b1:be:f4:d2:d1:39:02:1f:94:6d:e5:37:48:1e:
eb:f4:dd:93:2f:44:59:e1:3b:37:5e:e1:82:e8:97:23:47:9a:
ad:92:b3:7b:f7:d0:15:73:c0:96:16:39:ed:fd:aa:df:f0:67:
6c:33:b8:40:85:c0:1d:36:d8:3a:fc:1b:6a:bf:e1:7c:18:cb:
83:c5:ed:29:06:09:24:cb:2f:f1:bb:41:63:52:b1:2f:49:6f:
70:d9:04:f5:91:58:a5:87:65:1c:d8:b4:0e:a4:db:fb:1a:67:
b3:60:2d:b9:a8:09:5f:f9:0a:21:aa:5c:17:aa:bb:da:6a:47:
f2:48:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:16:11 2026 by rpki-client