Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: U7QSzsCujgq1UKobJ0GwwwtgrjJdNwau0MitEZRTnxM=
Subject key identifier: C0:6E:DE:EF:DF:5E:57:9C:40:CD:49:B4:06:DB:F5:6C:10:4F:AA:76
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3DA5D20E00125EE27D057C7EFF38D0FEC3B2D5A2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
Signing time: Thu 01 Oct 2026 00:02:53 +0000
ROA not before: Wed 30 Sep 2026 23:57:53 +0000
ROA not after: Thu 30 Sep 2027 00:02:53 +0000
asID: 29802
IP address blocks: 2.57.22.0/24 maxlen: 24
2.58.28.0/24 maxlen: 24
5.252.68.0/24 maxlen: 24
5.252.69.0/24 maxlen: 24
5.252.70.0/24 maxlen: 24
5.252.71.0/24 maxlen: 24
5.252.73.0/24 maxlen: 24
5.252.161.0/24 maxlen: 24
45.87.186.0/24 maxlen: 24
141.98.88.0/24 maxlen: 24
141.98.90.0/24 maxlen: 24
179.61.143.0/24 maxlen: 24
179.61.158.0/24 maxlen: 24
179.61.195.0/24 maxlen: 24
181.41.213.0/24 maxlen: 24
181.41.222.0/23 maxlen: 24
181.214.35.0/24 maxlen: 24
181.214.52.0/24 maxlen: 24
181.214.117.0/24 maxlen: 24
181.214.123.0/24 maxlen: 24
181.214.219.0/24 maxlen: 24
181.214.242.0/24 maxlen: 24
181.215.37.0/24 maxlen: 24
181.215.46.0/24 maxlen: 24
181.215.61.0/24 maxlen: 24
181.215.71.0/24 maxlen: 24
181.215.89.0/24 maxlen: 24
181.215.152.0/24 maxlen: 24
181.215.165.0/24 maxlen: 24
181.215.183.0/24 maxlen: 24
181.215.231.0/24 maxlen: 24
185.34.40.0/24 maxlen: 24
185.34.41.0/24 maxlen: 24
185.130.204.0/22 maxlen: 24
185.135.8.0/24 maxlen: 24
185.135.11.0/24 maxlen: 24
185.141.164.0/23 maxlen: 24
185.142.26.0/24 maxlen: 24
185.142.27.0/24 maxlen: 24
185.143.228.0/24 maxlen: 24
185.158.148.0/24 maxlen: 24
185.172.58.0/23 maxlen: 24
185.173.24.0/23 maxlen: 24
185.173.32.0/23 maxlen: 24
185.174.62.0/24 maxlen: 24
191.96.42.0/23 maxlen: 24
191.96.50.0/23 maxlen: 24
191.96.70.0/23 maxlen: 24
191.96.97.0/24 maxlen: 24
191.96.109.0/24 maxlen: 24
191.96.167.0/24 maxlen: 24
191.96.188.0/24 maxlen: 24
191.96.189.0/24 maxlen: 24
191.96.192.0/24 maxlen: 24
191.101.62.0/24 maxlen: 24
191.101.65.0/24 maxlen: 24
191.101.73.0/24 maxlen: 24
191.101.93.0/24 maxlen: 24
191.101.134.0/24 maxlen: 24
191.101.164.0/23 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.253.0/24 maxlen: 24
193.31.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a5:d2:0e:00:12:5e:e2:7d:05:7c:7e:ff:38:d0:fe:c3:b2:d5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 30 23:57:53 2026 GMT
Not After : Sep 30 00:02:53 2027 GMT
Subject: CN=C06EDEEFDF5E579C40CD49B406DBF56C104FAA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:20:b7:64:90:4d:e6:69:38:f5:52:8d:b2:
dc:f8:61:99:fb:46:04:cb:d9:e2:ee:3c:db:c5:35:
d6:e2:4f:99:be:42:03:b1:27:1c:95:ca:c8:d8:6a:
d2:de:ac:42:6e:a2:50:2a:6c:64:dd:3c:ee:bb:19:
f5:36:f8:c0:69:ad:f1:20:39:06:c0:96:1e:0a:0b:
9c:27:85:e3:07:e7:de:1c:26:a8:d6:76:d9:62:cd:
c8:0b:c6:d8:ca:b0:73:6f:74:f8:fc:8b:35:8f:72:
53:6b:fd:e3:c8:43:74:97:3b:97:01:65:f8:ca:34:
44:b0:b5:9d:1c:32:31:ae:d9:90:ab:60:14:91:de:
d5:ca:47:00:2e:36:06:c7:cb:8f:22:cf:cb:e2:0c:
81:06:2d:69:ba:ca:45:94:f1:4b:96:75:e9:9d:7f:
42:bf:2c:82:95:bc:1b:0b:e8:ad:d5:73:cb:e2:22:
8c:5d:e4:de:73:3e:e7:52:cb:3b:e1:1f:ac:6e:15:
87:a7:2e:db:42:58:85:d3:a4:6e:c1:98:f4:04:0f:
78:da:5b:3b:9b:44:0b:be:3a:d0:66:4d:5a:36:ca:
6e:27:f6:a6:e4:11:fb:40:98:eb:a2:0a:e6:e3:09:
56:40:f8:14:2a:de:23:c4:c9:e2:c4:7f:c0:98:51:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:DE:EF:DF:5E:57:9C:40:CD:49:B4:06:DB:F5:6C:10:4F:AA:76
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.22.0/24
2.58.28.0/24
5.252.68.0/22
5.252.73.0/24
5.252.161.0/24
45.87.186.0/24
141.98.88.0/24
141.98.90.0/24
179.61.143.0/24
179.61.158.0/24
179.61.195.0/24
181.41.213.0/24
181.41.222.0/23
181.214.35.0/24
181.214.52.0/24
181.214.117.0/24
181.214.123.0/24
181.214.219.0/24
181.214.242.0/24
181.215.37.0/24
181.215.46.0/24
181.215.61.0/24
181.215.71.0/24
181.215.89.0/24
181.215.152.0/24
181.215.165.0/24
181.215.183.0/24
181.215.231.0/24
185.34.40.0/23
185.130.204.0/22
185.135.8.0/24
185.135.11.0/24
185.141.164.0/23
185.142.26.0/23
185.143.228.0/24
185.158.148.0/24
185.172.58.0/23
185.173.24.0/23
185.173.32.0/23
185.174.62.0/24
191.96.42.0/23
191.96.50.0/23
191.96.70.0/23
191.96.97.0/24
191.96.109.0/24
191.96.167.0/24
191.96.188.0/23
191.96.192.0/24
191.101.62.0/24
191.101.65.0/24
191.101.73.0/24
191.101.93.0/24
191.101.134.0/24
191.101.164.0/23
191.101.205.0/24
191.101.253.0/24
193.31.40.0/24
Signature Algorithm: sha256WithRSAEncryption
10:48:b4:0c:53:b9:ec:48:c4:dd:9a:43:e7:e6:57:56:07:79:
61:14:4f:3e:45:d9:61:5b:7e:51:26:6f:e1:89:ed:eb:79:5b:
3a:b6:c2:54:84:8b:2d:e0:68:d6:08:d5:92:aa:f7:ce:99:a3:
f9:17:aa:87:ea:3e:32:a8:31:94:3b:4a:36:ff:dd:ee:85:77:
7b:86:8c:e9:9e:8d:8b:72:22:39:9b:aa:bd:4e:1a:2b:fa:a2:
c3:61:2e:53:ce:d4:3e:97:bb:cf:52:15:44:c8:91:44:14:97:
68:e1:34:c0:c6:e2:55:57:4d:3e:82:a3:27:80:e2:e4:fa:35:
72:7e:a8:4c:1a:4c:21:9c:8c:40:10:26:e6:05:cf:8b:9d:5a:
01:30:98:a6:f5:0d:da:ca:b3:59:a9:e8:26:2f:8c:02:82:1c:
a6:ea:1d:76:6f:9f:8d:42:26:04:47:12:4d:ae:50:25:38:00:
63:3d:e9:4a:d6:0e:5f:e1:0d:3e:9d:36:f0:d3:51:28:02:da:
29:c3:f4:39:d6:40:97:f5:3a:bc:8c:4a:e2:47:77:3b:43:b4:
c5:78:8a:ef:cf:d5:04:5a:8f:7d:d0:cf:e2:7c:60:2c:9b:6e:
51:c4:4d:fe:1c:59:61:83:15:72:46:6f:3e:c3:2f:aa:7d:9a:
9d:94:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:35:51 2026 by rpki-client