Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: pTJfaGsPRgbc+t92YdYcs8UMxnx1ro9v3TAKSNRAPec=
Subject key identifier: 53:55:16:5B:A4:03:75:0C:27:AC:7A:F9:15:79:DF:FA:7E:11:74:32
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 282AF5605199AEF96F9B8ECFCA9EFA297856B456
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
Signing time: Thu 06 Aug 2026 03:36:36 +0000
ROA not before: Thu 06 Aug 2026 03:31:36 +0000
ROA not after: Thu 05 Aug 2027 03:36:36 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
188.119.69.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
193.187.108.0/23 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2a:f5:60:51:99:ae:f9:6f:9b:8e:cf:ca:9e:fa:29:78:56:b4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 6 03:31:36 2026 GMT
Not After : Aug 5 03:36:36 2027 GMT
Subject: CN=5355165BA403750C27AC7AF91579DFFA7E117432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:e2:fe:46:17:59:36:6f:08:77:bc:24:ea:
8e:3c:1a:83:56:c6:20:99:4e:65:c1:9b:cd:03:dc:
cf:e4:1b:fe:2c:4e:29:64:c9:a0:12:3c:d7:cc:21:
6a:e7:ea:80:a4:21:a7:2b:db:74:3e:91:51:30:2a:
2d:cd:bc:9f:4a:b2:b1:2f:d2:81:be:5e:b5:09:08:
63:54:8d:e1:e0:06:79:63:1d:08:ad:18:2c:fd:e6:
55:e8:f3:e7:ab:29:e1:9e:83:e2:a9:07:24:6b:b4:
f4:86:87:10:1a:c7:c3:f4:94:88:01:87:2c:ba:26:
0c:7d:5e:af:1a:d0:df:01:30:0a:e6:06:ef:b0:0a:
35:f7:bd:80:12:f3:57:87:d1:91:7e:d1:79:72:87:
91:8a:ce:05:c0:7a:18:e4:cc:d0:be:a9:1f:d7:22:
4b:47:7d:a9:08:91:3c:ef:38:e7:51:45:3d:e6:93:
c4:d4:52:af:63:fc:ee:33:cd:91:09:8e:ef:f3:1c:
a8:07:00:5d:ca:5a:31:46:f0:4b:e8:58:7d:24:47:
29:f4:a7:0e:28:06:43:38:fa:c5:17:21:39:d0:9f:
ca:33:ac:79:62:2c:15:4c:f7:70:1a:a3:ef:b5:f9:
8a:0d:e2:89:8b:6b:63:31:e3:90:ae:e7:05:2a:c9:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:16:5B:A4:03:75:0C:27:AC:7A:F9:15:79:DF:FA:7E:11:74:32
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
188.119.69.0/24
193.32.207.0/24
193.187.108.0/23
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
90:89:be:bd:a8:32:0e:e3:3b:17:a8:73:95:a1:13:78:fc:4d:
f0:6c:bb:01:e3:d8:ac:60:53:43:a2:69:bd:45:75:04:ca:fa:
36:35:5e:70:d0:d4:48:46:be:5f:61:3a:27:43:2b:84:62:0b:
fb:f4:8d:46:87:df:a1:2e:4a:de:be:f8:3e:c1:68:64:1b:21:
54:53:cb:2d:94:20:6b:c5:ad:ef:90:da:56:01:27:67:18:5e:
d5:73:3a:2d:e2:d7:60:36:67:db:a2:dd:be:85:c1:ed:84:c0:
00:8e:ed:c2:14:c3:44:b3:3a:b2:59:85:73:82:de:fd:2e:18:
49:1c:c9:c8:9a:9e:e3:1f:c1:5e:1a:86:e3:72:52:04:d0:2d:
5c:a5:8d:46:f5:73:f1:e0:38:0b:ad:00:0f:86:96:69:03:1a:
21:60:5c:59:5a:a1:49:34:49:3e:1a:27:39:c6:c9:9b:59:05:
91:d8:9a:98:db:89:84:2d:df:34:f2:ae:1f:9f:f4:07:c5:6e:
db:14:b9:6e:99:56:31:e9:27:80:46:c4:3e:d0:9b:a8:3b:86:
f4:42:51:ca:4f:bf:26:0d:27:d7:e3:d2:72:4c:4e:43:12:d0:
87:02:c3:ce:52:6f:eb:38:e2:07:f1:db:b9:db:02:eb:09:c8:
e5:23:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:48 2026 by rpki-client