Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: O89p8Mw9b6puArP4GJgtsly+2YT54oLBr+kCiy0lO9s=
Subject key identifier: 16:2F:D4:0A:85:5B:34:1B:D3:D7:28:7B:F3:E6:57:94:BB:E8:0B:DE
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2AE19BB7A30896D6A647D81720D594EC51526C7C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS834.roa
Signing time: Wed 26 Aug 2026 10:57:04 +0000
ROA not before: Wed 26 Aug 2026 10:52:04 +0000
ROA not after: Wed 25 Aug 2027 10:57:04 +0000
asID: 834
IP address blocks: 152.237.224.0/24 maxlen: 24
152.237.225.0/24 maxlen: 24
152.237.226.0/24 maxlen: 24
152.237.227.0/24 maxlen: 24
152.237.228.0/24 maxlen: 24
152.237.229.0/24 maxlen: 24
152.237.231.0/24 maxlen: 24
152.237.232.0/24 maxlen: 24
152.237.233.0/24 maxlen: 24
152.237.234.0/24 maxlen: 24
152.237.235.0/24 maxlen: 24
152.237.236.0/24 maxlen: 24
152.237.237.0/24 maxlen: 24
152.237.238.0/24 maxlen: 24
152.237.239.0/24 maxlen: 24
152.237.240.0/24 maxlen: 24
152.237.241.0/24 maxlen: 24
152.237.242.0/24 maxlen: 24
152.237.243.0/24 maxlen: 24
152.237.244.0/24 maxlen: 24
152.237.245.0/24 maxlen: 24
152.237.246.0/24 maxlen: 24
152.237.247.0/24 maxlen: 24
152.237.248.0/24 maxlen: 24
152.237.249.0/24 maxlen: 24
152.237.250.0/24 maxlen: 24
152.237.251.0/24 maxlen: 24
152.237.252.0/24 maxlen: 24
152.237.253.0/24 maxlen: 24
152.237.254.0/24 maxlen: 24
152.237.255.0/24 maxlen: 24
186.241.160.0/24 maxlen: 24
186.241.161.0/24 maxlen: 24
186.241.162.0/24 maxlen: 24
186.241.164.0/24 maxlen: 24
186.241.165.0/24 maxlen: 24
186.241.166.0/24 maxlen: 24
186.241.167.0/24 maxlen: 24
186.241.168.0/24 maxlen: 24
186.241.169.0/24 maxlen: 24
186.241.170.0/24 maxlen: 24
186.241.171.0/24 maxlen: 24
186.241.172.0/24 maxlen: 24
186.241.173.0/24 maxlen: 24
186.241.174.0/24 maxlen: 24
186.241.175.0/24 maxlen: 24
186.241.177.0/24 maxlen: 24
186.241.179.0/24 maxlen: 24
186.241.180.0/24 maxlen: 24
186.241.181.0/24 maxlen: 24
186.241.182.0/24 maxlen: 24
186.241.183.0/24 maxlen: 24
186.241.184.0/24 maxlen: 24
186.241.185.0/24 maxlen: 24
186.241.186.0/24 maxlen: 24
186.241.187.0/24 maxlen: 24
186.241.188.0/24 maxlen: 24
186.241.189.0/24 maxlen: 24
186.241.190.0/24 maxlen: 24
186.241.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e1:9b:b7:a3:08:96:d6:a6:47:d8:17:20:d5:94:ec:51:52:6c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 26 10:52:04 2026 GMT
Not After : Aug 25 10:57:04 2027 GMT
Subject: CN=162FD40A855B341BD3D7287BF3E65794BBE80BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:2e:fe:89:b1:91:51:5a:ca:78:65:d0:a7:
c6:61:a0:34:f5:59:53:97:e4:df:b7:ec:d9:ed:18:
2a:4d:5c:8d:87:be:68:09:f6:41:69:4e:e1:a3:27:
65:a4:d6:db:38:3b:a1:8d:bb:03:09:36:53:1d:85:
4d:75:66:7f:21:f2:e2:9c:db:57:74:5b:51:b2:0e:
2f:8d:c1:ba:cf:4c:0e:75:68:7b:a7:10:2d:8b:d2:
13:57:72:f0:7f:71:13:b6:8d:44:72:6f:f7:17:cc:
b7:25:86:c2:8b:52:ce:ee:4a:57:61:06:5a:9d:e6:
4d:b5:d0:cb:0a:e1:df:28:0c:46:78:be:fa:aa:93:
93:66:66:42:46:76:44:06:ad:60:d7:94:6a:41:6b:
00:88:d2:74:a7:45:c6:36:46:7c:97:1b:88:0f:47:
d7:27:8b:17:2a:dd:ff:56:85:21:f8:ce:0d:8c:89:
89:dd:63:1c:c7:df:48:c6:8c:a6:43:2a:69:a2:f4:
ab:0a:fc:de:ae:e9:14:b1:64:90:35:23:65:91:7b:
7d:0d:f3:e9:2b:cd:2e:ed:85:77:9d:cc:6e:79:0d:
b3:23:65:3b:97:bc:c9:55:48:ed:74:9a:13:2b:82:
04:a8:cc:b3:2a:8f:30:cc:ce:7e:3d:b5:e1:82:60:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:D4:0A:85:5B:34:1B:D3:D7:28:7B:F3:E6:57:94:BB:E8:0B:DE
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.224.0-152.237.229.255
152.237.231.0-152.237.255.255
186.241.160.0-186.241.162.255
186.241.164.0-186.241.175.255
186.241.177.0/24
186.241.179.0-186.241.191.255
Signature Algorithm: sha256WithRSAEncryption
0d:18:d5:4c:1d:95:ba:c7:5f:14:39:d8:e6:30:35:1a:28:2e:
70:cc:03:49:d5:49:be:a3:17:9b:35:4a:f7:14:58:4c:58:2c:
6c:54:d2:9c:f9:9d:37:0b:8b:05:d2:09:30:36:da:a0:3d:1b:
d6:b1:dd:fc:aa:47:29:3d:21:77:26:fe:c7:cb:06:59:8f:03:
bb:b5:13:dc:6f:1c:fa:3c:4c:0a:7f:cc:b4:14:ed:fa:f1:d4:
c7:94:d1:9a:88:e3:7f:c2:e7:e1:bf:12:0b:0f:b7:f0:5f:5d:
ea:4b:93:dc:e8:75:9e:76:b1:45:54:77:23:6c:c4:6f:48:44:
c2:c8:fe:3f:5c:16:9c:21:79:80:e4:1f:a2:26:9e:fc:a8:6a:
f9:98:12:ed:81:1e:5b:7f:39:d2:22:ec:a1:61:e5:96:da:f6:
a6:f9:f7:89:0e:61:b5:13:37:ad:bc:0d:90:8f:50:8d:f5:6b:
90:9b:3a:2a:e6:48:4a:3e:d2:64:a9:b6:33:1d:85:28:f4:bf:
76:5c:a4:b0:2e:3e:41:91:d5:53:f8:92:00:ee:bc:98:f8:4a:
86:98:3a:f6:ce:ab:c7:f3:0d:31:88:8d:d8:49:dc:d8:f3:21:
50:54:8d:4b:0e:ca:0d:1c:0c:61:34:1c:f5:b1:07:15:7b:4e:
2e:44:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:25 2026 by rpki-client