Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: tjwHJUBR0QZItUr7p4408CKE25+aQkobL0z7SLOUTRA=
Subject key identifier: A6:A0:38:ED:2C:46:37:61:35:85:75:37:B5:B5:29:DA:3A:6C:69:28
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5D2B7C85E8B81057B24A75C5E443105585358972
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
Signing time: Mon 24 Aug 2026 00:00:48 +0000
ROA not before: Sun 23 Aug 2026 23:55:48 +0000
ROA not after: Mon 23 Aug 2027 00:00:48 +0000
asID: 29802
IP address blocks: 2.57.22.0/24 maxlen: 24
2.58.28.0/24 maxlen: 24
5.252.68.0/24 maxlen: 24
5.252.69.0/24 maxlen: 24
5.252.70.0/24 maxlen: 24
5.252.71.0/24 maxlen: 24
5.252.73.0/24 maxlen: 24
5.252.161.0/24 maxlen: 24
45.87.186.0/24 maxlen: 24
141.98.88.0/24 maxlen: 24
141.98.90.0/24 maxlen: 24
179.61.143.0/24 maxlen: 24
179.61.158.0/24 maxlen: 24
179.61.195.0/24 maxlen: 24
181.41.213.0/24 maxlen: 24
181.41.222.0/23 maxlen: 24
181.214.35.0/24 maxlen: 24
181.214.52.0/24 maxlen: 24
181.214.117.0/24 maxlen: 24
181.214.123.0/24 maxlen: 24
181.214.219.0/24 maxlen: 24
181.214.242.0/24 maxlen: 24
181.215.9.0/24 maxlen: 24
181.215.37.0/24 maxlen: 24
181.215.46.0/24 maxlen: 24
181.215.61.0/24 maxlen: 24
181.215.71.0/24 maxlen: 24
181.215.89.0/24 maxlen: 24
181.215.152.0/24 maxlen: 24
181.215.165.0/24 maxlen: 24
181.215.183.0/24 maxlen: 24
181.215.231.0/24 maxlen: 24
185.34.40.0/24 maxlen: 24
185.34.41.0/24 maxlen: 24
185.130.204.0/22 maxlen: 24
185.135.8.0/24 maxlen: 24
185.135.11.0/24 maxlen: 24
185.141.164.0/23 maxlen: 24
185.142.26.0/24 maxlen: 24
185.142.27.0/24 maxlen: 24
185.143.228.0/24 maxlen: 24
185.158.148.0/24 maxlen: 24
185.172.58.0/23 maxlen: 24
185.173.24.0/23 maxlen: 24
185.173.32.0/23 maxlen: 24
185.174.62.0/24 maxlen: 24
191.96.42.0/23 maxlen: 24
191.96.50.0/23 maxlen: 24
191.96.70.0/23 maxlen: 24
191.96.97.0/24 maxlen: 24
191.96.109.0/24 maxlen: 24
191.96.167.0/24 maxlen: 24
191.96.188.0/24 maxlen: 24
191.96.189.0/24 maxlen: 24
191.96.192.0/24 maxlen: 24
191.101.62.0/24 maxlen: 24
191.101.65.0/24 maxlen: 24
191.101.73.0/24 maxlen: 24
191.101.93.0/24 maxlen: 24
191.101.134.0/24 maxlen: 24
191.101.164.0/23 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.253.0/24 maxlen: 24
193.31.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2b:7c:85:e8:b8:10:57:b2:4a:75:c5:e4:43:10:55:85:35:89:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 23 23:55:48 2026 GMT
Not After : Aug 23 00:00:48 2027 GMT
Subject: CN=A6A038ED2C46376135857537B5B529DA3A6C6928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:5c:95:07:bf:43:e9:65:33:24:18:1b:b3:
2e:e1:04:75:67:21:4c:33:0c:30:99:3f:d9:29:ea:
27:df:5f:55:e1:4b:9f:92:f5:e3:fa:b2:02:00:f7:
54:f6:3c:f3:ca:7b:9b:fe:aa:2a:b5:44:c4:70:b2:
2b:05:f6:53:b0:2f:71:2b:94:0a:77:d1:59:8c:b6:
aa:fb:c3:ed:13:a6:cb:25:36:81:c2:90:58:fb:95:
ec:70:dc:c1:48:51:c3:4f:78:be:e0:1d:84:f3:b6:
2b:09:75:a7:6b:c5:aa:45:b0:a6:dd:8c:72:5e:af:
66:43:5e:c5:4d:3f:fe:b1:d6:2c:fb:80:86:23:3b:
64:53:03:f6:2b:41:f4:cf:2f:1a:9c:67:04:88:ad:
2f:14:1b:a9:a5:73:0c:3a:a0:8a:2b:61:70:d5:83:
cb:09:0b:a5:fa:05:67:4d:2a:62:1a:1d:da:f4:6a:
a1:60:17:09:8f:5e:c4:28:25:21:56:51:42:07:40:
53:9b:a1:ac:c7:9a:f5:1d:f2:6a:db:75:2a:a1:00:
3a:6d:25:34:5b:f3:d0:c9:e8:e1:04:36:48:c8:e0:
f3:ea:1d:a9:42:93:09:15:ec:16:64:90:22:37:6a:
8b:d5:88:8e:9b:d7:d2:69:7a:05:07:ec:98:0b:e0:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:38:ED:2C:46:37:61:35:85:75:37:B5:B5:29:DA:3A:6C:69:28
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.22.0/24
2.58.28.0/24
5.252.68.0/22
5.252.73.0/24
5.252.161.0/24
45.87.186.0/24
141.98.88.0/24
141.98.90.0/24
179.61.143.0/24
179.61.158.0/24
179.61.195.0/24
181.41.213.0/24
181.41.222.0/23
181.214.35.0/24
181.214.52.0/24
181.214.117.0/24
181.214.123.0/24
181.214.219.0/24
181.214.242.0/24
181.215.9.0/24
181.215.37.0/24
181.215.46.0/24
181.215.61.0/24
181.215.71.0/24
181.215.89.0/24
181.215.152.0/24
181.215.165.0/24
181.215.183.0/24
181.215.231.0/24
185.34.40.0/23
185.130.204.0/22
185.135.8.0/24
185.135.11.0/24
185.141.164.0/23
185.142.26.0/23
185.143.228.0/24
185.158.148.0/24
185.172.58.0/23
185.173.24.0/23
185.173.32.0/23
185.174.62.0/24
191.96.42.0/23
191.96.50.0/23
191.96.70.0/23
191.96.97.0/24
191.96.109.0/24
191.96.167.0/24
191.96.188.0/23
191.96.192.0/24
191.101.62.0/24
191.101.65.0/24
191.101.73.0/24
191.101.93.0/24
191.101.134.0/24
191.101.164.0/23
191.101.205.0/24
191.101.253.0/24
193.31.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e3:07:ce:37:6b:fe:bc:90:d6:d9:f4:c9:3b:e7:c6:52:d7:
25:d4:8d:36:4a:79:52:53:43:96:bd:b9:f3:e7:45:1c:76:0e:
0a:eb:c6:0d:9d:4c:ad:33:c6:48:c7:88:0b:b1:27:b5:5c:fa:
81:a1:45:51:a4:0b:2d:2e:7a:02:bb:d8:47:da:d1:a7:7c:a0:
00:c1:18:db:6c:73:e2:6a:d8:6a:36:3c:85:47:dc:e3:b4:01:
65:13:04:59:9d:75:7a:59:ba:9c:af:c3:38:2d:18:c4:15:90:
b9:7b:1b:d5:57:b6:7a:7f:71:92:16:f9:1e:53:40:59:aa:d9:
a0:8d:92:fb:f2:71:5e:63:c9:d3:e6:bc:7d:60:57:8a:68:fa:
fc:f2:bc:0f:55:05:e1:82:f8:1e:8b:ac:b9:74:54:00:00:48:
d6:50:ca:a5:09:2f:95:c2:ca:c0:6f:0c:dc:6b:16:1b:a3:7e:
3a:ac:37:72:d2:f0:15:87:0e:c3:e2:c7:58:fc:30:c5:d7:e4:
39:8c:9d:60:81:0a:4f:e0:f4:c8:a1:e8:df:3a:71:81:ef:81:
42:e2:ff:f9:f2:b3:52:18:0e:41:2b:53:9e:75:39:4c:60:8a:
7e:92:34:27:69:26:4b:14:ff:87:12:cd:9d:18:5f:79:2d:04:
4a:8d:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:33:27 2026 by rpki-client