Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: UoV+5ykTEt2+CZHRSl1jhM922nJ2D+Uvu8oWawi9ork=
Subject key identifier: 44:08:23:D2:FD:82:DF:49:94:33:8A:B1:5E:97:68:54:9D:43:D6:EC
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2631AFF27283E6638D561964154EB560E30DB853
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
Signing time: Fri 06 Jun 2025 10:00:08 +0000
ROA not before: Fri 06 Jun 2025 09:55:08 +0000
ROA not after: Fri 05 Jun 2026 10:00:08 +0000
asID: 29802
IP address blocks: 143.20.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:31:af:f2:72:83:e6:63:8d:56:19:64:15:4e:b5:60:e3:0d:b8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 6 09:55:08 2025 GMT
Not After : Jun 5 10:00:08 2026 GMT
Subject: CN=440823D2FD82DF4994338AB15E9768549D43D6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:32:53:83:f0:0a:56:ba:2f:22:eb:fe:4e:
f0:07:e8:d3:82:4a:c7:c3:b3:1a:6f:14:ce:7b:e1:
31:03:df:78:d3:18:d1:f2:03:20:a1:ad:56:fa:ec:
6d:5c:51:0c:b8:a8:80:34:76:ac:34:13:0c:9c:3d:
28:46:c4:da:32:70:97:76:0e:1d:87:36:58:b5:97:
01:5c:73:c8:fb:03:fc:d8:c8:49:6e:db:06:a4:e3:
08:2f:b5:a3:c3:5f:e8:0a:05:1a:32:7c:c5:ea:07:
9f:40:da:b1:86:2d:d5:ab:38:54:e9:d1:57:e9:8c:
a1:2f:39:4d:01:b7:e7:25:fa:c7:65:92:1d:99:69:
c8:56:b0:dc:11:a0:59:7a:6b:99:cc:e4:36:d9:0f:
90:60:ae:e8:cb:c8:24:6b:fb:a0:29:b1:2e:7a:93:
ab:65:33:5e:3e:b4:1c:7c:da:d6:c7:e4:ae:0c:b0:
2c:af:9c:c4:b5:3e:b1:dc:aa:ce:48:ec:95:0e:d2:
a5:f7:b7:e0:0c:2d:2d:8d:c9:24:29:9c:f1:2f:fb:
57:e1:35:82:11:9e:7c:20:31:1b:4b:f1:99:f8:d2:
e6:9a:48:ec:b8:98:bf:ec:6d:46:79:69:24:cd:66:
63:e6:e6:00:df:54:59:b7:8b:52:b5:47:e4:c6:6a:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:23:D2:FD:82:DF:49:94:33:8A:B1:5E:97:68:54:9D:43:D6:EC
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cc:21:74:c5:bf:71:d7:97:a5:93:ff:ac:66:67:40:2c:a7:
1b:34:73:e2:bc:32:93:64:38:df:b9:da:74:a0:29:d6:2f:b5:
2b:bd:28:99:91:3a:11:67:ce:ce:31:1e:9b:9a:5b:34:3a:48:
a9:6b:4e:d7:b1:c2:78:ef:64:63:a5:e5:ec:f2:34:06:c8:bd:
da:d6:0d:f7:97:19:4a:37:1a:38:4e:d7:a1:2e:71:01:54:21:
7d:32:e4:09:3b:a0:2e:44:21:aa:4d:92:02:ef:10:a6:ec:67:
71:e6:45:96:e4:83:c7:6a:27:bd:53:c4:57:2e:01:85:b5:35:
3f:f1:99:bd:9e:84:84:02:d6:f8:c3:47:8a:15:86:f3:8c:69:
52:5f:10:c9:2c:31:9a:82:57:99:90:ed:87:8b:6c:de:30:df:
e9:4a:cf:21:ae:e6:54:89:3d:65:12:13:52:58:bd:07:1a:ea:
76:b5:8e:c1:03:f1:34:99:c4:3c:cb:65:06:b5:ec:a1:29:43:
7e:33:2a:d5:48:6b:15:1e:d9:fd:c1:aa:b7:9b:8b:1f:ba:c5:
14:86:2f:2c:31:76:a7:c7:6d:fc:55:ce:3e:4d:78:19:d0:03:
e1:ad:64:fc:6f:83:01:e5:42:6f:0e:c1:a5:03:e2:12:88:37:
21:6f:71:a2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJjGv8nKD5mONVhlkFU61YOMNuFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA2MDYwOTU1MDhaFw0yNjA2MDUxMDAwMDhaMDMxMTAvBgNV
BAMTKDQ0MDgyM0QyRkQ4MkRGNDk5NDMzOEFCMTVFOTc2ODU0OUQ0M0Q2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRXTJTg/AKVrovIuv+TvAH6NOC
SsfDsxpvFM574TED33jTGNHyAyChrVb67G1cUQy4qIA0dqw0EwycPShGxNoycJd2
Dh2HNli1lwFcc8j7A/zYyElu2wak4wgvtaPDX+gKBRoyfMXqB59A2rGGLdWrOFTp
0VfpjKEvOU0Bt+cl+sdlkh2ZachWsNwRoFl6a5nM5DbZD5BgrujLyCRr+6ApsS56
k6tlM14+tBx82tbH5K4MsCyvnMS1PrHcqs5I7JUO0qX3t+AMLS2NySQpnPEv+1fh
NYIRnnwgMRtL8Zn40uaaSOy4mL/sbUZ5aSTNZmPm5gDfVFm3i1K1R+TGalPFAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQURAgj0v2C30mUM4qxXpdoVJ1D1uwwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFHYw
DQYJKoZIhvcNAQELBQADggEBAD3MIXTFv3HXl6WT/6xmZ0Aspxs0c+K8MpNkON+5
2nSgKdYvtSu9KJmROhFnzs4xHpuaWzQ6SKlrTtexwnjvZGOl5ezyNAbIvdrWDfeX
GUo3GjhO16EucQFUIX0y5Ak7oC5EIapNkgLvEKbsZ3HmRZbkg8dqJ71TxFcuAYW1
NT/xmb2ehIQC1vjDR4oVhvOMaVJfEMksMZqCV5mQ7YeLbN4w3+lKzyGu5lSJPWUS
E1JYvQca6na1jsED8TSZxDzLZQa17KEpQ34zKtVIaxUe2f3Bqrebix+6xRSGLywx
dqfHbfxVzj5NeBnQA+GtZPxvgwHlQm8OwaUD4hKINyFvcaI=
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:25 2025 by rpki-client