Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: YR0ITK5FMGAdgmBVPYHbcelDMpQ89MAzxuzMFjqi/vA=
Subject key identifier: C9:32:60:7A:28:19:25:85:9A:0E:7F:63:9E:CE:42:8B:BA:6E:F2:EB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6BAAFF586732A6BBD0D72088AA786E9701347CEF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
Signing time: Tue 12 Aug 2025 13:11:55 +0000
ROA not before: Tue 12 Aug 2025 13:06:55 +0000
ROA not after: Tue 11 Aug 2026 13:11:55 +0000
asID: 29802
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
46.203.198.0/24 maxlen: 24
46.203.201.0/24 maxlen: 24
46.203.206.0/24 maxlen: 24
46.203.209.0/24 maxlen: 24
91.124.130.0/24 maxlen: 24
91.124.149.0/24 maxlen: 24
92.112.134.0/24 maxlen: 24
92.112.136.0/24 maxlen: 24
92.112.139.0/24 maxlen: 24
92.112.145.0/24 maxlen: 24
92.112.148.0/24 maxlen: 24
92.112.150.0/24 maxlen: 24
92.112.168.0/24 maxlen: 24
92.112.169.0/24 maxlen: 24
92.112.173.0/24 maxlen: 24
92.112.174.0/24 maxlen: 24
92.112.203.0/24 maxlen: 24
92.113.83.0/24 maxlen: 24
92.113.103.0/24 maxlen: 24
92.113.162.0/24 maxlen: 24
92.113.232.0/24 maxlen: 24
92.113.233.0/24 maxlen: 24
92.113.237.0/24 maxlen: 24
92.113.238.0/24 maxlen: 24
92.113.242.0/24 maxlen: 24
92.113.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:aa:ff:58:67:32:a6:bb:d0:d7:20:88:aa:78:6e:97:01:34:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 12 13:06:55 2025 GMT
Not After : Aug 11 13:11:55 2026 GMT
Subject: CN=C932607A281925859A0E7F639ECE428BBA6EF2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:60:7d:8b:71:fd:dc:ff:92:4c:93:b8:07:
f6:d5:67:c8:39:55:ae:f6:8d:29:e4:89:26:b8:d5:
97:ae:01:d3:2b:4d:fb:ff:78:89:62:48:71:67:99:
a7:81:b7:50:79:13:ae:66:71:e0:50:e2:c6:8b:28:
14:25:80:f7:fd:29:98:f4:bb:b7:52:94:76:08:39:
e1:6c:53:77:41:ae:5e:6d:e3:04:08:67:5a:f8:44:
a8:a4:cd:5a:1c:4c:28:47:3e:7a:8e:6c:ab:94:d1:
03:92:fb:a6:2b:16:b5:1d:ea:dc:d1:40:bd:a7:4c:
74:45:9e:15:02:04:62:a9:51:12:f4:73:9f:af:7c:
1b:5d:ed:94:a8:23:cc:cc:33:0a:1c:5b:ad:f5:88:
33:73:c8:e2:0b:5b:b0:c5:5c:44:8c:7b:b0:01:1f:
6b:1d:01:4d:2f:90:eb:72:95:f1:dc:80:19:e3:08:
b7:6e:31:2d:7f:ec:3d:bb:a0:0e:33:5b:ac:4e:ed:
9a:c5:a4:8f:97:86:b8:88:a9:3d:71:e0:1a:1b:1c:
b5:38:96:44:4a:2f:71:3e:f4:2c:de:6d:21:32:ce:
74:2d:09:a4:1f:34:53:f5:34:17:56:81:64:9f:b1:
88:f6:22:8c:50:f7:63:e9:c2:2a:b8:7e:5b:60:74:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:60:7A:28:19:25:85:9A:0E:7F:63:9E:CE:42:8B:BA:6E:F2:EB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
46.203.198.0/24
46.203.201.0/24
46.203.206.0/24
46.203.209.0/24
91.124.130.0/24
91.124.149.0/24
92.112.134.0/24
92.112.136.0/24
92.112.139.0/24
92.112.145.0/24
92.112.148.0/24
92.112.150.0/24
92.112.168.0/23
92.112.173.0-92.112.174.255
92.112.203.0/24
92.113.83.0/24
92.113.103.0/24
92.113.162.0/24
92.113.232.0/23
92.113.237.0-92.113.238.255
92.113.242.0/23
Signature Algorithm: sha256WithRSAEncryption
12:81:58:1b:2d:3d:6f:04:6c:82:e8:54:07:17:20:f3:07:4d:
02:35:a3:c1:31:27:23:18:b6:5e:ff:8e:5e:ff:ad:5f:91:1a:
97:dd:a0:39:f3:73:8e:65:98:f3:07:19:d5:9d:f6:c2:c2:43:
cd:f0:e0:2e:e3:c1:80:49:42:5c:5c:16:77:ce:1c:bc:1f:47:
c2:31:11:fa:49:48:25:73:52:83:48:3e:d6:56:cd:54:df:78:
e8:52:f1:a1:a5:aa:db:91:a4:c2:0b:13:bd:d2:70:d1:69:c3:
79:36:e9:1c:e1:12:b4:c1:b3:0a:87:82:15:b3:11:fd:fc:13:
d3:c8:31:42:99:45:44:ea:3b:f3:59:78:8d:c3:38:d3:09:fe:
53:06:6e:eb:c5:bb:fc:f7:d7:52:8e:63:42:08:8d:6e:73:17:
3d:d2:9d:43:14:34:5c:cc:40:1e:06:dd:90:41:6f:f7:b4:e6:
d4:2e:31:f6:12:d8:2e:4a:41:a3:6c:37:e1:f0:75:7e:d3:8b:
7d:2c:3a:58:80:0f:d8:be:2a:f1:86:e5:a1:e2:95:ff:07:fa:
5c:83:5c:b4:a3:0a:a2:c7:7b:24:b7:e4:83:3f:70:b9:ad:3c:
c8:88:d8:84:05:b4:9d:c3:c8:84:39:0d:3b:5d:88:06:61:ff:
dd:71:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:39:20 2025 by rpki-client