Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: 7I3WalLeehBoTfov2Fx215iFMT5jXOv+GGf/Ejyv6sY=
Subject key identifier: 9F:52:D3:1E:E8:35:57:1E:C7:1B:39:FA:7E:11:77:EA:E6:ED:B2:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 448B83A00CCA68F72FC9F950A3E85762E42FC6D4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Mon 09 Nov 2026 15:14:41 +0000
ROA not before: Mon 09 Nov 2026 15:09:41 +0000
ROA not after: Mon 08 Nov 2027 15:14:41 +0000
asID: 29802
IP address blocks: 96.62.140.0/24 maxlen: 24
96.62.216.0/24 maxlen: 24
140.150.227.0/24 maxlen: 24
143.14.110.0/24 maxlen: 24
143.14.157.0/24 maxlen: 24
143.14.210.0/24 maxlen: 24
143.14.213.0/24 maxlen: 24
145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
146.103.52.0/24 maxlen: 24
147.79.61.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.190.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.175.0/24 maxlen: 24
150.241.233.0/24 maxlen: 24
155.117.22.0/24 maxlen: 24
155.117.121.0/24 maxlen: 24
162.141.52.0/24 maxlen: 24
162.141.120.0/24 maxlen: 24
162.141.133.0/24 maxlen: 24
162.141.141.0/24 maxlen: 24
167.148.118.0/24 maxlen: 24
167.148.122.0/24 maxlen: 24
167.148.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 11:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8b:83:a0:0c:ca:68:f7:2f:c9:f9:50:a3:e8:57:62:e4:2f:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 9 15:09:41 2026 GMT
Not After : Nov 8 15:14:41 2027 GMT
Subject: CN=9F52D31EE835571EC71B39FA7E1177EAE6EDB270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:39:9d:cd:a1:96:bc:ba:c7:ce:35:20:5c:
dc:81:4e:d7:cc:14:65:18:57:39:d6:94:11:57:4b:
2d:69:a1:49:c9:bc:7e:04:58:49:63:66:7d:77:12:
19:a8:3c:24:36:46:d0:29:91:9c:75:e8:c5:22:53:
9b:5e:ba:c0:17:b4:7c:de:ec:4c:59:ff:2b:ae:2a:
94:bd:05:14:43:17:e7:16:75:f2:60:42:0a:9a:c6:
dd:a0:34:4b:8f:f2:a0:51:6a:1a:35:e8:bb:30:a5:
3e:34:2a:fa:28:34:da:6d:d3:5a:e3:ff:06:8e:9d:
3f:91:7e:4e:1e:db:e7:0e:7f:33:fb:f4:1a:51:77:
2e:3e:3f:2b:5f:61:2f:cc:b7:29:46:7a:f4:97:02:
8c:92:37:ec:3e:e6:f8:9a:6f:7c:62:65:fd:e6:88:
af:3b:41:6d:a8:b5:30:a3:82:07:7b:e3:3b:5f:f7:
34:04:d7:03:e0:40:ed:d2:36:86:a8:a5:94:5e:47:
2e:fe:5f:64:7b:73:0d:9a:c8:ec:4c:fa:de:aa:47:
3a:48:6f:e7:19:c9:1c:09:bd:20:ad:f3:51:c5:d1:
f9:66:45:4a:79:1b:4f:1b:ac:41:43:89:e7:e6:9f:
8d:f9:71:f5:5b:88:da:b9:c7:d3:61:42:2b:3e:9a:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:D3:1E:E8:35:57:1E:C7:1B:39:FA:7E:11:77:EA:E6:ED:B2:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.140.0/24
96.62.216.0/24
140.150.227.0/24
143.14.110.0/24
143.14.157.0/24
143.14.210.0/24
143.14.213.0/24
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
146.103.52.0/24
147.79.61.0/24
148.135.178.0/23
148.135.190.0/23
148.135.254.0/24
150.241.175.0/24
150.241.233.0/24
155.117.22.0/24
155.117.121.0/24
162.141.52.0/24
162.141.120.0/24
162.141.133.0/24
162.141.141.0/24
167.148.118.0/24
167.148.122.0/24
167.148.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:60:73:f6:61:40:ba:b6:5e:8b:66:79:57:0a:25:3f:90:d1:
7d:81:60:9e:f1:c4:2d:6f:64:e0:69:02:45:ee:0f:02:c3:3b:
e6:2e:c1:ff:69:b2:3f:47:26:a3:b0:10:74:97:3b:ff:1c:3d:
9e:bb:c8:e8:03:4f:0e:f8:d9:ab:83:36:ed:8c:2c:9e:b5:91:
02:01:7a:35:99:e0:d2:1f:bc:66:03:bb:dc:43:c0:c1:6c:a2:
10:71:92:bc:b6:e9:b4:fd:9f:5c:08:94:aa:cc:49:56:a5:59:
e0:86:78:fa:69:b3:93:65:b9:20:c8:49:67:c5:1a:55:71:ba:
1e:49:93:cb:9b:38:fb:7a:08:ea:3d:b1:da:82:80:f6:d8:aa:
09:33:6c:36:89:9e:ae:c2:b3:4e:a6:55:0a:c1:d5:96:1c:5e:
64:bf:28:4b:aa:6e:3f:f6:fc:0a:48:a3:85:6d:f4:a4:91:db:
c6:f1:83:e6:13:74:56:f5:f1:e9:b4:7e:f6:44:e8:08:c7:50:
99:c0:51:da:c4:f4:bd:04:cc:d8:db:89:a9:a3:ab:4f:3a:13:
c1:38:56:00:e6:33:70:06:5c:82:40:0b:04:ca:2f:bd:27:5b:
c9:79:91:3c:87:c4:fe:3e:e8:65:52:68:42:3d:98:7e:ba:76:
33:c8:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:08:14 2026 by rpki-client