Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: N20gdQ5K/gALyB6shK2604SMrfNNnkMn06115eya0+w=
Subject key identifier: E3:A0:BC:22:CB:91:FB:49:45:7C:E9:A7:FB:1B:12:FB:94:54:79:C0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E8D589878A8BADBBA51B74D5832598B19A042FA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Thu 15 Oct 2026 06:58:13 +0000
ROA not before: Thu 15 Oct 2026 06:53:13 +0000
ROA not after: Thu 14 Oct 2027 06:58:13 +0000
asID: 29802
IP address blocks: 96.62.140.0/24 maxlen: 24
96.62.216.0/24 maxlen: 24
140.150.227.0/24 maxlen: 24
140.233.174.0/24 maxlen: 24
143.14.110.0/24 maxlen: 24
143.14.157.0/24 maxlen: 24
143.14.210.0/24 maxlen: 24
143.14.213.0/24 maxlen: 24
145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
146.103.52.0/24 maxlen: 24
147.79.61.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.190.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.198.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.175.0/24 maxlen: 24
150.241.233.0/24 maxlen: 24
155.117.22.0/24 maxlen: 24
155.117.121.0/24 maxlen: 24
162.141.52.0/24 maxlen: 24
162.141.120.0/24 maxlen: 24
162.141.133.0/24 maxlen: 24
162.141.141.0/24 maxlen: 24
167.148.118.0/24 maxlen: 24
167.148.122.0/24 maxlen: 24
167.148.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8d:58:98:78:a8:ba:db:ba:51:b7:4d:58:32:59:8b:19:a0:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 15 06:53:13 2026 GMT
Not After : Oct 14 06:58:13 2027 GMT
Subject: CN=E3A0BC22CB91FB49457CE9A7FB1B12FB945479C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:87:09:30:53:24:4c:7d:ca:30:60:f5:2e:
09:94:d3:4e:47:f5:d7:10:5d:7c:31:da:71:f5:e5:
4c:2e:62:3d:54:cc:c5:19:06:e0:5f:47:97:72:0f:
79:f1:b4:ca:4b:12:01:af:1f:9d:25:ed:ad:45:f5:
29:c3:47:2c:8a:44:ba:97:86:b7:ef:83:c8:bd:bc:
80:c0:aa:d0:ab:7d:5c:ef:26:34:4e:e7:75:dc:4c:
21:32:e3:a2:ad:d6:98:ca:9d:f7:b1:76:c7:c0:77:
a1:48:ce:03:d7:0f:1c:bc:37:b7:6c:4b:81:5a:c5:
a3:a9:df:e8:ba:20:bc:b6:49:0e:9f:43:97:c6:28:
0d:04:5b:fa:e6:6d:f1:9e:49:e7:ec:85:c8:73:77:
c6:b0:e5:80:17:2d:42:1f:10:b0:aa:f0:b7:b3:f0:
91:2e:b7:9f:3a:3f:8b:b0:ea:5b:9e:1e:0e:c5:bd:
c9:bc:29:7f:8e:4b:5f:00:38:b7:b2:0e:da:e3:0a:
79:ba:86:e3:01:58:67:4d:fe:0e:4c:a0:9a:88:7d:
2a:f2:76:0e:b9:60:86:10:a0:4e:df:d6:0c:a9:3e:
40:22:cc:3d:54:b0:17:0b:8e:eb:48:12:c6:71:7a:
3f:0b:2a:dd:2c:b8:54:dc:f0:ab:d1:85:2b:5d:45:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:BC:22:CB:91:FB:49:45:7C:E9:A7:FB:1B:12:FB:94:54:79:C0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.140.0/24
96.62.216.0/24
140.150.227.0/24
140.233.174.0/24
143.14.110.0/24
143.14.157.0/24
143.14.210.0/24
143.14.213.0/24
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
146.103.52.0/24
147.79.61.0/24
148.135.178.0/23
148.135.190.0/23
148.135.198.0/24
148.135.254.0/24
150.241.175.0/24
150.241.233.0/24
155.117.22.0/24
155.117.121.0/24
162.141.52.0/24
162.141.120.0/24
162.141.133.0/24
162.141.141.0/24
167.148.118.0/24
167.148.122.0/24
167.148.178.0/24
Signature Algorithm: sha256WithRSAEncryption
76:42:ba:ab:55:1f:eb:ee:5c:d6:99:bb:74:09:73:4c:d3:8c:
91:4c:15:4e:66:70:69:69:95:72:14:52:a7:ff:4e:4f:f6:ec:
75:c9:77:1c:00:3f:34:43:2d:a0:1e:49:30:e0:df:ab:6d:cf:
e7:d3:99:71:cd:01:60:d6:1f:3a:7e:b7:4d:58:53:8f:4d:b3:
64:07:55:80:e3:dc:f6:ba:b7:c6:77:86:e4:8e:dd:9f:5b:c0:
3a:d5:fa:1e:a0:22:a8:ff:37:bf:78:33:59:12:39:24:eb:6e:
cd:56:d1:fb:eb:c3:83:73:00:aa:08:96:1a:3b:fb:c8:95:9d:
95:77:73:0e:ae:09:06:57:13:ae:2a:ca:f6:e3:f7:0b:ff:ac:
55:c4:b4:3c:29:75:85:69:ca:ca:92:e4:50:59:37:1f:c8:ce:
d6:f4:e5:10:f9:57:bd:5f:4a:8d:d5:49:31:9b:d2:78:4d:19:
f1:2d:d9:af:6b:a2:3a:99:4e:17:44:c3:d7:aa:68:cf:3a:ed:
c5:a9:51:9e:e6:16:f1:0f:03:56:f2:e2:f7:c7:f5:6e:22:cb:
0c:8e:de:90:4d:f6:e7:72:4e:b5:7a:f4:f0:fe:de:46:86:3c:
78:32:5e:14:8d:35:ea:f3:11:5d:24:26:08:e1:0b:bf:4d:be:
1a:77:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:07:43 2026 by rpki-client