Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 5MUhXl/eKAjLt+XLCvYk+eJWLMQDawVlic7PiacXf6Y=
Subject key identifier: 73:22:81:9B:41:6B:C3:ED:DA:DD:19:FF:B0:19:F3:03:D1:EF:20:4F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 75828D4FFAE008E408981E9684BEE3B072949D74
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Thu 16 Jul 2026 19:33:12 +0000
ROA not before: Thu 16 Jul 2026 19:28:12 +0000
ROA not after: Thu 15 Jul 2027 19:33:12 +0000
asID: 834
IP address blocks: 143.20.7.0/24 maxlen: 24
143.20.8.0/23 maxlen: 24
143.20.11.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
143.20.16.0/24 maxlen: 24
143.20.18.0/24 maxlen: 24
143.20.22.0/24 maxlen: 24
143.20.28.0/24 maxlen: 24
143.20.32.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
143.20.36.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.42.0/23 maxlen: 24
143.20.45.0/24 maxlen: 24
143.20.47.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.50.0/24 maxlen: 24
143.20.53.0/24 maxlen: 24
143.20.56.0/23 maxlen: 24
143.20.59.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.70.0/23 maxlen: 24
143.20.72.0/23 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.80.0/24 maxlen: 24
143.20.86.0/23 maxlen: 24
143.20.103.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.106.0/23 maxlen: 24
143.20.109.0/24 maxlen: 24
143.20.110.0/23 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.120.0/24 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.132.0/24 maxlen: 24
143.20.136.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.140.0/24 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.147.0/24 maxlen: 24
143.20.151.0/24 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.173.0/24 maxlen: 24
143.20.175.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.188.0/22 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.194.0/24 maxlen: 24
143.20.200.0/22 maxlen: 24
143.20.206.0/23 maxlen: 24
143.20.213.0/24 maxlen: 24
143.20.214.0/24 maxlen: 24
143.20.216.0/23 maxlen: 24
143.20.218.0/24 maxlen: 24
143.20.220.0/22 maxlen: 24
143.20.226.0/23 maxlen: 24
143.20.228.0/23 maxlen: 24
143.20.231.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.236.0/23 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.247.0/24 maxlen: 24
143.20.248.0/22 maxlen: 24
143.20.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:82:8d:4f:fa:e0:08:e4:08:98:1e:96:84:be:e3:b0:72:94:9d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 16 19:28:12 2026 GMT
Not After : Jul 15 19:33:12 2027 GMT
Subject: CN=7322819B416BC3EDDADD19FFB019F303D1EF204F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:ea:a4:40:1a:9d:99:93:8a:4c:06:53:b5:
73:cf:cd:8a:0a:a6:d9:f5:dc:bd:3a:44:5f:87:94:
22:d0:c5:dc:6a:3d:d5:19:1f:bc:c9:99:7a:f1:a1:
a3:7f:85:b5:84:ba:26:db:18:f2:16:79:be:52:8c:
fd:36:b3:0f:04:4f:cb:89:8e:89:d7:78:94:0e:28:
89:65:69:96:f7:fe:49:f5:3e:c1:e1:7d:f8:6c:9c:
b0:ad:8f:23:53:44:c0:39:b3:2b:6f:97:6a:e7:2c:
6e:d4:5a:6f:cc:43:17:b9:94:26:63:b3:1d:88:51:
be:47:f8:42:8c:61:74:85:0e:35:cb:69:19:33:3f:
a3:41:24:5f:66:f7:db:89:bd:47:0f:2c:e1:2b:6e:
2a:7f:84:d6:96:43:92:de:9e:07:0c:d4:e4:c2:34:
c8:02:b0:2f:e2:5f:0d:0d:20:72:d3:bf:40:0c:ba:
d2:bd:1f:e2:19:ab:8a:9f:e7:b6:82:89:b7:8a:27:
d5:ec:c0:86:15:a9:73:d0:31:ad:69:a7:a7:9e:0d:
df:51:09:2f:e7:cd:9f:32:2d:aa:b2:a1:1c:ee:f6:
71:39:78:e6:89:b9:e9:b2:bd:6a:65:31:a9:e4:5d:
45:66:ab:6e:a7:38:8f:65:0c:c8:27:57:e3:1e:f9:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:81:9B:41:6B:C3:ED:DA:DD:19:FF:B0:19:F3:03:D1:EF:20:4F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.7.0-143.20.9.255
143.20.11.0/24
143.20.13.0-143.20.14.255
143.20.16.0/24
143.20.18.0/24
143.20.22.0/24
143.20.28.0/24
143.20.32.0/24
143.20.35.0-143.20.36.255
143.20.39.0/24
143.20.42.0/23
143.20.45.0/24
143.20.47.0-143.20.48.255
143.20.50.0/24
143.20.53.0/24
143.20.56.0/23
143.20.59.0/24
143.20.63.0/24
143.20.65.0/24
143.20.70.0-143.20.74.255
143.20.77.0/24
143.20.80.0/24
143.20.86.0/23
143.20.103.0/24
143.20.105.0-143.20.107.255
143.20.109.0-143.20.111.255
143.20.113.0/24
143.20.116.0-143.20.118.255
143.20.120.0/24
143.20.128.0/24
143.20.131.0-143.20.132.255
143.20.136.0/24
143.20.139.0-143.20.140.255
143.20.145.0/24
143.20.147.0/24
143.20.151.0-143.20.152.255
143.20.157.0/24
143.20.162.0/24
143.20.167.0-143.20.168.255
143.20.173.0/24
143.20.175.0-143.20.176.255
143.20.178.0/23
143.20.188.0-143.20.192.255
143.20.194.0/24
143.20.200.0/22
143.20.206.0/23
143.20.213.0-143.20.214.255
143.20.216.0-143.20.218.255
143.20.220.0/22
143.20.226.0-143.20.229.255
143.20.231.0-143.20.237.255
143.20.239.0-143.20.243.255
143.20.247.0-143.20.251.255
143.20.254.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:8d:f4:6a:b2:66:31:32:66:4f:1d:76:99:8b:4d:94:9c:86:
98:ec:f2:af:bb:56:1c:40:47:60:e2:d8:73:a2:1e:59:06:c7:
31:07:52:90:3a:95:51:d9:93:94:cc:1f:6f:be:7f:cb:dd:50:
5d:37:39:96:18:a9:b5:19:77:a3:2c:7a:ca:d2:c8:05:33:c1:
7b:12:e6:fe:43:b0:07:3b:03:3f:7d:3d:da:42:c8:de:07:5d:
00:04:06:63:57:f5:b5:1a:59:23:b9:d2:11:61:bf:4c:ae:60:
91:1a:a2:33:d6:69:09:d3:af:0c:cb:48:ec:f5:7d:0c:3e:08:
2a:bc:67:04:b2:a8:c9:99:79:7f:9b:d8:a1:d2:02:af:d2:5f:
fd:95:d8:9b:28:f1:22:11:72:75:eb:dc:5b:4d:71:a8:cb:4e:
d7:ea:2b:f3:e2:b0:0a:3c:b3:29:68:c9:c5:7b:d5:24:f6:29:
e0:1b:ef:50:20:e9:1f:57:08:94:50:c6:2b:00:a5:0b:29:fd:
14:19:8e:ae:9e:3a:8b:c0:31:2d:e0:62:a0:33:5a:4c:d1:dd:
db:96:bd:cb:80:0a:ca:85:77:b5:51:96:09:18:ef:8c:0a:a4:
3a:54:4a:c2:06:b1:4d:b2:4e:cb:85:3d:4c:bf:b1:bc:3a:f3:
64:55:01:9a
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUdYKNT/rgCOQImB6WhL7jsHKUnXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA3MTYxOTI4MTJaFw0yNzA3MTUxOTMzMTJaMDMxMTAvBgNV
BAMTKDczMjI4MTlCNDE2QkMzRUREQUREMTlGRkIwMTlGMzAzRDFFRjIwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9OqkQBqdmZOKTAZTtXPPzYoK
ptn13L06RF+HlCLQxdxqPdUZH7zJmXrxoaN/hbWEuibbGPIWeb5SjP02sw8ET8uJ
jonXeJQOKIllaZb3/kn1PsHhffhsnLCtjyNTRMA5sytvl2rnLG7UWm/MQxe5lCZj
sx2IUb5H+EKMYXSFDjXLaRkzP6NBJF9m99uJvUcPLOErbip/hNaWQ5LengcM1OTC
NMgCsC/iXw0NIHLTv0AMutK9H+IZq4qf57aCibeKJ9XswIYVqXPQMa1pp6eeDd9R
CS/nzZ8yLaqyoRzu9nE5eOaJuemyvWplMankXUVmq26nOI9lDMgnV+Me+b/VAgMB
AAGjggPvMIID6zAdBgNVHQ4EFgQUcyKBm0Frw+3a3Rn/sBnzA9HvIE8wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICBQYIKwYBBQUHAQcBAf8EggH0MIIB8DCCAewEAgABMIIB
5DAMAwQAjxQHAwQBjxQIAwQAjxQLMAwDBACPFA0DBACPFA4DBACPFBADBACPFBID
BACPFBYDBACPFBwDBACPFCAwDAMEAI8UIwMEAI8UJAMEAI8UJwMEAY8UKgMEAI8U
LTAMAwQAjxQvAwQAjxQwAwQAjxQyAwQAjxQ1AwQBjxQ4AwQAjxQ7AwQAjxQ/AwQA
jxRBMAwDBAGPFEYDBACPFEoDBACPFE0DBACPFFADBAGPFFYDBACPFGcwDAMEAI8U
aQMEAo8UaDAMAwQAjxRtAwQEjxRgAwQAjxRxMAwDBAKPFHQDBACPFHYDBACPFHgD
BACPFIAwDAMEAI8UgwMEAI8UhAMEAI8UiDAMAwQAjxSLAwQAjxSMAwQAjxSRAwQA
jxSTMAwDBACPFJcDBACPFJgDBACPFJ0DBACPFKIwDAMEAI8UpwMEAI8UqAMEAI8U
rTAMAwQAjxSvAwQAjxSwAwQBjxSyMAwDBAKPFLwDBACPFMADBACPFMIDBAKPFMgD
BAGPFM4wDAMEAI8U1QMEAI8U1jAMAwQDjxTYAwQAjxTaAwQCjxTcMAwDBAGPFOID
BAGPFOQwDAMEAI8U5wMEAY8U7DAMAwQAjxTvAwQCjxTwMAwDBACPFPcDBAKPFPgD
BAGPFP4wDQYJKoZIhvcNAQELBQADggEBAMyN9GqyZjEyZk8ddpmLTZSchpjs8q+7
VhxAR2Di2HOiHlkGxzEHUpA6lVHZk5TMH2++f8vdUF03OZYYqbUZd6MsesrSyAUz
wXsS5v5DsAc7Az99PdpCyN4HXQAEBmNX9bUaWSO50hFhv0yuYJEaojPWaQnTrwzL
SOz1fQw+CCq8ZwSyqMmZeX+b2KHSAq/SX/2V2Jso8SIRcnXr3FtNcajLTtfqK/Pi
sAo8syloycV71ST2KeAb71Ag6R9XCJRQxisApQsp/RQZjq6eOovAMS3gYqAzWkzR
3duWvcuACsqFd7VRlgkY74wKpDpUSsIGsU2yTsuFPUy/sbw682RVAZo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:59:01 2026 by rpki-client