Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29208.roa
File: AS29208.roa (raw, json)
Hash identifier: T7qZJ1mnmbVg/QDdF2UMKKqaWmZUl026BIVsa0vyEBI=
Subject key identifier: DE:50:72:2C:FD:A1:55:AC:B4:06:99:D2:CF:F0:EA:23:B4:56:09:0F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 594396272C721815E16E58672E3BD300423446E2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29208.roa
Signing time: Wed 01 Jul 2026 12:48:52 +0000
ROA not before: Wed 01 Jul 2026 12:43:52 +0000
ROA not after: Wed 30 Jun 2027 12:48:52 +0000
asID: 29208
IP address blocks: 141.11.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 05:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:43:96:27:2c:72:18:15:e1:6e:58:67:2e:3b:d3:00:42:34:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 1 12:43:52 2026 GMT
Not After : Jun 30 12:48:52 2027 GMT
Subject: CN=DE50722CFDA155ACB40699D2CFF0EA23B456090F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:21:37:6b:91:f6:e3:88:0e:7a:18:8d:4c:
51:5a:57:a1:50:73:ee:e6:75:0f:77:6b:cc:60:a4:
9f:91:68:16:5e:14:40:6f:3c:22:06:aa:5a:18:06:
88:0a:ec:44:d4:23:5e:d1:54:5b:d9:e4:d0:fc:59:
06:8c:01:f0:06:74:d9:33:25:84:20:8d:9e:f4:b9:
ab:84:7d:37:ef:62:88:1f:b5:7e:34:7d:22:c9:ef:
de:de:a0:de:b6:5e:ad:5c:62:85:2b:9d:70:05:c6:
74:7d:f5:d9:c1:c2:03:6d:23:eb:73:d3:12:18:01:
b6:a7:66:d0:7e:95:b7:cc:10:00:59:ae:09:c7:3d:
de:37:3f:80:7c:20:98:c9:45:0d:08:4a:c8:e9:12:
c6:eb:69:33:79:0b:a4:70:03:d1:04:37:4b:cf:e4:
5f:6f:32:98:5c:a1:e9:ab:c9:bc:d7:41:f0:6c:68:
8a:7f:5c:5e:73:53:3f:24:b6:47:69:ec:59:f1:66:
f5:b1:1c:f6:44:16:4b:7a:8f:5f:47:ba:2b:12:b9:
3c:2b:c1:3e:6f:2b:ed:cc:bb:22:d8:a0:36:34:ca:
db:6c:26:be:e2:d0:3f:71:68:d2:b8:59:18:bf:19:
9e:9f:0c:68:63:9d:bc:49:dd:3e:a5:64:70:fc:2a:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:72:2C:FD:A1:55:AC:B4:06:99:D2:CF:F0:EA:23:B4:56:09:0F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4b:d9:f6:b6:ed:3b:34:c7:a6:c7:41:37:60:59:10:f2:0d:
96:14:48:ab:7b:69:c3:2a:a6:73:54:2d:c8:86:13:77:2c:82:
dc:b7:43:b5:ea:77:bb:8d:80:65:3c:10:ab:3c:67:3a:e5:e6:
3e:9e:f1:15:08:02:a9:3f:49:ac:84:73:2f:55:2a:2c:3b:05:
f3:e5:12:b0:bd:3f:0c:e5:20:70:ce:05:32:6b:80:a4:b5:0e:
91:02:26:bb:50:b2:21:d8:dc:36:1d:46:05:f2:07:92:09:d7:
c7:98:99:59:7e:5f:e8:a8:6d:5e:f0:13:c7:de:04:04:6c:86:
93:8f:0a:4d:0d:a8:02:47:52:6c:d3:7a:37:20:b0:fc:bd:c1:
dc:d2:c2:d1:df:76:7b:25:07:07:35:38:a4:ea:c5:5f:21:5c:
16:b1:5b:5a:d6:a9:de:c6:05:77:1e:eb:1e:03:07:85:ff:4f:
a4:5c:fb:11:bf:d9:48:f6:7d:df:43:9e:8c:de:59:a1:d2:0a:
d7:69:32:f0:1a:04:33:88:9c:67:da:01:64:0e:04:74:71:8c:
59:19:d7:58:c7:88:c9:37:da:8a:72:79:ec:ef:b6:65:b8:46:
18:c7:3d:81:f5:9a:87:97:2e:26:04:19:5f:02:ce:4b:94:d2:
1c:91:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:31 2026 by rpki-client