Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: 8iKTFVGjMvcwYJBx9jKl8zpsDmrClUH9hQX1yjboJ9g=
Subject key identifier: C0:74:1D:9F:2B:E8:72:BD:17:AE:58:02:99:7E:EF:97:52:F5:20:47
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6FD8027476C203D5D8A5A70435E07FD7EC54FCBA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Tue 03 Mar 2026 14:52:53 +0000
ROA not before: Tue 03 Mar 2026 14:47:53 +0000
ROA not after: Tue 02 Mar 2027 14:52:53 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.82.0/23 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.161.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d8:02:74:76:c2:03:d5:d8:a5:a7:04:35:e0:7f:d7:ec:54:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 3 14:47:53 2026 GMT
Not After : Mar 2 14:52:53 2027 GMT
Subject: CN=C0741D9F2BE872BD17AE5802997EEF9752F52047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:99:d4:fe:12:28:c3:d7:1d:de:5f:4d:b9:
88:59:1e:bd:ad:22:c5:1e:11:da:e6:30:fd:44:03:
33:f5:74:91:36:ec:42:bc:1e:0d:37:32:bb:9e:4e:
c7:37:fb:5e:47:c0:fc:8e:d4:31:7d:34:9f:26:2c:
96:8d:96:a4:22:86:65:c3:7a:d9:fa:05:c2:a9:11:
7e:6e:31:40:38:6b:c9:d4:91:33:76:0e:9d:1b:fc:
2d:93:47:f0:b7:b7:a6:7e:89:fc:04:d4:30:5e:7f:
4d:cb:e7:8d:fd:4a:41:75:83:1b:21:75:e6:d5:61:
eb:94:4b:c8:8e:6d:bd:1b:fc:95:2a:22:9f:e1:a2:
51:25:92:a8:87:c3:b9:1e:e7:82:dc:82:fc:68:c2:
46:9d:dc:2e:bb:03:7c:02:cc:10:af:8c:87:7a:3b:
5c:ce:32:6e:2f:a4:02:a8:b9:91:da:91:58:64:7f:
27:87:77:ae:38:ca:a5:33:72:78:6d:8e:65:3d:93:
40:96:59:12:15:71:f2:03:bf:f6:40:c0:24:db:c2:
2a:56:35:33:a4:5d:e6:a6:87:9d:22:6b:1b:39:10:
79:84:3f:7d:e3:ff:1d:8d:58:da:9f:08:de:1e:0a:
c0:9e:99:4a:83:99:5c:af:71:ab:7e:61:96:a2:75:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:1D:9F:2B:E8:72:BD:17:AE:58:02:99:7E:EF:97:52:F5:20:47
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.82.0/23
141.11.121.0/24
141.11.161.0/24
141.11.186.0/24
141.11.216.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fb:4f:9b:5e:7e:99:a3:bd:c5:2b:b7:d2:51:53:83:99:85:
c2:53:3a:1a:ba:c6:21:9d:eb:1e:e1:44:6d:b8:6b:25:2d:19:
04:8a:a6:ce:ed:f2:d3:ad:3a:16:24:5d:3a:54:61:66:62:16:
4e:cf:55:6d:72:fd:9e:84:71:de:fc:0d:9a:4c:a8:e3:b2:35:
30:39:e3:12:1b:19:e5:81:98:3a:ec:08:99:69:47:fa:b1:a9:
dd:85:b7:35:78:00:07:42:9d:3d:ba:98:66:fb:79:86:b1:5e:
48:91:1f:a6:d3:39:8a:e4:08:47:f9:e4:82:29:98:06:62:5d:
c1:9d:3f:77:74:3c:52:7e:d9:20:11:16:1b:eb:0a:53:fb:9b:
8c:2c:44:13:61:5b:6e:d2:a0:0e:ff:ce:ef:47:b9:1e:f5:12:
c9:73:2a:1b:c5:c2:31:09:33:40:b0:10:9f:68:26:c9:7c:a2:
9c:d9:6d:97:3a:1a:26:8a:5b:bb:de:4f:69:a9:b0:2a:41:3e:
21:48:fe:62:63:df:ca:81:91:22:e0:7d:e0:1c:52:ac:5a:0c:
bf:91:6d:cd:2c:4e:83:e2:71:4d:04:b0:81:24:b2:d9:46:fa:
41:51:67:7d:c5:89:f0:55:03:cb:3e:57:66:57:bd:48:5f:c1:
c8:d4:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:19:28 2026 by rpki-client