Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: d7p9jfzHP/dQM1ACaRRUNdUFWlk1PmS65/FaiV4AQyE=
Subject key identifier: 81:89:7D:EA:D5:25:08:F7:5B:CC:FD:EC:F8:F8:48:11:DD:DC:E2:D4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4BF294E785762E5839A9C04157C731759A2E105F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
Signing time: Tue 30 Jun 2026 00:49:49 +0000
ROA not before: Tue 30 Jun 2026 00:44:49 +0000
ROA not after: Tue 29 Jun 2027 00:49:49 +0000
asID: 29802
IP address blocks: 143.20.180.0/24 maxlen: 24
143.20.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f2:94:e7:85:76:2e:58:39:a9:c0:41:57:c7:31:75:9a:2e:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 30 00:44:49 2026 GMT
Not After : Jun 29 00:49:49 2027 GMT
Subject: CN=81897DEAD52508F75BCCFDECF8F84811DDDCE2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:7e:62:8d:fc:bb:89:fd:57:a6:c6:cc:27:
8e:7b:0c:57:4e:ba:42:1e:89:15:92:7f:38:96:44:
7b:c9:16:a9:6d:16:a0:54:fc:30:86:9c:e3:17:df:
28:f8:14:7a:d5:c0:51:63:42:e5:3b:98:d5:ac:97:
d9:14:16:65:68:36:dc:15:9e:1b:48:8e:42:0e:3c:
39:8d:61:6d:95:4a:31:a0:00:99:93:a3:c3:a5:16:
de:67:14:4e:70:2f:5d:30:d6:b3:35:bd:20:de:5f:
ed:ed:1f:63:63:10:fb:52:90:88:ee:2d:f3:23:df:
bc:68:17:45:f8:e2:39:f5:6a:53:62:94:82:e8:0e:
31:83:39:73:d9:33:ba:cc:23:ef:89:f8:5f:52:aa:
8d:c5:59:dc:88:79:37:9d:78:63:a1:63:5c:e7:f6:
8c:4d:af:79:80:56:c6:6b:eb:da:a2:29:87:de:6c:
20:92:ec:f6:88:19:29:34:9c:08:e3:86:72:2e:f4:
81:82:34:23:f8:21:ab:37:ed:a2:f6:85:56:67:43:
8b:59:0a:98:22:5f:fd:83:0d:19:fe:2f:06:ec:33:
99:00:e3:73:c9:22:f4:69:27:01:53:b2:ab:5b:01:
98:06:0a:d5:93:12:cd:72:6b:61:c6:52:25:b9:90:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:89:7D:EA:D5:25:08:F7:5B:CC:FD:EC:F8:F8:48:11:DD:DC:E2:D4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.180.0/24
143.20.226.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6d:30:1d:bc:a0:bc:59:91:de:27:d8:8a:d1:a9:f4:cb:12:
d8:c5:5a:00:00:bb:59:7d:b0:f7:6e:ca:9a:32:0d:57:ee:19:
d9:06:9d:be:e1:f1:cf:e6:18:2e:21:6b:db:44:50:ef:4b:c4:
9a:72:7c:83:1f:f3:b8:57:ef:68:fc:72:d9:8f:75:4d:99:2e:
94:bb:cf:5e:eb:79:31:cd:bd:76:0a:2c:c0:4b:23:16:e7:77:
be:98:97:05:bd:05:c3:45:07:97:5f:4b:33:ca:67:05:a7:9d:
4b:d8:1d:a4:eb:aa:2d:e8:77:ac:36:d1:a9:bb:8c:a5:99:18:
a0:21:7d:83:23:19:01:d6:23:6f:88:95:b0:6f:cd:01:82:e5:
06:4c:7b:e0:d5:48:0a:5f:d9:f5:3c:e8:1d:cb:c9:1e:50:a3:
d1:45:5a:6d:a5:a3:ae:05:60:7a:86:33:f8:c3:00:39:db:de:
29:c8:e9:cb:80:b5:d3:6b:82:90:83:a9:26:1f:a6:86:cb:63:
75:54:55:a5:ed:49:c4:35:04:38:bf:87:69:e9:06:df:20:8c:
fa:f5:48:9f:fa:c2:2b:83:93:a4:c7:2f:a1:6a:95:e5:1b:19:
5d:dd:19:e8:6c:a5:b2:24:40:26:05:ab:43:7c:12:81:d3:64:
bf:5a:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:51:46 2026 by rpki-client