Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: GorWHarzvIlLzADgLbWTHaA+DWyxAGve0RC76INbIE0=
Subject key identifier: 97:CE:5D:E7:E9:C6:A3:C6:F7:7C:D5:BC:6B:24:8D:48:B0:9C:1B:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F68EAF275B0AC875AA1962A5FEF406575DC9E26
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
Signing time: Tue 10 Nov 2026 10:02:54 +0000
ROA not before: Tue 10 Nov 2026 09:57:54 +0000
ROA not after: Tue 09 Nov 2027 10:02:54 +0000
asID: 29802
IP address blocks: 82.21.103.0/24 maxlen: 24
82.21.110.0/24 maxlen: 24
82.21.113.0/24 maxlen: 24
82.21.119.0/24 maxlen: 24
82.21.122.0/24 maxlen: 24
82.21.124.0/24 maxlen: 24
82.21.132.0/24 maxlen: 24
82.21.139.0/24 maxlen: 24
82.21.143.0/24 maxlen: 24
82.21.155.0/24 maxlen: 24
82.21.163.0/24 maxlen: 24
82.22.61.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.116.0/22 maxlen: 24
82.24.128.0/22 maxlen: 24
82.24.132.0/22 maxlen: 24
82.24.136.0/22 maxlen: 24
82.24.140.0/22 maxlen: 24
82.24.148.0/22 maxlen: 24
82.24.152.0/22 maxlen: 24
82.24.156.0/22 maxlen: 24
82.24.160.0/22 maxlen: 24
82.24.168.0/22 maxlen: 24
82.24.176.0/22 maxlen: 24
82.24.194.0/24 maxlen: 24
82.24.196.0/22 maxlen: 24
82.25.148.0/23 maxlen: 24
82.25.150.0/23 maxlen: 24
82.25.152.0/23 maxlen: 24
82.25.156.0/23 maxlen: 24
82.25.158.0/23 maxlen: 24
82.25.162.0/23 maxlen: 24
82.25.164.0/23 maxlen: 24
82.25.166.0/23 maxlen: 24
82.25.168.0/23 maxlen: 24
82.25.170.0/23 maxlen: 24
82.25.172.0/23 maxlen: 24
82.25.176.0/23 maxlen: 24
82.25.178.0/23 maxlen: 24
82.25.182.0/23 maxlen: 24
82.25.188.0/23 maxlen: 24
82.26.116.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.38.174.0/24 maxlen: 24
82.39.223.0/24 maxlen: 24
82.47.240.0/23 maxlen: 24
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
2a13:9500:202::/48 maxlen: 48
2a13:9500:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:68:ea:f2:75:b0:ac:87:5a:a1:96:2a:5f:ef:40:65:75:dc:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 10 09:57:54 2026 GMT
Not After : Nov 9 10:02:54 2027 GMT
Subject: CN=97CE5DE7E9C6A3C6F77CD5BC6B248D48B09C1B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:0b:e1:68:4f:99:62:d8:0c:df:46:17:a3:
1c:47:09:b7:b7:e5:ac:48:4f:87:7d:af:65:9b:44:
fe:1f:c8:8e:0c:fd:e9:1c:ec:62:d6:45:ec:1f:cf:
8f:bd:23:ca:b4:37:fd:95:89:12:6d:22:de:98:86:
a6:1b:0f:13:30:4e:f7:80:8a:28:05:f1:ca:05:93:
8b:3c:e0:3e:f0:f9:9e:5f:5b:3f:65:54:f3:05:5c:
57:9c:62:cb:79:26:64:b1:f9:11:35:bd:04:45:d5:
86:f2:48:eb:94:c8:ae:7e:f4:f7:c7:3e:0d:e4:ee:
66:a9:9a:70:92:43:2a:ee:00:a1:71:4b:2e:04:12:
f1:0f:e8:0a:42:cc:ad:3f:96:35:6f:a4:35:2b:ba:
a1:2e:d0:89:6a:77:79:5b:58:9b:74:8f:53:4a:d0:
23:d6:28:8d:af:5e:ca:07:fc:7b:f5:1d:30:02:0b:
4e:43:20:77:c8:54:fe:45:10:8a:24:77:7f:0d:cf:
65:1a:a4:00:69:b5:18:bc:e1:a7:3a:45:f5:52:da:
e6:ee:f8:33:85:84:d2:c4:fe:ae:91:66:fa:3c:85:
6b:0c:bc:d4:86:1f:27:9d:0e:95:a0:f0:07:08:c5:
e8:74:a7:f7:40:4d:82:88:da:b8:6a:1f:73:4c:e9:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:5D:E7:E9:C6:A3:C6:F7:7C:D5:BC:6B:24:8D:48:B0:9C:1B:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.103.0/24
82.21.110.0/24
82.21.113.0/24
82.21.119.0/24
82.21.122.0/24
82.21.124.0/24
82.21.132.0/24
82.21.139.0/24
82.21.143.0/24
82.21.155.0/24
82.21.163.0/24
82.22.61.0/24
82.24.92.0-82.24.99.255
82.24.116.0/22
82.24.128.0/20
82.24.148.0-82.24.163.255
82.24.168.0/22
82.24.176.0/22
82.24.194.0/24
82.24.196.0/22
82.25.148.0-82.25.153.255
82.25.156.0/22
82.25.162.0-82.25.173.255
82.25.176.0/22
82.25.182.0/23
82.25.188.0/23
82.26.116.0/24
82.26.176.0/20
82.38.174.0/24
82.39.223.0/24
82.47.240.0/23
IPv6:
2a13:9500:6::-2a13:9500:10:ffff:ffff:ffff:ffff:ffff
2a13:9500:1c::/46
2a13:9500:202::/48
2a13:9500:204::/48
Signature Algorithm: sha256WithRSAEncryption
7b:bb:a2:90:7e:1c:09:51:db:6b:75:9d:c2:dd:91:62:f1:50:
a3:be:e1:6b:25:cd:03:16:9e:37:bd:44:b3:b1:6e:52:ac:c3:
b5:b5:ff:70:ae:41:31:90:84:19:38:46:ed:21:e5:42:00:f4:
36:1f:36:87:ce:a0:80:2c:f2:48:27:36:0e:4b:11:08:7b:72:
dc:ce:4b:36:60:cc:55:d4:25:00:3a:f4:da:56:8a:1f:cb:e4:
9b:a0:c6:7e:5a:1b:13:9b:c8:a4:94:e0:67:8f:18:ef:49:b6:
66:4d:1d:e3:06:6c:e3:67:7e:60:e7:1e:fc:3b:f0:a0:f0:8b:
4e:81:d8:3a:35:63:9e:93:d4:7b:e7:05:46:88:ab:8c:9b:3d:
b6:90:4f:ae:66:bb:0c:ac:cb:e0:15:69:6f:39:b2:de:22:e7:
9b:14:02:d3:e1:1f:77:77:9e:57:0f:a5:df:83:b7:59:41:97:
fe:43:95:12:2f:85:6e:ac:46:38:c7:2b:71:7d:70:af:65:0e:
81:0f:81:aa:32:c7:82:69:74:3c:87:4f:32:9e:21:65:6e:03:
80:82:71:59:77:8c:4b:42:e3:f5:ed:d3:14:9d:92:52:25:c6:
cc:5d:31:9c:40:48:8c:3a:d3:36:a7:6b:17:5a:8b:a3:9f:eb:
2e:f0:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:35:55 2026 by rpki-client