Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 3NiDtQ7g1u76FU03oYzG8kgH5TXo1ZDmpA/5p/NwCx4=
Subject key identifier: 00:76:C0:1A:0C:70:3C:10:5D:96:01:BD:12:88:26:61:5E:01:2D:59
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 39918AD004FA5DDE481537E42D5E1C8492DF4FCB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
Signing time: Wed 30 Sep 2026 00:08:18 +0000
ROA not before: Wed 30 Sep 2026 00:03:18 +0000
ROA not after: Wed 29 Sep 2027 00:08:18 +0000
asID: 834
IP address blocks: 90.96.68.0/22 maxlen: 24
90.96.72.0/21 maxlen: 24
90.96.80.0/20 maxlen: 24
90.96.96.0/19 maxlen: 24
90.96.196.0/22 maxlen: 24
90.96.200.0/21 maxlen: 24
90.96.208.0/20 maxlen: 24
90.96.224.0/21 maxlen: 24
90.96.232.0/22 maxlen: 24
90.96.248.0/21 maxlen: 24
143.20.7.0/24 maxlen: 24
143.20.13.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
143.20.102.0/24 maxlen: 24
143.20.108.0/22 maxlen: 24
143.20.141.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.178.0/23 maxlen: 24
143.20.206.0/24 maxlen: 24
143.20.220.0/23 maxlen: 24
143.20.222.0/24 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.232.0/22 maxlen: 24
143.20.240.0/22 maxlen: 24
143.20.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:91:8a:d0:04:fa:5d:de:48:15:37:e4:2d:5e:1c:84:92:df:4f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 30 00:03:18 2026 GMT
Not After : Sep 29 00:08:18 2027 GMT
Subject: CN=0076C01A0C703C105D9601BD128826615E012D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:b5:d4:4d:9f:4b:b5:c0:af:c9:89:90:d0:
94:c8:56:6f:88:7c:6d:27:50:86:9d:1b:d2:d1:e4:
12:b1:10:f0:08:43:d2:03:0b:1d:30:50:49:ae:6f:
51:41:31:6c:de:d9:98:88:52:f1:33:91:ec:b6:b7:
46:b8:f4:85:37:7c:44:4a:ad:35:81:48:01:84:a9:
91:67:92:99:67:b8:20:26:f1:ad:81:9e:47:dd:50:
10:05:7d:d6:02:0e:36:4a:6d:78:3f:7c:3b:df:b1:
55:4d:e2:6f:7e:6e:28:9b:41:7f:c9:3f:83:41:dc:
8e:e8:2f:c5:9a:d3:58:46:50:41:98:df:ce:eb:c0:
c4:14:fc:4f:8b:5b:61:a5:6a:d4:e6:ac:e5:88:65:
67:d8:7e:2a:02:e4:68:88:40:95:76:f4:ac:0b:0d:
7a:de:da:66:33:bf:2f:fe:f9:0e:4e:76:9f:e1:a5:
07:d1:2d:c1:6e:6b:6f:04:a0:f1:76:40:b1:3d:1c:
3a:e1:71:f0:1c:f7:33:b2:db:1c:48:ce:32:b3:69:
bb:59:5b:05:e4:9d:62:d5:c4:43:23:1a:b7:b7:0c:
2e:32:16:8c:2b:47:e4:1b:b7:36:30:18:fa:67:50:
d6:4c:9f:ed:96:9f:1d:fd:13:52:9a:cf:ee:d6:79:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:C0:1A:0C:70:3C:10:5D:96:01:BD:12:88:26:61:5E:01:2D:59
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.68.0-90.96.127.255
90.96.196.0-90.96.235.255
90.96.248.0/21
143.20.7.0/24
143.20.13.0-143.20.14.255
143.20.102.0/24
143.20.108.0/22
143.20.141.0/24
143.20.162.0/24
143.20.178.0/23
143.20.206.0/24
143.20.220.0-143.20.222.255
143.20.228.0/24
143.20.232.0/22
143.20.240.0/22
143.20.249.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ee:8b:30:47:04:7a:55:73:06:06:20:74:56:11:3a:f5:da:
5f:4a:1c:38:5f:d5:a7:d7:37:b9:03:a7:5e:07:0c:b2:b8:8e:
27:3d:64:2f:7c:f5:62:61:24:34:25:14:87:87:e9:24:5c:7a:
9f:e9:c4:79:ef:ce:fd:cc:ef:51:e4:e2:81:06:8c:c4:07:da:
c4:82:1f:b2:0a:bb:43:9a:13:64:36:91:79:27:c3:ce:41:23:
7f:5b:8a:8e:67:cb:c4:e9:ad:93:d8:ea:eb:28:69:7e:3d:36:
d6:23:5a:ed:a1:75:37:9e:36:86:d8:ec:3d:df:1a:62:38:49:
68:3b:8e:64:6b:5f:0a:36:c6:f1:22:93:26:15:4e:da:4a:5c:
ed:f0:80:1a:00:db:cf:c4:9e:76:3b:2b:94:be:99:34:02:9a:
c9:27:ea:93:1b:c7:2e:e8:ce:dc:1f:01:35:66:7e:0b:a2:b2:
e5:27:17:a1:8f:41:a7:69:8a:e9:e3:fb:51:bc:2b:53:09:2b:
de:94:81:4e:a2:f4:7d:8a:c8:f8:1e:e0:09:96:6b:15:e2:6c:
9d:5b:d3:c9:1e:f7:79:16:d7:83:a4:40:b5:66:29:4f:ce:86:
95:3a:27:01:e0:67:3d:d2:41:17:78:d6:eb:5e:47:d7:bf:1c:
53:27:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:33:13 2026 by rpki-client