Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 6cu00F8YZhak/32fQWNFHNlJMFg4ZlUz5XUv2Pvh3zc=
Subject key identifier: 33:99:B3:6E:44:73:92:C9:33:09:23:EB:F2:AA:B8:94:32:83:44:B5
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 69E6CB1B1279158AE3EBFC444F3A02DF8C1332B6
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
Signing time: Sun 27 Sep 2026 01:37:46 +0000
ROA not before: Sun 27 Sep 2026 01:32:46 +0000
ROA not after: Sun 26 Sep 2027 01:37:46 +0000
asID: 834
IP address blocks: 152.234.134.0/23 maxlen: 24
152.234.136.0/23 maxlen: 24
152.234.139.0/24 maxlen: 24
152.234.140.0/22 maxlen: 24
177.201.193.0/24 maxlen: 24
177.201.195.0/24 maxlen: 24
177.201.196.0/22 maxlen: 24
177.201.200.0/21 maxlen: 24
179.69.68.0/22 maxlen: 24
179.69.72.0/21 maxlen: 24
179.69.80.0/20 maxlen: 24
179.69.96.0/20 maxlen: 24
179.69.112.0/21 maxlen: 24
179.69.120.0/22 maxlen: 24
179.69.124.0/23 maxlen: 24
179.69.126.0/24 maxlen: 24
179.253.41.0/24 maxlen: 24
179.253.43.0/24 maxlen: 24
179.253.44.0/22 maxlen: 24
179.253.48.0/21 maxlen: 24
179.253.56.0/22 maxlen: 24
179.253.60.0/23 maxlen: 24
179.254.193.0/24 maxlen: 24
179.254.194.0/23 maxlen: 24
179.254.196.0/22 maxlen: 24
179.254.200.0/21 maxlen: 24
187.14.130.0/23 maxlen: 24
187.14.132.0/22 maxlen: 24
187.14.136.0/21 maxlen: 24
187.14.144.0/20 maxlen: 24
187.15.192.0/21 maxlen: 24
187.15.200.0/23 maxlen: 24
187.15.202.0/24 maxlen: 24
187.15.204.0/22 maxlen: 24
187.15.208.0/20 maxlen: 24
187.55.7.0/24 maxlen: 24
187.55.8.0/22 maxlen: 24
187.55.12.0/23 maxlen: 24
187.55.17.0/24 maxlen: 24
187.55.18.0/23 maxlen: 24
187.55.20.0/22 maxlen: 24
187.55.24.0/21 maxlen: 24
189.12.130.0/24 maxlen: 24
189.12.133.0/24 maxlen: 24
189.12.134.0/23 maxlen: 24
189.12.136.0/21 maxlen: 24
189.12.144.0/23 maxlen: 24
189.12.147.0/24 maxlen: 24
189.12.148.0/22 maxlen: 24
189.12.152.0/22 maxlen: 24
189.12.156.0/24 maxlen: 24
189.12.158.0/23 maxlen: 24
189.30.97.0/24 maxlen: 24
189.30.98.0/23 maxlen: 24
189.30.103.0/24 maxlen: 24
189.30.104.0/22 maxlen: 24
189.30.109.0/24 maxlen: 24
189.30.110.0/23 maxlen: 24
189.30.113.0/24 maxlen: 24
189.30.114.0/23 maxlen: 24
189.30.116.0/22 maxlen: 24
189.30.120.0/21 maxlen: 24
189.31.2.0/23 maxlen: 24
189.31.4.0/22 maxlen: 24
189.31.8.0/21 maxlen: 24
189.73.43.0/24 maxlen: 24
189.73.44.0/22 maxlen: 24
191.0.81.0/24 maxlen: 24
191.0.82.0/23 maxlen: 24
191.0.84.0/22 maxlen: 24
191.0.88.0/22 maxlen: 24
191.0.92.0/23 maxlen: 24
191.45.32.0/24 maxlen: 24
191.45.34.0/24 maxlen: 24
191.45.36.0/22 maxlen: 24
191.45.40.0/22 maxlen: 24
191.45.45.0/24 maxlen: 24
191.45.46.0/23 maxlen: 24
200.138.16.0/21 maxlen: 24
200.138.25.0/24 maxlen: 24
200.138.26.0/23 maxlen: 24
200.138.28.0/22 maxlen: 24
200.141.52.0/23 maxlen: 24
200.141.54.0/24 maxlen: 24
200.149.184.0/24 maxlen: 24
200.149.189.0/24 maxlen: 24
200.149.190.0/24 maxlen: 24
200.180.180.0/24 maxlen: 24
200.180.185.0/24 maxlen: 24
200.180.186.0/23 maxlen: 24
200.180.188.0/22 maxlen: 24
201.24.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e6:cb:1b:12:79:15:8a:e3:eb:fc:44:4f:3a:02:df:8c:13:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 27 01:32:46 2026 GMT
Not After : Sep 26 01:37:46 2027 GMT
Subject: CN=3399B36E447392C9330923EBF2AAB894328344B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:aa:dc:53:ab:57:83:6c:ce:20:45:33:f1:
c8:e4:d5:6e:31:e3:2b:20:65:21:ec:d7:b8:e7:7b:
f9:0b:55:9a:97:9f:11:cd:69:6d:93:03:93:ab:20:
c6:a9:06:7e:08:99:56:ce:86:55:8a:60:6f:a2:f2:
93:90:57:44:47:b8:f5:8f:e8:d0:22:e6:36:50:e3:
6d:a9:64:cd:5b:eb:9e:73:d7:65:72:d9:b8:e3:21:
4a:16:fa:3e:90:8d:79:d7:ee:ad:21:77:34:34:f3:
72:53:b6:8a:d6:41:28:2b:1e:b1:d4:9d:f5:97:48:
de:28:8f:7b:87:38:05:97:5c:3d:2f:f3:d8:a1:bf:
6e:21:23:fa:0a:25:8d:ee:3d:fd:21:ac:55:8a:68:
67:aa:7a:c3:fe:4c:b3:18:7a:b9:e1:f3:17:31:fb:
14:b7:9d:05:12:e6:30:cd:cd:8d:1d:e4:d9:79:c6:
64:ad:0d:3b:dc:d7:c9:a5:ea:db:f0:db:55:21:09:
4f:a7:19:14:d2:30:fb:e6:1a:51:41:8c:de:9d:5b:
10:65:bb:6d:12:58:3c:82:f0:b4:fb:4c:91:dc:f2:
39:63:92:03:f1:a9:71:6b:84:2d:61:1d:8f:07:9c:
88:91:b7:d0:2f:71:f7:fb:15:37:2a:84:86:e6:9d:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:B3:6E:44:73:92:C9:33:09:23:EB:F2:AA:B8:94:32:83:44:B5
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.134.0-152.234.137.255
152.234.139.0-152.234.143.255
177.201.193.0/24
177.201.195.0-177.201.207.255
179.69.68.0-179.69.126.255
179.253.41.0/24
179.253.43.0-179.253.61.255
179.254.193.0-179.254.207.255
187.14.130.0-187.14.159.255
187.15.192.0-187.15.202.255
187.15.204.0-187.15.223.255
187.55.7.0-187.55.13.255
187.55.17.0-187.55.31.255
189.12.130.0/24
189.12.133.0-189.12.145.255
189.12.147.0-189.12.156.255
189.12.158.0/23
189.30.97.0-189.30.99.255
189.30.103.0-189.30.107.255
189.30.109.0-189.30.111.255
189.30.113.0-189.30.127.255
189.31.2.0-189.31.15.255
189.73.43.0-189.73.47.255
191.0.81.0-191.0.93.255
191.45.32.0/24
191.45.34.0/24
191.45.36.0-191.45.43.255
191.45.45.0-191.45.47.255
200.138.16.0/21
200.138.25.0-200.138.31.255
200.141.52.0-200.141.54.255
200.149.184.0/24
200.149.189.0-200.149.190.255
200.180.180.0/24
200.180.185.0-200.180.191.255
201.24.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:61:db:d5:e9:03:67:5b:5f:38:4f:57:0e:b8:12:7a:c1:0d:
a4:0b:fc:9f:a5:09:44:40:f3:36:9a:90:6c:7c:00:9d:b6:3d:
73:b8:da:3e:75:b6:da:b0:f6:3b:8a:59:a8:f2:a4:54:ac:aa:
cc:85:46:cd:68:7c:d9:ee:b6:cb:d4:b8:52:44:19:05:98:cf:
28:a7:82:32:11:ae:31:2f:f6:29:be:09:87:2b:02:48:11:07:
df:4e:9b:b0:8b:bb:60:b7:6d:c1:83:24:83:20:2c:d2:d1:d0:
87:ad:6a:1d:32:7a:d6:e7:58:61:55:53:46:22:05:ca:04:c4:
a2:03:59:79:26:ad:7d:6c:c6:55:35:8e:13:18:81:d4:d6:5d:
cd:42:f5:39:5d:1c:10:44:8d:bd:d5:93:82:fa:82:73:7b:62:
47:f6:f5:7c:3a:fa:bd:94:33:b2:3b:1b:d5:2e:85:8d:dc:68:
10:d0:d2:a7:58:bb:d2:5d:09:21:be:c6:9b:5d:40:2a:33:26:
9d:f2:da:5c:e2:17:9f:06:40:40:9e:28:d6:a9:41:9a:6f:ea:
0a:4e:cb:f5:2c:17:d8:df:4b:17:49:c9:bb:6a:72:8e:34:b8:
50:5a:a0:a4:39:7c:e7:9b:2e:28:a1:47:90:a6:82:ed:d7:cc:
db:b8:98:11
-----BEGIN CERTIFICATE-----
MIIG5DCCBcygAwIBAgIUaebLGxJ5FYrj6/xETzoC34wTMrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjA5MjcwMTMyNDZaFw0yNzA5MjYwMTM3NDZaMDMxMTAvBgNV
BAMTKDMzOTlCMzZFNDQ3MzkyQzkzMzA5MjNFQkYyQUFCODk0MzI4MzQ0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUKrcU6tXg2zOIEUz8cjk1W4x
4ysgZSHs17jne/kLVZqXnxHNaW2TA5OrIMapBn4ImVbOhlWKYG+i8pOQV0RHuPWP
6NAi5jZQ422pZM1b655z12Vy2bjjIUoW+j6QjXnX7q0hdzQ083JTtorWQSgrHrHU
nfWXSN4oj3uHOAWXXD0v89ihv24hI/oKJY3uPf0hrFWKaGeqesP+TLMYernh8xcx
+xS3nQUS5jDNzY0d5Nl5xmStDTvc18ml6tvw21UhCU+nGRTSMPvmGlFBjN6dWxBl
u20SWDyC8LT7TJHc8jljkgPxqXFrhC1hHY8HnIiRt9Avcff7FTcqhIbmnd75AgMB
AAGjggPuMIID6jAdBgNVHQ4EFgQUM5mzbkRzkskzCSPr8qq4lDKDRLUwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG
XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj
ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM4MzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggHJBggrBgEFBQcBBwEB/wSCAbgwggG0
MIIBsAQCAAEwggGoMAwDBAGY6oYDBAGY6ogwDAMEAJjqiwMEBJjqgAMEALHJwTAM
AwQAscnDAwQEscnAMAwDBAKzRUQDBACzRX4DBACz/SkwDAMEALP9KwMEAbP9PDAM
AwQAs/7BAwQEs/7AMAwDBAG7DoIDBAW7DoAwDAMEBrsPwAMEALsPyjAMAwQCuw/M
AwQFuw/AMAwDBAC7NwcDBAG7NwwwDAMEALs3EQMEBbs3AAMEAL0MgjAMAwQAvQyF
AwQBvQyQMAwDBAC9DJMDBAC9DJwDBAG9DJ4wDAMEAL0eYQMEAr0eYDAMAwQAvR5n
AwQCvR5oMAwDBAC9Hm0DBAS9HmAwDAMEAL0ecQMEB70eADAMAwQBvR8CAwQEvR8A
MAwDBAC9SSsDBAS9SSAwDAMEAL8AUQMEAb8AXAMEAL8tIAMEAL8tIjAMAwQCvy0k
AwQCvy0oMAwDBAC/LS0DBAS/LSADBAPIihAwDAMEAMiKGQMEBciKADAMAwQCyI00
AwQAyI02AwQAyJW4MAwDBADIlb0DBADIlb4DBADItLQwDAMEAMi0uQMEBsi0gAME
AMkY6zANBgkqhkiG9w0BAQsFAAOCAQEAOmHb1ekDZ1tfOE9XDrgSesENpAv8n6UJ
REDzNpqQbHwAnbY9c7jaPnW22rD2O4pZqPKkVKyqzIVGzWh82e62y9S4UkQZBZjP
KKeCMhGuMS/2Kb4JhysCSBEH306bsIu7YLdtwYMkgyAs0tHQh61qHTJ61udYYVVT
RiIFygTEogNZeSatfWzGVTWOExiB1NZdzUL1OV0cEESNvdWTgvqCc3tiR/b1fDr6
vZQzsjsb1S6FjdxoENDSp1i70l0JIb7Gm11AKjMmnfLaXOIXnwZAQJ4o1qlBmm/q
Ck7L9SwX2N9LF0nJu2pyjjS4UFqgpDl855suKKFHkKaC7dfM27iYEQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:33:55 2026 by rpki-client