Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: RFzin1EWmk5P3wEKfRDLYTj/eJDMFt+zlh39OKOp/A0=
Subject key identifier: 8C:94:0B:DA:7C:5C:07:61:1C:59:D3:B2:41:09:69:F6:E5:5E:0C:F0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 74A411C6150BB25281ABDFF7641CDC861258037E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
Signing time: Sun 08 Nov 2026 08:39:47 +0000
ROA not before: Sun 08 Nov 2026 08:34:47 +0000
ROA not after: Sun 07 Nov 2027 08:39:47 +0000
asID: 29802
IP address blocks: 46.202.240.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.198.0/24 maxlen: 24
46.203.201.0/24 maxlen: 24
46.203.206.0/24 maxlen: 24
46.203.209.0/24 maxlen: 24
91.124.130.0/24 maxlen: 24
92.112.134.0/24 maxlen: 24
92.112.136.0/24 maxlen: 24
92.112.139.0/24 maxlen: 24
92.112.145.0/24 maxlen: 24
92.112.148.0/24 maxlen: 24
92.112.150.0/24 maxlen: 24
92.112.168.0/24 maxlen: 24
92.112.169.0/24 maxlen: 24
92.112.173.0/24 maxlen: 24
92.112.174.0/24 maxlen: 24
92.112.203.0/24 maxlen: 24
92.113.83.0/24 maxlen: 24
92.113.103.0/24 maxlen: 24
92.113.232.0/24 maxlen: 24
92.113.233.0/24 maxlen: 24
92.113.237.0/24 maxlen: 24
92.113.238.0/24 maxlen: 24
92.113.242.0/24 maxlen: 24
92.113.243.0/24 maxlen: 24
178.94.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a4:11:c6:15:0b:b2:52:81:ab:df:f7:64:1c:dc:86:12:58:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 8 08:34:47 2026 GMT
Not After : Nov 7 08:39:47 2027 GMT
Subject: CN=8C940BDA7C5C07611C59D3B2410969F6E55E0CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:e8:44:74:bf:54:47:ed:05:47:39:8d:c0:
13:1f:c3:49:93:15:34:9c:26:a7:0c:5d:47:1f:3a:
ec:74:4a:0a:94:74:1b:f9:6d:f8:9d:e6:81:96:3b:
4f:dc:1d:07:d7:a7:25:b5:40:2f:4b:79:5e:24:d9:
49:68:46:40:ec:a2:54:48:f7:fa:6f:ee:6c:41:d4:
ee:55:b1:01:31:12:e7:36:f3:b4:0d:26:c1:7a:d3:
f1:b9:c6:ee:d5:14:ac:de:3c:6b:d6:18:ea:41:7a:
ad:b6:1c:b3:73:8b:a6:39:12:ca:c2:35:87:9f:13:
b2:df:cd:08:35:1a:3d:e2:78:82:96:83:2a:fa:8b:
38:31:00:08:48:ad:6b:11:97:2b:95:25:79:70:de:
62:9a:3e:a6:5a:06:c1:c7:c3:1a:51:db:bb:e5:a5:
1f:bf:7a:48:0f:02:9b:4d:e3:05:57:d6:a8:0b:c6:
ce:23:27:b4:80:be:eb:79:fd:4a:69:79:64:2a:7d:
08:b7:8f:6a:7b:f5:3f:2a:96:b2:56:06:4a:01:0b:
5f:9f:54:9b:3e:f2:c1:ae:c1:0f:02:e1:8a:a2:5b:
81:84:0a:bc:09:be:dc:95:a7:bb:47:57:19:dd:b5:
ec:ba:8c:54:e9:2e:f6:13:c3:10:01:60:ad:10:98:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:0B:DA:7C:5C:07:61:1C:59:D3:B2:41:09:69:F6:E5:5E:0C:F0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.240.0/22
46.203.116.0/22
46.203.198.0/24
46.203.201.0/24
46.203.206.0/24
46.203.209.0/24
91.124.130.0/24
92.112.134.0/24
92.112.136.0/24
92.112.139.0/24
92.112.145.0/24
92.112.148.0/24
92.112.150.0/24
92.112.168.0/23
92.112.173.0-92.112.174.255
92.112.203.0/24
92.113.83.0/24
92.113.103.0/24
92.113.232.0/23
92.113.237.0-92.113.238.255
92.113.242.0/23
178.94.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:cc:1f:c9:d3:f5:e4:58:8c:91:02:f9:c4:16:12:09:50:d3:
50:15:df:56:78:1a:96:96:28:7b:14:4e:d3:06:48:71:60:5b:
d6:db:96:c3:9b:94:6b:de:c9:b8:38:75:30:8c:cb:2c:80:7e:
49:a7:9b:b4:ea:87:35:86:74:6f:67:2b:95:b2:65:3b:be:b0:
bc:de:c0:2c:ea:84:09:49:d7:46:77:fd:ff:e3:18:cc:00:7a:
94:cd:84:28:86:9d:fc:58:91:24:c7:1d:4c:38:85:0a:9f:0d:
bc:46:29:96:f6:ae:02:65:4a:55:9c:24:6e:1f:c8:24:78:b7:
6f:e0:74:47:fb:91:74:c7:b2:8f:f1:fb:5e:8b:38:ec:d1:20:
d7:3b:c3:a3:ea:29:e3:30:95:82:49:2b:75:89:2f:1d:36:8a:
15:fc:79:d0:db:f3:0d:c7:b9:c8:ce:65:b8:44:37:94:47:11:
4c:a9:30:14:2f:6e:34:96:d5:e4:aa:96:de:e8:44:3d:aa:2e:
7f:9d:76:ab:a6:69:58:67:43:99:b6:67:77:11:41:15:cb:c4:
cd:eb:5c:44:d0:6b:11:32:b4:9d:eb:b0:6d:64:3d:71:bd:7d:
59:e8:26:26:3d:74:0b:18:c0:72:2a:b5:4d:b9:1a:14:4f:27:
1f:4a:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:11:33 2026 by rpki-client