Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: +ehcsFhujFs2gb3YOPDzFQYS1PjL93jkgPBRXLpSxlE=
Subject key identifier: 4C:8B:72:2D:75:69:1F:96:24:AB:22:50:86:70:83:E1:B3:91:E1:87
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 410232E2EEDD2236CEFEB9B791F3EAFAFD61469B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Tue 22 Sep 2026 14:43:03 +0000
ROA not before: Tue 22 Sep 2026 14:38:03 +0000
ROA not after: Tue 21 Sep 2027 14:43:03 +0000
asID: 29802
IP address blocks: 96.62.140.0/24 maxlen: 24
96.62.216.0/24 maxlen: 24
140.150.227.0/24 maxlen: 24
140.233.174.0/24 maxlen: 24
143.14.110.0/24 maxlen: 24
143.14.157.0/24 maxlen: 24
143.14.210.0/24 maxlen: 24
143.14.213.0/24 maxlen: 24
145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
147.79.61.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.190.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.198.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.175.0/24 maxlen: 24
150.241.233.0/24 maxlen: 24
155.117.22.0/24 maxlen: 24
155.117.121.0/24 maxlen: 24
162.141.52.0/24 maxlen: 24
162.141.120.0/24 maxlen: 24
162.141.131.0/24 maxlen: 24
162.141.133.0/24 maxlen: 24
162.141.141.0/24 maxlen: 24
167.148.118.0/24 maxlen: 24
167.148.122.0/24 maxlen: 24
167.148.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:02:32:e2:ee:dd:22:36:ce:fe:b9:b7:91:f3:ea:fa:fd:61:46:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 14:38:03 2026 GMT
Not After : Sep 21 14:43:03 2027 GMT
Subject: CN=4C8B722D75691F9624AB2250867083E1B391E187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:a2:ad:47:91:61:0d:ec:c5:af:42:4a:0b:
10:2f:9e:f2:81:e6:26:e2:16:4b:05:01:41:27:87:
a4:f1:64:be:c5:e9:22:cb:0f:09:2c:e6:04:59:0b:
3e:06:ea:6c:ff:54:c6:c4:c9:d0:a6:a4:23:6f:ea:
5f:dd:87:5b:b6:90:89:9c:76:72:a4:fe:ca:8a:7a:
98:60:c6:74:a0:d9:ba:5e:0f:cc:9b:bb:c4:c0:3d:
6a:18:45:05:5a:12:68:1d:b6:34:c0:e2:4d:72:7e:
73:be:ec:77:22:5b:0a:3c:c0:03:ca:5b:d6:bd:4c:
63:fe:18:3c:48:bd:b0:39:fa:5b:64:49:41:cc:8e:
a3:a5:46:a4:5c:97:60:a9:d0:a3:b8:2e:ed:8a:33:
bd:2d:ab:b6:6d:a7:9f:df:32:c9:c3:69:e4:98:ef:
48:7f:80:04:4e:1a:c9:e8:29:4d:ff:31:96:87:a4:
ec:ea:d7:8d:30:5c:47:8c:08:42:1c:57:de:34:5b:
96:08:7d:3b:dc:a3:30:d3:f4:db:3a:ff:9d:68:2c:
95:36:41:d0:8f:16:b3:c9:e3:d0:92:89:0c:84:62:
b7:0e:2c:c1:89:82:6c:4d:59:18:f2:36:54:06:ae:
69:20:c4:6d:a3:bc:d9:1c:c1:2e:a5:e5:81:1c:b6:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:72:2D:75:69:1F:96:24:AB:22:50:86:70:83:E1:B3:91:E1:87
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.140.0/24
96.62.216.0/24
140.150.227.0/24
140.233.174.0/24
143.14.110.0/24
143.14.157.0/24
143.14.210.0/24
143.14.213.0/24
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
147.79.61.0/24
148.135.178.0/23
148.135.190.0/23
148.135.198.0/24
148.135.254.0/24
150.241.175.0/24
150.241.233.0/24
155.117.22.0/24
155.117.121.0/24
162.141.52.0/24
162.141.120.0/24
162.141.131.0/24
162.141.133.0/24
162.141.141.0/24
167.148.118.0/24
167.148.122.0/24
167.148.178.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b0:24:a9:61:18:a7:89:71:98:2e:23:e5:15:61:51:c7:8c:
7d:09:2e:a3:33:eb:57:a6:ad:74:95:42:74:87:8a:68:84:d7:
e0:ea:1b:a9:4d:18:15:bf:e2:0d:b4:61:8a:51:21:80:95:fd:
aa:e5:e2:31:35:60:09:d3:10:bb:e0:ed:5b:bc:b3:e6:d9:5f:
33:f9:4f:3d:5f:be:f2:fd:03:fc:31:8d:8e:9e:63:a5:9b:bc:
41:9c:23:a4:b5:ef:87:8e:89:b0:54:c0:5c:06:30:91:e8:ab:
d0:ea:09:76:3b:3e:67:9b:43:a8:62:8e:75:b0:b9:a5:08:ba:
c0:3b:8d:0b:44:ae:d1:2e:13:dc:af:46:b9:4f:35:bc:7c:60:
d2:fc:db:48:21:31:33:1d:b5:96:d8:63:76:5f:02:7f:65:74:
5f:fa:0e:91:7a:29:8f:5f:df:c3:40:ce:61:d9:35:8b:9b:6f:
30:65:1b:eb:91:c0:b8:04:1d:b3:a8:dc:15:91:53:d8:08:3b:
26:f8:53:0e:bb:aa:3e:d3:92:eb:15:d3:dc:6a:29:0a:c6:3d:
9d:2d:15:94:0d:26:30:0a:6e:33:9f:2a:93:74:8d:7a:68:a0:
ae:f9:da:a4:bc:a0:70:b7:b9:75:61:27:1e:69:cb:d4:89:2b:
fe:f5:18:26
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUQQIy4u7dIjbO/rm3kfPq+v1hRpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjIxNDM4MDNaFw0yNzA5MjExNDQzMDNaMDMxMTAvBgNV
BAMTKDRDOEI3MjJENzU2OTFGOTYyNEFCMjI1MDg2NzA4M0UxQjM5MUUxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzqKtR5FhDezFr0JKCxAvnvKB
5ibiFksFAUEnh6TxZL7F6SLLDwks5gRZCz4G6mz/VMbEydCmpCNv6l/dh1u2kImc
dnKk/sqKephgxnSg2bpeD8ybu8TAPWoYRQVaEmgdtjTA4k1yfnO+7HciWwo8wAPK
W9a9TGP+GDxIvbA5+ltkSUHMjqOlRqRcl2Cp0KO4Lu2KM70tq7Ztp5/fMsnDaeSY
70h/gAROGsnoKU3/MZaHpOzq140wXEeMCEIcV940W5YIfTvcozDT9Ns6/51oLJU2
QdCPFrPJ49CSiQyEYrcOLMGJgmxNWRjyNlQGrmkgxG2jvNkcwS6l5YEctvHxAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUTItyLXVpH5YkqyJQhnCD4bOR4YcwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgdcGCCsGAQUFBwEHAQH/BIHHMIHEMIHBBAIAATCBugME
AGA+jAMEAGA+2AMEAIyW4wMEAIzprgMEAI8ObgMEAI8OnQMEAI8O0gMEAI8O1QME
AJHfMgMEAJHfNwMEAJHfPAMEAZHfPgMEAJJnBAMEAJJnEwMEAJNPPQMEAZSHsgME
AZSHvgMEAJSHxgMEAJSH/gMEAJbxrwMEAJbx6QMEAJt1FgMEAJt1eQMEAKKNNAME
AKKNeAMEAKKNgwMEAKKNhQMEAKKNjQMEAKeUdgMEAKeUegMEAKeUsjANBgkqhkiG
9w0BAQsFAAOCAQEAg7AkqWEYp4lxmC4j5RVhUceMfQkuozPrV6atdJVCdIeKaITX
4OobqU0YFb/iDbRhilEhgJX9quXiMTVgCdMQu+DtW7yz5tlfM/lPPV++8v0D/DGN
jp5jpZu8QZwjpLXvh46JsFTAXAYwkeir0OoJdjs+Z5tDqGKOdbC5pQi6wDuNC0Su
0S4T3K9GuU81vHxg0vzbSCExMx21lthjdl8Cf2V0X/oOkXopj1/fw0DOYdk1i5tv
MGUb65HAuAQds6jcFZFT2Ag7JvhTDruqPtOS6xXT3GopCsY9nS0VlA0mMApuM58q
k3SNemigrvnapLygcLe5dWEnHmnL1Ikr/vUYJg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:24:28 2026 by rpki-client