Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: QE3IbTTBXH4neFy7BXxroJf6w9t0ZCKXlm9Kbru5nLI=
Subject key identifier: 46:86:79:6A:16:F5:B3:A6:4C:E0:DE:D9:1B:5B:6F:11:1D:83:DA:14
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 19155B027FACF8F14F96F27646D11250E5F093D5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Tue 05 Aug 2025 00:01:08 +0000
ROA not before: Mon 04 Aug 2025 23:56:08 +0000
ROA not after: Tue 04 Aug 2026 00:01:08 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:15:5b:02:7f:ac:f8:f1:4f:96:f2:76:46:d1:12:50:e5:f0:93:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 4 23:56:08 2025 GMT
Not After : Aug 4 00:01:08 2026 GMT
Subject: CN=4686796A16F5B3A64CE0DED91B5B6F111D83DA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:de:da:99:9c:53:e6:44:23:0c:d4:3a:7c:
ce:39:1c:91:a3:7f:f8:d5:3a:1c:16:fb:41:3b:4e:
7c:fd:e8:97:f5:25:d7:09:3f:d6:d4:bb:02:b7:ac:
b0:bf:93:5f:12:e6:a6:c8:76:36:c1:cf:51:67:4c:
0b:58:d4:1d:6a:24:ff:86:b4:1e:73:d0:0a:ec:52:
f6:bc:3a:48:eb:ca:bd:d2:46:48:8e:b9:2c:35:17:
bd:13:58:ea:4c:4b:c0:a2:91:8b:a3:60:a4:85:71:
fe:1a:ea:d4:d9:3b:04:7b:95:4e:5b:08:0f:b8:50:
25:41:a2:73:4a:4e:2e:8a:8d:59:cc:b7:18:91:fb:
05:20:06:39:7d:87:8f:fe:c2:22:62:a0:27:a2:d0:
18:9f:7c:51:29:0c:be:56:dc:22:cb:ef:ce:b2:f0:
86:e3:79:27:c2:ff:de:b9:4d:12:30:95:2c:4f:fb:
90:be:ac:69:fc:0f:62:50:e6:62:15:d4:fb:af:fd:
c9:de:6f:f7:2f:d6:c4:70:97:45:98:64:c8:34:50:
69:b9:8b:e3:6a:7b:29:cc:f5:a8:ca:a0:fb:90:b0:
bb:94:f2:4c:ee:a7:99:80:18:11:42:90:b6:8c:dd:
6f:08:34:9e:fe:f5:09:fe:7e:64:1c:b1:9e:56:06:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:79:6A:16:F5:B3:A6:4C:E0:DE:D9:1B:5B:6F:11:1D:83:DA:14
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a3:28:62:7c:a2:5e:88:03:1e:53:7e:94:12:d9:b5:c9:0e:
8c:96:c7:fb:c9:b3:3a:e7:c6:d6:40:23:72:cb:01:1a:03:36:
37:0d:36:85:a0:74:e3:f9:66:70:55:2d:e2:99:df:30:fa:32:
65:a6:98:92:d6:dc:12:e2:a9:d2:89:46:20:5b:d8:33:fc:b1:
25:ed:e2:a9:2b:3f:b1:70:7a:52:81:89:94:a2:5e:88:2d:06:
d2:4f:16:c1:62:dc:79:b6:88:86:49:ad:14:27:f9:0d:de:29:
06:0d:68:08:0f:ca:a0:db:d8:5d:ca:e9:a0:ae:66:41:33:03:
c7:60:a8:3d:49:de:56:c4:83:db:9f:1a:4f:ce:71:3e:b7:7b:
2b:7d:57:7d:e7:97:c4:69:f2:5f:9c:ed:e0:0e:fd:38:b3:8d:
af:b0:7a:77:6e:78:b7:df:c8:2b:a7:dc:cd:58:f8:41:e0:1d:
5f:58:31:7a:73:8f:0d:af:24:76:56:ab:ac:42:0c:05:b5:39:
d9:eb:79:52:75:2b:a3:45:46:6e:fd:4f:04:4b:74:54:75:a0:
90:3b:e9:04:5f:cb:2b:6b:78:28:c6:b5:db:7e:91:af:5b:35:
3f:2f:e4:e5:4e:a6:fa:e5:0c:35:76:99:2e:82:a8:61:d3:2c:
b1:47:f0:b4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUGRVbAn+s+PFPlvJ2RtESUOXwk9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA4MDQyMzU2MDhaFw0yNjA4MDQwMDAxMDhaMDMxMTAvBgNV
BAMTKDQ2ODY3OTZBMTZGNUIzQTY0Q0UwREVEOTFCNUI2RjExMUQ4M0RBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlN7amZxT5kQjDNQ6fM45HJGj
f/jVOhwW+0E7Tnz96Jf1JdcJP9bUuwK3rLC/k18S5qbIdjbBz1FnTAtY1B1qJP+G
tB5z0ArsUva8Okjryr3SRkiOuSw1F70TWOpMS8CikYujYKSFcf4a6tTZOwR7lU5b
CA+4UCVBonNKTi6KjVnMtxiR+wUgBjl9h4/+wiJioCei0BiffFEpDL5W3CLL786y
8IbjeSfC/965TRIwlSxP+5C+rGn8D2JQ5mIV1Puv/cneb/cv1sRwl0WYZMg0UGm5
i+NqeynM9ajKoPuQsLuU8kzup5mAGBFCkLaM3W8INJ7+9Qn+fmQcsZ5WBr31AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQURoZ5ahb1s6ZM4N7ZG1tvER2D2hQwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACNCyMD
BACNCyYDBACNC3MwDQYJKoZIhvcNAQELBQADggEBAC+jKGJ8ol6IAx5TfpQS2bXJ
DoyWx/vJszrnxtZAI3LLARoDNjcNNoWgdOP5ZnBVLeKZ3zD6MmWmmJLW3BLiqdKJ
RiBb2DP8sSXt4qkrP7FwelKBiZSiXogtBtJPFsFi3Hm2iIZJrRQn+Q3eKQYNaAgP
yqDb2F3K6aCuZkEzA8dgqD1J3lbEg9ufGk/OcT63eyt9V33nl8Rp8l+c7eAO/Tiz
ja+wendueLffyCun3M1Y+EHgHV9YMXpzjw2vJHZWq6xCDAW1OdnreVJ1K6NFRm79
TwRLdFR1oJA76QRfyytreCjGtdt+ka9bNT8v5OVOpvrlDDV2mS6CqGHTLLFH8LQ=
-----END CERTIFICATE-----
Generated at Thu Aug 21 11:01:33 2025 by rpki-client