This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: S7uwYMkDZO1Caxgt+q/Oh2AetCSsmg5uOBX8oYiW7jk=
Subject key identifier: DE:FE:E8:F3:78:F9:59:C3:A6:67:D9:1F:ED:DD:D6:45:82:B8:AE:63
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 06AC0E61B6674AAF6E2C99B96D23592F47209250
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time: Thu 29 Jan 2026 21:52:55 +0000
ROA not before: Thu 29 Jan 2026 21:47:55 +0000
ROA not after: Thu 28 Jan 2027 21:52:55 +0000
asID: 834
IP address blocks: 193.32.205.0/24 maxlen: 24
193.187.111.0/24 maxlen: 24
194.93.50.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 14:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ac:0e:61:b6:67:4a:af:6e:2c:99:b9:6d:23:59:2f:47:20:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 29 21:47:55 2026 GMT
Not After : Jan 28 21:52:55 2027 GMT
Subject: CN=DEFEE8F378F959C3A667D91FEDDDD64582B8AE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:32:f5:29:fe:ed:37:ee:24:38:5c:37:d3:
dd:45:44:99:dc:20:c2:f4:3d:7f:14:ca:87:73:34:
32:71:3e:c7:39:71:7f:48:69:48:77:9a:d2:3d:41:
3c:2c:a9:a0:31:79:06:e4:d6:ed:91:a1:96:5e:f5:
14:0d:bc:18:3e:94:e2:6c:59:7f:1c:79:5a:a2:08:
2e:56:e8:4d:b4:fe:4f:ad:c0:14:62:ff:d6:a4:da:
22:dd:8a:f1:4e:71:85:26:8a:71:f9:6d:6f:cc:e4:
58:01:52:53:d5:17:aa:8e:81:f9:5b:9a:a9:e8:4a:
0b:51:1d:80:3f:4e:6e:5b:c1:ad:46:35:a8:28:6d:
11:e3:fd:be:0e:28:17:04:01:90:a7:55:fa:49:12:
2c:85:f2:bc:f2:a2:85:15:62:e8:a4:50:88:d1:79:
58:c5:1c:ef:22:f2:55:69:d8:ec:0a:6f:ad:4a:8a:
f3:39:a7:eb:25:2d:8e:4d:50:fe:b2:ce:11:a3:28:
49:9d:bd:9b:a0:46:ea:27:39:93:b7:f5:ea:d0:55:
55:2f:56:5c:aa:de:19:9c:90:c4:fa:a1:f8:b9:92:
6f:fa:92:dc:49:b0:87:85:2d:64:25:e4:7a:e0:31:
c9:f9:11:77:25:7a:04:67:0b:5b:0e:99:7b:bc:a3:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:E8:F3:78:F9:59:C3:A6:67:D9:1F:ED:DD:D6:45:82:B8:AE:63
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.205.0/24
193.187.111.0/24
194.93.50.0/24
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
79:50:21:28:12:5f:af:e6:93:45:1b:9c:5d:1c:e0:4d:dc:25:
79:40:25:d0:3a:ae:11:e1:5d:b8:d0:4f:78:62:3b:db:94:2b:
1f:a5:de:f8:3f:a1:24:12:2e:38:93:17:3e:6d:07:ef:63:4f:
cf:c2:72:17:b2:72:f3:8a:18:fa:5c:a5:28:a5:f7:f2:99:49:
b9:23:4e:f6:75:e0:ec:1d:29:f6:25:61:cd:e9:78:6f:dd:f6:
c7:b6:8f:11:99:3d:28:69:6a:f8:d9:77:8d:0b:67:5c:eb:53:
aa:7c:7c:c1:84:a1:f3:53:27:cb:3a:0f:cd:2e:16:3e:bb:ee:
77:a5:4e:66:60:61:0b:50:39:dd:36:2d:29:9f:75:fc:b6:7e:
5d:a4:8d:9c:73:4f:a7:7b:74:f0:9f:be:1e:ad:f8:fc:9b:54:
3d:ec:00:a4:3a:2f:ee:34:66:87:72:41:1c:a3:7d:6b:68:ee:
7f:2f:fb:71:6a:c7:29:9d:d2:b7:40:00:08:7a:29:d0:6b:c1:
6c:79:d0:c7:9e:e0:0d:07:7c:19:b3:b2:23:9e:c9:6b:f0:73:
50:4d:20:3d:60:71:e6:c9:46:66:90:c8:f6:11:7e:46:c1:3c:
03:f4:c6:27:e9:72:01:8f:51:cb:ea:0b:b6:2f:14:96:ca:71:
c1:3b:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:39:44 2026 by rpki-client