Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 7i6MwSnxQZWAc5OfhDOnCozpLdMjlLICmVL5nXWJYDQ=
Subject key identifier: F7:6B:51:72:74:B9:FA:81:A4:80:DE:74:B8:DA:BD:A1:7C:5A:21:4C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 69E13B52DFC9E5685B9E017C64741C12AA636154
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
Signing time: Mon 20 Jul 2026 17:44:24 +0000
ROA not before: Mon 20 Jul 2026 17:39:24 +0000
ROA not after: Mon 19 Jul 2027 17:44:24 +0000
asID: 834
IP address blocks: 141.11.47.0/24 maxlen: 24
141.11.79.0/24 maxlen: 24
141.11.88.0/23 maxlen: 24
141.11.92.0/23 maxlen: 24
141.11.94.0/24 maxlen: 24
141.11.136.0/23 maxlen: 24
141.11.144.0/23 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.181.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
141.11.192.0/23 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e1:3b:52:df:c9:e5:68:5b:9e:01:7c:64:74:1c:12:aa:63:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 20 17:39:24 2026 GMT
Not After : Jul 19 17:44:24 2027 GMT
Subject: CN=F76B517274B9FA81A480DE74B8DABDA17C5A214C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:95:bd:75:1a:9c:d3:47:06:b2:5c:70:57:
94:88:0b:e3:1b:74:f0:91:77:32:60:db:15:87:57:
67:b8:ca:f5:c2:f7:4d:12:07:43:14:b9:1a:15:8e:
c3:fd:2e:76:3f:33:4c:f3:78:ef:ff:7f:4d:9e:37:
f9:82:9d:94:46:6d:56:58:ab:4e:b8:33:b2:51:1c:
2c:20:52:fa:73:43:13:4f:53:c8:f0:fd:51:ea:69:
8e:d7:d6:0f:09:c2:98:66:3c:0b:2c:67:1d:95:38:
5c:79:1b:e6:b4:0c:cf:07:2e:a5:32:94:d8:bb:59:
5d:5f:35:07:62:a2:c8:a1:12:aa:82:71:2d:cf:d6:
96:fa:5c:28:73:5b:71:d8:0f:f5:4a:fc:eb:37:89:
4d:d4:dd:c7:f7:06:c5:0c:10:a0:df:b5:98:c1:24:
76:0c:94:c1:ea:99:a4:89:9e:0e:44:12:e5:dc:19:
0c:28:da:56:64:f9:8a:fa:ab:3c:df:f2:fa:b9:87:
16:25:64:be:3c:20:a3:6d:d0:68:34:3f:47:e5:3b:
0d:cf:c4:33:38:6f:2d:38:8d:fc:53:5c:90:65:0b:
a6:0d:d6:5b:c8:01:e1:84:a8:14:f7:94:ac:37:e8:
a7:d2:ae:bf:08:0f:84:39:f4:9c:c7:0d:17:18:a8:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:51:72:74:B9:FA:81:A4:80:DE:74:B8:DA:BD:A1:7C:5A:21:4C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.47.0/24
141.11.79.0/24
141.11.88.0/23
141.11.92.0-141.11.94.255
141.11.136.0/23
141.11.144.0/23
141.11.175.0/24
141.11.181.0-141.11.182.255
141.11.192.0/23
141.11.198.0/24
141.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:77:0a:36:6a:fd:e5:5e:96:09:85:a9:25:61:22:4e:e4:3b:
cd:8d:b8:d5:b5:f4:76:a4:1d:b6:b0:21:b8:5b:32:8f:51:cd:
f2:b0:98:79:22:1d:53:67:ab:64:e3:67:32:77:b4:25:7a:fb:
ba:e3:f8:5b:ae:09:03:e2:ee:ac:9c:3a:f3:14:7a:9a:ad:ef:
41:54:48:1b:e5:d8:3e:53:d1:c7:6c:40:37:ba:6f:d9:18:f6:
45:2a:92:83:22:7d:dc:24:73:e5:47:b1:6d:c4:ce:53:b9:ff:
8a:13:30:99:86:82:ff:33:2c:d6:6a:57:22:55:a3:ce:e6:3b:
83:9e:07:0a:0c:2e:38:0a:5e:0d:d3:d0:07:84:04:48:6a:20:
50:d3:59:86:57:64:69:b2:e3:e7:8c:09:54:58:a4:a8:10:7f:
69:72:13:4a:bd:0f:86:cd:a8:e7:63:12:4c:34:5b:12:96:43:
31:b8:36:2b:57:2a:df:11:28:22:83:0c:ef:f3:50:91:99:5e:
c6:69:be:8b:d2:dd:3d:4f:30:d4:48:a4:cd:c6:a9:3f:87:fa:
cb:91:da:06:d2:a3:02:b9:d2:28:9d:86:ea:32:f6:5b:e6:2b:
58:ba:18:e8:c3:37:06:ac:9f:94:ef:36:f3:ff:e5:7d:ac:28:
73:d8:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:11 2026 by rpki-client