Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
File: AS29262.roa (raw, json)
Hash identifier: 6F8mIn5t4Uin7EEUh8/0QT15LDhkMnOeVOsi0WNGvTs=
Subject key identifier: C6:6B:CD:70:87:A8:E2:00:A2:C8:47:D4:FC:8A:A4:96:E0:6F:9B:AE
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 799C5A2DA8432B5AC03EBBAAEA3111F2D458FEB0
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
Signing time: Wed 19 Mar 2025 14:45:33 +0000
ROA not before: Wed 19 Mar 2025 14:40:33 +0000
ROA not after: Wed 18 Mar 2026 14:45:33 +0000
asID: 29262
IP address blocks: 77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:5a:2d:a8:43:2b:5a:c0:3e:bb:aa:ea:31:11:f2:d4:58:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Mar 19 14:40:33 2025 GMT
Not After : Mar 18 14:45:33 2026 GMT
Subject: CN=C66BCD7087A8E200A2C847D4FC8AA496E06F9BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:67:e3:52:a9:3a:69:3f:6c:5e:49:fe:54:
96:34:11:90:87:8a:a3:8e:59:c6:a1:1e:1f:f2:12:
87:e7:78:74:91:a3:40:a8:7b:63:76:2d:c3:71:bf:
f8:d3:4e:e6:0e:7a:c8:52:8f:6f:cb:cb:bc:e6:88:
aa:54:11:4b:d0:52:88:51:2c:3c:0b:4e:19:ab:40:
8c:82:05:c3:c1:9a:39:9d:b2:63:1b:36:89:d9:71:
98:70:58:f6:cc:16:12:c0:83:bb:f8:69:5e:19:67:
7a:a6:55:8e:9b:96:10:9f:33:07:94:f7:60:1d:ee:
93:9f:df:80:8d:d0:ac:64:74:bc:0d:d7:3f:de:70:
63:17:c9:10:bd:d0:c9:a1:72:cd:7f:63:24:9a:27:
fd:21:b8:04:26:3a:cd:10:36:1b:ed:aa:c0:3f:8a:
c8:1a:8c:48:3d:73:20:8b:54:ea:02:4c:a2:08:9d:
cb:f3:26:0e:15:35:fc:d7:ed:31:38:64:4f:73:8f:
fe:11:2b:bd:72:ec:9b:cc:20:0e:ee:26:6a:2c:49:
64:fc:8b:93:c2:92:2c:93:d9:45:0e:4b:30:d6:bc:
3c:cc:1f:04:66:19:60:e9:af:9c:58:5d:02:ff:05:
e9:58:f6:29:c3:bf:4b:e0:82:4f:dd:eb:b6:47:5f:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:CD:70:87:A8:E2:00:A2:C8:47:D4:FC:8A:A4:96:E0:6F:9B:AE
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
185.254.55.0/24
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
61:19:45:dc:a4:d1:d4:6d:fc:77:bb:80:6d:d2:18:1e:0a:c6:
b7:b3:a2:28:a1:a3:36:b0:28:d5:af:44:f6:49:83:0d:9c:49:
59:9b:a3:9b:4b:7a:49:ec:37:5e:9b:cc:03:25:51:33:49:10:
31:51:88:aa:98:67:44:8e:0d:a7:bb:88:e9:2c:52:5b:ce:a5:
0c:d9:3e:24:92:c7:86:12:5e:42:65:fa:c8:e2:d2:75:a2:a0:
ba:e7:d1:e4:39:8b:fb:ee:7e:4e:1e:9e:c0:96:b7:c6:a4:ca:
5d:00:2d:61:e5:4d:52:9a:4c:c2:d6:6b:5d:1a:09:51:af:fd:
41:53:8f:32:3a:2b:be:7d:c2:3b:91:e1:b1:86:cd:6e:54:ef:
62:39:e0:79:79:91:69:8f:12:a0:cc:c4:74:c6:1a:ad:05:fb:
46:c7:05:35:78:6b:20:a5:07:7b:ff:39:69:bf:37:d1:86:18:
09:16:58:5f:81:fe:83:fd:05:2c:2a:18:6c:4d:b9:a5:da:0e:
9f:69:d3:db:41:85:a0:98:e4:40:b0:c2:66:f0:27:b9:5c:ae:
38:a2:d6:04:5b:9e:5d:95:17:e3:e8:1a:de:3a:f4:6a:0b:b5:
86:d0:90:43:4a:2e:5a:cf:e5:b9:00:79:86:54:43:3b:e2:6b:
76:b1:67:a8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUeZxaLahDK1rAPruq6jER8tRY/rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAzMTkxNDQwMzNaFw0yNjAzMTgxNDQ1MzNaMDMxMTAvBgNV
BAMTKEM2NkJDRDcwODdBOEUyMDBBMkM4NDdENEZDOEFBNDk2RTA2RjlCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rGfjUqk6aT9sXkn+VJY0EZCH
iqOOWcahHh/yEofneHSRo0Coe2N2LcNxv/jTTuYOeshSj2/Ly7zmiKpUEUvQUohR
LDwLThmrQIyCBcPBmjmdsmMbNonZcZhwWPbMFhLAg7v4aV4ZZ3qmVY6blhCfMweU
92Ad7pOf34CN0KxkdLwN1z/ecGMXyRC90Mmhcs1/YySaJ/0huAQmOs0QNhvtqsA/
isgajEg9cyCLVOoCTKIIncvzJg4VNfzX7TE4ZE9zj/4RK71y7JvMIA7uJmosSWT8
i5PCkiyT2UUOSzDWvDzMHwRmGWDpr5xYXQL/BelY9inDv0vggk/d67ZHX/85AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUxmvNcIeo4gCiyEfU/IqkluBvm64wHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjkyNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJN8UgD
BAC5/jcDBALCqVwwDQYJKoZIhvcNAQELBQADggEBAGEZRdyk0dRt/He7gG3SGB4K
xrezoiihozawKNWvRPZJgw2cSVmbo5tLeknsN16bzAMlUTNJEDFRiKqYZ0SODae7
iOksUlvOpQzZPiSSx4YSXkJl+sji0nWioLrn0eQ5i/vufk4ensCWt8akyl0ALWHl
TVKaTMLWa10aCVGv/UFTjzI6K759wjuR4bGGzW5U72I54Hl5kWmPEqDMxHTGGq0F
+0bHBTV4ayClB3v/OWm/N9GGGAkWWF+B/oP9BSwqGGxNuaXaDp9p09tBhaCY5ECw
wmbwJ7lcrjii1gRbnl2VF+PoGt469GoLtYbQkENKLlrP5bkAeYZUQzvia3axZ6g=
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:37:15 2025 by rpki-client