Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: qs8Wn4nDWJJwmtD5B8SZtNO5FaxNvjGWtpNGClqSwDY=
Subject key identifier: CB:86:78:D2:F2:FE:BB:D5:D3:97:C4:19:4C:DD:85:B8:80:62:0B:E8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 212269DD62E4A111E020A3A14D2CF00474B65BD8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
Signing time: Wed 14 Oct 2026 09:14:04 +0000
ROA not before: Wed 14 Oct 2026 09:09:04 +0000
ROA not after: Wed 13 Oct 2027 09:14:04 +0000
asID: 29802
IP address blocks: 82.21.67.0/24 maxlen: 24
82.21.74.0/24 maxlen: 24
82.21.93.0/24 maxlen: 24
82.21.103.0/24 maxlen: 24
82.21.110.0/24 maxlen: 24
82.21.113.0/24 maxlen: 24
82.21.119.0/24 maxlen: 24
82.21.122.0/24 maxlen: 24
82.21.124.0/24 maxlen: 24
82.21.132.0/24 maxlen: 24
82.21.139.0/24 maxlen: 24
82.21.140.0/24 maxlen: 24
82.21.143.0/24 maxlen: 24
82.21.148.0/24 maxlen: 24
82.21.152.0/24 maxlen: 24
82.21.155.0/24 maxlen: 24
82.21.157.0/24 maxlen: 24
82.21.163.0/24 maxlen: 24
82.22.61.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.116.0/22 maxlen: 24
82.24.128.0/22 maxlen: 24
82.24.132.0/22 maxlen: 24
82.24.136.0/22 maxlen: 24
82.24.140.0/22 maxlen: 24
82.24.148.0/22 maxlen: 24
82.24.152.0/22 maxlen: 24
82.24.156.0/22 maxlen: 24
82.24.160.0/22 maxlen: 24
82.24.164.0/22 maxlen: 24
82.24.168.0/22 maxlen: 24
82.24.176.0/22 maxlen: 24
82.24.194.0/24 maxlen: 24
82.24.196.0/22 maxlen: 24
82.25.146.0/23 maxlen: 24
82.25.148.0/23 maxlen: 24
82.25.150.0/23 maxlen: 24
82.25.152.0/23 maxlen: 24
82.25.154.0/23 maxlen: 24
82.25.156.0/23 maxlen: 24
82.25.158.0/23 maxlen: 24
82.25.162.0/23 maxlen: 24
82.25.164.0/23 maxlen: 24
82.25.166.0/23 maxlen: 24
82.25.168.0/23 maxlen: 24
82.25.170.0/23 maxlen: 24
82.25.172.0/23 maxlen: 24
82.25.176.0/23 maxlen: 24
82.25.178.0/23 maxlen: 24
82.25.182.0/23 maxlen: 24
82.25.188.0/23 maxlen: 24
82.26.116.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.38.174.0/24 maxlen: 24
82.39.223.0/24 maxlen: 24
82.47.240.0/23 maxlen: 24
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:22:69:dd:62:e4:a1:11:e0:20:a3:a1:4d:2c:f0:04:74:b6:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 09:09:04 2026 GMT
Not After : Oct 13 09:14:04 2027 GMT
Subject: CN=CB8678D2F2FEBBD5D397C4194CDD85B880620BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:98:6f:1f:c5:6f:c4:4e:25:c1:44:f7:f5:f6:
e5:95:5e:d3:ba:d3:1d:f2:39:9b:01:e2:55:1e:24:
a9:08:02:90:4c:23:0c:08:9f:d5:06:a5:13:85:08:
fc:c6:5c:7e:17:ef:7f:78:6e:09:46:b5:ab:d8:d3:
fd:62:35:49:21:a5:2a:20:ce:10:fa:8a:ca:fa:f3:
c7:10:ba:60:29:0a:86:25:f6:43:55:78:44:b3:ce:
d6:d9:b8:63:a5:4d:d5:83:26:2c:e5:08:22:e9:fb:
27:3e:5a:7a:06:c9:05:fb:82:a3:8a:b9:e4:ca:b8:
07:25:7b:73:fa:69:18:2a:c8:3f:9c:c0:64:87:11:
70:a6:2c:09:2c:1c:33:4d:90:85:65:12:8a:70:2f:
b4:54:48:d3:ac:25:95:30:37:36:88:7e:d3:cf:b7:
97:ac:cc:88:ab:96:2f:82:9c:e7:6b:3b:22:df:30:
1a:e3:df:5b:e4:7a:42:45:b5:88:27:af:d4:d1:b6:
ad:54:39:f0:2c:92:d1:f9:d3:fb:ae:36:4b:60:83:
07:4d:d0:13:db:3b:c8:78:3b:ce:7a:62:84:97:e8:
fb:61:6a:32:c2:07:e3:7e:1f:ac:b3:4d:5d:93:fb:
d1:99:39:7c:6c:99:06:dd:54:8f:2d:49:47:9d:50:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:86:78:D2:F2:FE:BB:D5:D3:97:C4:19:4C:DD:85:B8:80:62:0B:E8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.67.0/24
82.21.74.0/24
82.21.93.0/24
82.21.103.0/24
82.21.110.0/24
82.21.113.0/24
82.21.119.0/24
82.21.122.0/24
82.21.124.0/24
82.21.132.0/24
82.21.139.0-82.21.140.255
82.21.143.0/24
82.21.148.0/24
82.21.152.0/24
82.21.155.0/24
82.21.157.0/24
82.21.163.0/24
82.22.61.0/24
82.24.92.0-82.24.99.255
82.24.116.0/22
82.24.128.0/20
82.24.148.0-82.24.171.255
82.24.176.0/22
82.24.194.0/24
82.24.196.0/22
82.25.146.0-82.25.159.255
82.25.162.0-82.25.173.255
82.25.176.0/22
82.25.182.0/23
82.25.188.0/23
82.26.116.0/24
82.26.176.0/20
82.38.174.0/24
82.39.223.0/24
82.47.240.0/23
IPv6:
2a13:9500:6::-2a13:9500:10:ffff:ffff:ffff:ffff:ffff
2a13:9500:1c::/46
Signature Algorithm: sha256WithRSAEncryption
3e:f0:37:d8:eb:38:2d:f3:d7:4b:9c:3a:01:d9:38:30:ba:10:
f4:ca:c3:3d:93:5e:c0:33:0a:da:01:48:e9:af:ec:ae:99:63:
dd:43:84:32:13:e1:19:69:6d:e0:35:9c:2d:6a:d9:b2:47:a2:
34:91:81:2d:91:7c:20:4f:c0:86:89:90:ff:38:60:45:39:61:
2e:eb:de:5e:53:a2:7e:c4:de:bd:dd:ee:bc:62:d5:0e:10:ca:
9e:34:6f:82:a6:61:70:2e:d5:d2:53:f3:9b:5a:bd:2e:3f:43:
d0:aa:0e:45:27:11:02:7b:5d:a5:05:58:70:78:f2:74:20:94:
ab:af:5b:0a:94:c1:83:3c:d8:85:6f:1f:04:db:d0:e0:14:ee:
68:34:99:15:8a:e7:1e:d0:77:fc:81:29:b3:e3:f7:90:18:4f:
e4:71:c1:5c:21:76:65:f3:85:e7:63:a5:84:82:f4:8c:a5:f8:
7e:d7:38:41:57:c5:40:91:4d:8f:6a:58:5b:c4:3d:f8:73:8c:
c7:b5:7f:29:c2:06:e6:1b:c5:1a:ad:2d:11:8d:e8:f9:74:1a:
65:4e:e3:4c:8a:57:1e:87:74:ea:ef:8d:8e:bf:95:9f:6e:1f:
a2:d2:3a:fe:3c:1a:b5:4e:c3:32:65:07:a0:0e:30:8e:00:0f:
dc:e1:a5:ef
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUISJp3WLkoRHgIKOhTSzwBHS2W9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTQwOTA5MDRaFw0yNzEwMTMwOTE0MDRaMDMxMTAvBgNV
BAMTKENCODY3OEQyRjJGRUJCRDVEMzk3QzQxOTRDREQ4NUI4ODA2MjBCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7mG8fxW/ETiXBRPf19uWVXtO6
0x3yOZsB4lUeJKkIApBMIwwIn9UGpROFCPzGXH4X7394bglGtavY0/1iNUkhpSog
zhD6isr688cQumApCoYl9kNVeESzztbZuGOlTdWDJizlCCLp+yc+WnoGyQX7gqOK
ueTKuAcle3P6aRgqyD+cwGSHEXCmLAksHDNNkIVlEopwL7RUSNOsJZUwNzaIftPP
t5eszIirli+CnOdrOyLfMBrj31vkekJFtYgnr9TRtq1UOfAsktH50/uuNktggwdN
0BPbO8h4O856YoSX6PthajLCB+N+H6yzTV2T+9GZOXxsmQbdVI8tSUedUASJAgMB
AAGjggMrMIIDJzAdBgNVHQ4EFgQUy4Z40vL+u9XTl8QZTN2FuIBiC+gwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggE/BggrBgEFBQcBBwEB/wSCAS4wggEqMIIBAQQCAAEw
gfoDBABSFUMDBABSFUoDBABSFV0DBABSFWcDBABSFW4DBABSFXEDBABSFXcDBABS
FXoDBABSFXwDBABSFYQwDAMEAFIViwMEAFIVjAMEAFIVjwMEAFIVlAMEAFIVmAME
AFIVmwMEAFIVnQMEAFIVowMEAFIWPTAMAwQCUhhcAwQCUhhgAwQCUhh0AwQEUhiA
MAwDBAJSGJQDBAJSGKgDBAJSGLADBABSGMIDBAJSGMQwDAMEAVIZkgMEBVIZgDAM
AwQBUhmiAwQBUhmsAwQCUhmwAwQBUhm2AwQBUhm8AwQAUhp0AwQEUhqwAwQAUiau
AwQAUiffAwQBUi/wMCMEAgACMB0wEgMHASoTlQAABgMHACoTlQAAEAMHAioTlQAA
HDANBgkqhkiG9w0BAQsFAAOCAQEAPvA32Os4LfPXS5w6Adk4MLoQ9MrDPZNewDMK
2gFI6a/srplj3UOEMhPhGWlt4DWcLWrZskeiNJGBLZF8IE/AhomQ/zhgRTlhLuve
XlOifsTevd3uvGLVDhDKnjRvgqZhcC7V0lPzm1q9Lj9D0KoORScRAntdpQVYcHjy
dCCUq69bCpTBgzzYhW8fBNvQ4BTuaDSZFYrnHtB3/IEps+P3kBhP5HHBXCF2ZfOF
52OlhIL0jKX4ftc4QVfFQJFNj2pYW8Q9+HOMx7V/KcIG5hvFGq0tEY3o+XQaZU7j
TIpXHod06u+Njr+Vn24fotI6/jwatU7DMmUHoA4wjgAP3OGl7w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:20 2026 by rpki-client