Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: oCaX0dDOLUA9ULlNqdcbFY4PQ53vajSg8KKJ8xRarT0=
Subject key identifier: 41:68:C9:82:19:09:C4:22:27:C5:66:66:78:7B:4D:B2:3E:7B:3A:62
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 27672C834D77AA1786A988E42E1C357E22655FC3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
Signing time: Sun 19 Apr 2026 00:48:40 +0000
ROA not before: Sun 19 Apr 2026 00:43:40 +0000
ROA not after: Sun 18 Apr 2027 00:48:40 +0000
asID: 834
IP address blocks: 51.146.180.0/22 maxlen: 24
51.146.232.0/23 maxlen: 24
51.146.234.0/24 maxlen: 24
51.146.236.0/24 maxlen: 24
51.146.238.0/23 maxlen: 24
51.146.240.0/22 maxlen: 24
51.146.244.0/23 maxlen: 24
51.146.246.0/24 maxlen: 24
51.146.249.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.64.0/22 maxlen: 24
51.194.68.0/23 maxlen: 24
51.194.70.0/24 maxlen: 24
51.194.72.0/21 maxlen: 24
51.194.83.0/24 maxlen: 24
51.194.84.0/22 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.98.0/23 maxlen: 24
51.194.113.0/24 maxlen: 24
51.194.115.0/24 maxlen: 24
51.194.116.0/22 maxlen: 24
51.194.132.0/22 maxlen: 24
51.194.136.0/23 maxlen: 24
51.194.138.0/24 maxlen: 24
51.194.140.0/22 maxlen: 24
51.194.144.0/24 maxlen: 24
51.194.146.0/23 maxlen: 24
51.194.148.0/22 maxlen: 24
51.194.152.0/24 maxlen: 24
51.194.154.0/24 maxlen: 24
51.194.156.0/23 maxlen: 24
51.194.159.0/24 maxlen: 24
51.194.160.0/20 maxlen: 24
51.194.176.0/22 maxlen: 24
51.194.180.0/23 maxlen: 24
51.194.182.0/24 maxlen: 24
51.194.184.0/22 maxlen: 24
51.194.188.0/24 maxlen: 24
51.194.190.0/23 maxlen: 24
51.194.192.0/23 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.196.0/22 maxlen: 24
51.194.200.0/23 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.204.0/22 maxlen: 24
51.194.208.0/23 maxlen: 24
51.194.210.0/24 maxlen: 24
51.194.213.0/24 maxlen: 24
51.194.214.0/23 maxlen: 24
51.194.216.0/23 maxlen: 24
51.194.220.0/22 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.226.0/24 maxlen: 24
51.194.228.0/24 maxlen: 24
51.194.232.0/21 maxlen: 24
51.194.240.0/23 maxlen: 24
51.194.243.0/24 maxlen: 24
51.194.246.0/23 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.250.0/23 maxlen: 24
51.194.252.0/22 maxlen: 24
78.105.112.0/20 maxlen: 24
78.105.140.0/22 maxlen: 24
78.105.144.0/20 maxlen: 24
78.105.160.0/19 maxlen: 24
78.105.192.0/19 maxlen: 24
78.105.232.0/21 maxlen: 24
78.105.240.0/21 maxlen: 24
94.194.0.0/16 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:67:2c:83:4d:77:aa:17:86:a9:88:e4:2e:1c:35:7e:22:65:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 19 00:43:40 2026 GMT
Not After : Apr 18 00:48:40 2027 GMT
Subject: CN=4168C9821909C42227C56666787B4DB23E7B3A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:08:67:65:5a:55:f7:b7:19:ad:7f:00:65:
01:63:a9:a5:99:15:94:8f:14:d9:0f:5b:28:2f:0d:
27:ec:c7:5c:d7:e1:0f:aa:f4:d0:4b:4f:2b:c5:8e:
45:71:bc:67:94:79:f9:55:f6:c6:07:c1:f6:97:e9:
a6:d0:ce:15:d0:b4:03:c5:43:85:f7:f7:2d:56:35:
62:ba:bd:b4:48:d4:64:b3:ca:21:cf:6c:98:ea:14:
c3:0d:b9:05:49:0d:59:5c:04:d4:df:85:04:34:2e:
18:52:48:57:76:0d:2b:2f:44:03:2d:17:2d:9d:45:
ae:ef:7c:c5:69:e1:9d:8c:fb:30:ba:93:5e:de:a6:
13:2f:be:bb:c3:a0:80:c7:ba:a5:f1:43:bb:4d:48:
b0:e8:00:50:46:99:3f:4e:03:ce:7e:9d:ea:76:60:
68:a6:2b:78:85:24:77:47:85:eb:75:00:87:86:38:
cd:73:f3:bd:50:df:f9:ce:15:e2:3c:7f:9f:6e:1c:
f2:5c:8c:ac:50:72:d4:17:8a:9f:6c:7e:f2:7a:b3:
38:61:86:aa:8a:09:9c:0f:46:eb:dc:4d:4d:97:aa:
74:e8:2b:ad:77:35:d0:62:5e:62:5e:c7:fe:29:b7:
5b:f7:52:be:c9:e1:75:00:54:f2:ad:eb:38:e3:b6:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:C9:82:19:09:C4:22:27:C5:66:66:78:7B:4D:B2:3E:7B:3A:62
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.180.0/22
51.146.232.0-51.146.234.255
51.146.236.0/24
51.146.238.0-51.146.246.255
51.146.249.0/24
51.194.33.0/24
51.194.38.0/24
51.194.64.0-51.194.70.255
51.194.72.0/21
51.194.83.0-51.194.87.255
51.194.97.0-51.194.99.255
51.194.113.0/24
51.194.115.0-51.194.119.255
51.194.132.0-51.194.138.255
51.194.140.0-51.194.144.255
51.194.146.0-51.194.152.255
51.194.154.0/24
51.194.156.0/23
51.194.159.0-51.194.182.255
51.194.184.0-51.194.188.255
51.194.190.0-51.194.193.255
51.194.195.0-51.194.201.255
51.194.203.0-51.194.210.255
51.194.213.0-51.194.217.255
51.194.220.0/22
51.194.225.0-51.194.226.255
51.194.228.0/24
51.194.232.0-51.194.241.255
51.194.243.0/24
51.194.246.0/23
51.194.249.0-51.194.255.255
78.105.112.0/20
78.105.140.0-78.105.223.255
78.105.232.0-78.105.247.255
94.194.0.0/16
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:91:c9:9d:c5:1a:c8:2b:25:82:64:74:5c:76:67:a3:1a:58:
d9:11:8d:8b:84:94:bb:cf:11:b6:c9:07:38:94:9d:7b:39:29:
09:86:2c:06:71:c0:8e:12:93:76:72:80:7a:82:73:b9:25:b5:
04:a4:16:94:37:f7:a8:e6:7a:79:38:d6:1c:05:cb:2d:05:22:
08:27:34:c5:e9:b4:7c:3d:8f:c3:1e:04:7b:17:bf:96:81:58:
67:99:ee:90:ce:02:f4:8f:51:0d:17:6f:f5:bc:1c:1e:42:58:
c3:d7:e7:cd:eb:ff:32:fb:ce:2a:7b:5e:a5:a1:f7:a8:a8:12:
45:00:8c:0b:41:34:d0:fe:99:8d:4c:b7:c5:07:8f:19:08:da:
6c:f0:87:85:55:46:27:bf:c6:e6:f8:65:fe:fc:01:87:6c:39:
17:dd:93:dd:44:b9:ad:ce:bc:da:e6:68:2d:9d:6a:5d:ca:4d:
f5:25:e5:09:a9:4f:1d:03:53:9c:fc:c4:c2:2f:03:f9:f4:f5:
2c:5f:02:dc:2e:6f:23:de:d8:ca:06:45:07:a0:fe:70:a2:b2:
c6:39:eb:09:3c:e2:d8:e4:c4:54:20:48:23:87:1e:19:6d:1e:
59:f1:2b:5e:b9:64:09:f0:9c:b3:b6:1f:24:09:51:67:f2:2f:
94:b5:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:17:28 2026 by rpki-client