Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: QDYYrR4PkQBhHOxHGssAGh/3Pbf9MG9l4HK1ejDftXA=
Subject key identifier: B7:1C:A0:76:C3:DB:20:BF:33:FC:86:A0:A5:DA:B3:48:16:B2:DB:06
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2FA53DDE0FFBBC4E534ACEF4E8B24237BCD3F3C8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Tue 14 Jul 2026 10:10:35 +0000
ROA not before: Tue 14 Jul 2026 10:05:35 +0000
ROA not after: Tue 13 Jul 2027 10:10:35 +0000
asID: 29802
IP address blocks: 96.62.140.0/24 maxlen: 24
96.62.216.0/24 maxlen: 24
140.233.174.0/24 maxlen: 24
143.14.110.0/24 maxlen: 24
143.14.130.0/24 maxlen: 24
143.14.157.0/24 maxlen: 24
143.14.210.0/24 maxlen: 24
143.14.213.0/24 maxlen: 24
145.223.0.0/24 maxlen: 24
145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
147.79.61.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.190.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.198.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.175.0/24 maxlen: 24
150.241.233.0/24 maxlen: 24
155.117.22.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.121.0/24 maxlen: 24
162.141.52.0/24 maxlen: 24
162.141.120.0/24 maxlen: 24
162.141.133.0/24 maxlen: 24
162.141.141.0/24 maxlen: 24
167.148.118.0/24 maxlen: 24
167.148.122.0/24 maxlen: 24
167.148.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a5:3d:de:0f:fb:bc:4e:53:4a:ce:f4:e8:b2:42:37:bc:d3:f3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 10:05:35 2026 GMT
Not After : Jul 13 10:10:35 2027 GMT
Subject: CN=B71CA076C3DB20BF33FC86A0A5DAB34816B2DB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:b1:88:ca:47:80:c9:08:c3:38:6e:52:e6:
c5:e8:2f:89:c3:5a:5a:49:7d:ac:f9:28:9c:e7:dc:
a8:6f:3b:ee:48:50:0f:5d:8e:93:70:61:1b:f7:1b:
6d:ab:c5:90:44:d9:da:6b:94:e8:cb:f9:86:d9:e6:
9f:56:de:a0:31:e5:7f:d9:92:2a:fa:71:bc:46:5d:
ef:e5:86:ba:6f:6d:c4:fd:7b:e8:8d:f3:c8:10:5d:
b7:47:6a:e5:dd:31:f1:ee:d5:7e:40:c5:e4:db:22:
11:79:f7:66:cc:20:63:65:29:44:21:fc:f5:4b:4e:
ea:59:9c:cd:8a:65:c8:f1:06:c9:ac:06:73:06:35:
d7:a2:31:5c:b9:58:67:3c:22:b6:c8:79:50:e9:d4:
9e:f5:49:9f:4a:86:85:e2:95:ce:45:39:11:7e:5b:
43:d6:61:f7:ee:fa:56:83:2c:87:1b:f7:6d:80:b8:
3a:e3:da:c3:73:58:0f:62:70:f7:74:e0:db:f8:4a:
be:04:49:26:36:a1:9b:45:91:44:80:bf:bf:61:87:
70:25:ed:83:02:02:f1:27:53:0e:6a:3b:05:a3:03:
1b:28:c6:4b:de:10:a5:94:7c:a4:52:c9:8a:7c:c7:
c3:1a:95:0c:b6:42:8a:6f:13:16:a3:52:dd:49:55:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:A0:76:C3:DB:20:BF:33:FC:86:A0:A5:DA:B3:48:16:B2:DB:06
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.140.0/24
96.62.216.0/24
140.233.174.0/24
143.14.110.0/24
143.14.130.0/24
143.14.157.0/24
143.14.210.0/24
143.14.213.0/24
145.223.0.0/24
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
147.79.61.0/24
148.135.178.0/23
148.135.190.0/23
148.135.198.0/24
148.135.254.0/24
150.241.175.0/24
150.241.233.0/24
155.117.22.0/24
155.117.79.0/24
155.117.121.0/24
162.141.52.0/24
162.141.120.0/24
162.141.133.0/24
162.141.141.0/24
167.148.118.0/24
167.148.122.0/24
167.148.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:60:ce:2d:24:dc:a8:e1:05:f6:1f:56:32:94:fa:42:a8:95:
03:ab:7a:b9:a2:24:25:4a:e2:fe:99:b2:ab:80:b9:87:d9:ce:
37:b7:ce:d1:c4:55:bf:ed:6b:ee:8a:66:a9:6b:d5:6e:ec:7d:
18:d2:df:c4:f2:5a:ef:68:ec:4d:0c:60:e7:4a:ea:3c:4a:ed:
19:95:3f:36:63:98:b8:f5:60:38:97:28:0c:4c:58:38:07:24:
4e:9a:22:c0:c5:7f:1c:0d:92:57:60:22:dc:cf:1d:7f:fe:14:
91:86:d6:1f:bf:5b:10:5c:67:0d:6f:7f:71:a7:ab:98:33:16:
e6:dd:b6:9e:2f:55:cf:02:e0:06:a5:a7:72:13:09:ee:f4:75:
53:d4:ec:ad:0c:5c:8a:0b:11:11:16:2f:f5:be:eb:ab:e3:4e:
47:4c:60:e4:33:c8:13:c0:57:2c:55:f3:f1:d3:13:20:bd:06:
76:30:b7:1e:7d:f9:82:7f:90:b9:d4:28:da:6a:55:90:e9:01:
e7:f1:31:73:ef:1c:ff:c0:c4:18:01:41:2d:10:6e:23:d0:d3:
b7:ad:9e:2c:67:2d:16:c6:e5:0d:2f:79:55:0d:21:88:d1:a7:
dd:55:17:5b:be:a2:b2:44:60:e6:57:28:50:cd:ab:86:62:be:
31:90:dc:7f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUL6U93g/7vE5TSs706LJCN7zT88gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTQxMDA1MzVaFw0yNzA3MTMxMDEwMzVaMDMxMTAvBgNV
BAMTKEI3MUNBMDc2QzNEQjIwQkYzM0ZDODZBMEE1REFCMzQ4MTZCMkRCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdy7GIykeAyQjDOG5S5sXoL4nD
WlpJfaz5KJzn3KhvO+5IUA9djpNwYRv3G22rxZBE2dprlOjL+YbZ5p9W3qAx5X/Z
kir6cbxGXe/lhrpvbcT9e+iN88gQXbdHauXdMfHu1X5AxeTbIhF592bMIGNlKUQh
/PVLTupZnM2KZcjxBsmsBnMGNdeiMVy5WGc8IrbIeVDp1J71SZ9KhoXilc5FORF+
W0PWYffu+laDLIcb922AuDrj2sNzWA9icPd04Nv4Sr4ESSY2oZtFkUSAv79hh3Al
7YMCAvEnUw5qOwWjAxsoxkveEKWUfKRSyYp8x8MalQy2QopvExajUt1JVY8VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtxygdsPbIL8z/IagpdqzSBay2wYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgd0GCCsGAQUFBwEHAQH/BIHNMIHKMIHHBAIAATCBwAME
AGA+jAMEAGA+2AMEAIzprgMEAI8ObgMEAI8OggMEAI8OnQMEAI8O0gMEAI8O1QME
AJHfAAMEAJHfMgMEAJHfNwMEAJHfPAMEAZHfPgMEAJJnBAMEAJJnEwMEAJNPPQME
AZSHsgMEAZSHvgMEAJSHxgMEAJSH/gMEAJbxrwMEAJbx6QMEAJt1FgMEAJt1TwME
AJt1eQMEAKKNNAMEAKKNeAMEAKKNhQMEAKKNjQMEAKeUdgMEAKeUegMEAKeUsjAN
BgkqhkiG9w0BAQsFAAOCAQEAC2DOLSTcqOEF9h9WMpT6QqiVA6t6uaIkJUri/pmy
q4C5h9nON7fO0cRVv+1r7opmqWvVbux9GNLfxPJa72jsTQxg50rqPErtGZU/NmOY
uPVgOJcoDExYOAckTpoiwMV/HA2SV2Ai3M8df/4UkYbWH79bEFxnDW9/caermDMW
5t22ni9VzwLgBqWnchMJ7vR1U9TsrQxcigsRERYv9b7rq+NOR0xg5DPIE8BXLFXz
8dMTIL0GdjC3Hn35gn+QudQo2mpVkOkB5/Exc+8c/8DEGAFBLRBuI9DTt62eLGct
FsblDS95VQ0hiNGn3VUXW76iskRg5lcoUM2rhmK+MZDcfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:28:25 2026 by rpki-client