Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: kgQupiVofXTK14REL28AjlOEqPzJ54HqFdpsMmJHCKw=
Subject key identifier: 0E:69:31:13:86:18:39:3B:1C:DD:A2:2A:45:F9:4D:28:F8:15:CC:EC
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7DDEA35D5096F6CC7FDB4536084ADD0C84E036C2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
Signing time: Sun 05 Jul 2026 05:12:45 +0000
ROA not before: Sun 05 Jul 2026 05:07:45 +0000
ROA not after: Sun 04 Jul 2027 05:12:45 +0000
asID: 29802
IP address blocks: 143.20.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:de:a3:5d:50:96:f6:cc:7f:db:45:36:08:4a:dd:0c:84:e0:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 5 05:07:45 2026 GMT
Not After : Jul 4 05:12:45 2027 GMT
Subject: CN=0E6931138618393B1CDDA22A45F94D28F815CCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:5c:56:23:cf:bb:d2:ec:7b:54:c1:b5:61:
c4:27:16:66:ff:0e:f3:a2:79:6e:74:2f:4e:04:70:
04:39:fc:d9:33:06:8e:3c:25:4b:61:37:01:19:59:
e4:5a:69:68:7c:88:9f:b0:73:c4:f3:dd:9c:5e:84:
33:cf:cf:be:68:cd:da:ab:af:83:67:d7:93:d6:db:
29:9c:7e:0f:da:1d:02:e0:19:8b:36:42:89:3a:32:
af:3a:c4:ac:31:e6:36:97:d9:75:81:ac:41:cb:b4:
37:e5:51:20:2b:1c:51:07:8e:6f:4d:e4:1f:b5:08:
1e:a5:eb:4e:4a:c0:1d:13:78:29:ed:f5:f9:f4:68:
44:43:f9:2d:5f:9a:82:05:6a:65:f9:69:0b:72:cf:
13:9e:e9:c5:98:ca:fe:71:66:12:f3:de:0f:25:31:
8d:bf:15:80:d2:53:e1:76:8f:79:00:be:d1:42:7b:
d3:97:fe:e8:33:59:aa:4e:26:15:13:84:db:81:b1:
ba:8b:17:1f:0e:b3:1d:65:de:e1:ed:3d:99:02:71:
01:a4:3b:00:b7:ce:ed:af:b3:ea:d8:b1:5e:b9:18:
9b:a9:17:8a:14:b8:fd:71:1e:69:11:bf:80:50:7d:
65:5b:29:76:87:da:85:b7:49:5e:b7:5b:95:0b:55:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:31:13:86:18:39:3B:1C:DD:A2:2A:45:F9:4D:28:F8:15:CC:EC
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.180.0/24
Signature Algorithm: sha256WithRSAEncryption
75:21:79:68:f0:4c:a4:08:9c:b2:09:15:14:6b:2d:99:4c:77:
c8:2b:5b:0a:cf:3c:75:fe:92:75:60:54:74:24:f2:28:66:60:
2a:1e:90:d1:d4:f0:f0:69:dc:f7:16:b0:b7:21:ab:07:c3:8b:
3e:21:f4:67:3b:6f:01:f3:29:32:b4:eb:68:15:d8:82:12:76:
3f:d6:c9:df:2c:ae:b0:d1:e9:c9:89:08:47:aa:13:87:a3:9a:
69:60:c4:74:c0:49:1e:73:b7:58:1f:d0:c6:a8:a0:47:6c:a0:
65:8c:6b:7e:b6:bb:f4:9a:d8:15:15:75:d3:c4:d4:74:f0:e9:
73:43:ff:42:b8:2b:a8:2c:ef:a2:da:4b:a3:ce:e2:5e:91:98:
86:bb:2c:db:f4:eb:09:60:00:31:af:ca:20:88:f8:83:58:54:
4f:fb:a1:61:70:fd:dd:67:df:55:83:83:2e:2f:0d:ee:24:ce:
3f:44:98:f7:2d:01:1e:81:5c:93:c0:c6:0c:26:72:11:5b:ab:
83:6d:15:f0:de:56:62:22:ee:c7:59:7b:8a:08:e7:2a:7b:c4:
a0:07:db:04:ae:eb:be:bc:4f:2b:db:fc:f1:99:c2:f3:69:be:
e7:8e:14:2c:13:33:c3:6c:72:b8:3a:40:8f:a5:24:3d:d5:cb:
de:dc:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:50 2026 by rpki-client