Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: 6V2njQj0MSNdABjAir53XWh5ZANiFfNvB+XBCCVhXSk=
Subject key identifier: DB:A2:66:07:5C:71:76:96:DE:7D:3C:45:70:16:45:B2:76:C1:51:2A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E84BD7A1624F873AD6F1182E732525862506F0B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
Signing time: Sat 24 Oct 2026 21:18:20 +0000
ROA not before: Sat 24 Oct 2026 21:13:20 +0000
ROA not after: Sat 23 Oct 2027 21:18:20 +0000
asID: 29802
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
46.203.198.0/24 maxlen: 24
46.203.201.0/24 maxlen: 24
46.203.206.0/24 maxlen: 24
46.203.209.0/24 maxlen: 24
91.124.130.0/24 maxlen: 24
92.112.134.0/24 maxlen: 24
92.112.136.0/24 maxlen: 24
92.112.139.0/24 maxlen: 24
92.112.145.0/24 maxlen: 24
92.112.148.0/24 maxlen: 24
92.112.150.0/24 maxlen: 24
92.112.168.0/24 maxlen: 24
92.112.169.0/24 maxlen: 24
92.112.173.0/24 maxlen: 24
92.112.174.0/24 maxlen: 24
92.112.203.0/24 maxlen: 24
92.112.214.0/24 maxlen: 24
92.113.83.0/24 maxlen: 24
92.113.103.0/24 maxlen: 24
92.113.232.0/24 maxlen: 24
92.113.233.0/24 maxlen: 24
92.113.237.0/24 maxlen: 24
92.113.238.0/24 maxlen: 24
92.113.242.0/24 maxlen: 24
92.113.243.0/24 maxlen: 24
178.94.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:84:bd:7a:16:24:f8:73:ad:6f:11:82:e7:32:52:58:62:50:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 24 21:13:20 2026 GMT
Not After : Oct 23 21:18:20 2027 GMT
Subject: CN=DBA266075C717696DE7D3C45701645B276C1512A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:3d:c8:45:14:75:dc:5f:ec:83:83:98:45:
59:fb:6e:04:45:17:38:0f:8a:71:b4:ca:d9:cc:e3:
4c:8f:44:bd:15:98:c1:f4:46:93:80:f8:da:11:a6:
cc:e2:7e:72:a1:50:9a:c7:bc:cc:3c:da:d1:9c:6a:
6e:a1:6f:5e:a4:43:54:e4:1c:a7:a4:93:97:39:98:
e7:03:40:8c:07:54:ee:de:68:33:e0:38:ba:20:89:
2c:8e:15:a0:ee:08:b0:2c:1e:66:06:ed:67:f6:1c:
6e:bd:88:ba:60:48:81:ea:f0:10:fc:f5:95:b9:6d:
91:50:78:02:90:d2:45:67:08:7a:b9:f0:01:84:66:
9f:d4:ff:77:36:35:65:07:da:be:2e:24:2d:bc:88:
57:dc:df:39:7b:de:09:23:28:a8:4f:22:d1:ae:45:
1e:90:1f:11:17:27:bf:6c:6a:ad:c7:65:df:ab:1d:
dc:a1:53:9c:86:ab:64:57:77:62:1c:3a:da:ff:43:
b8:9f:80:d3:f8:d6:3c:43:f1:f4:73:a6:99:25:e5:
6e:9b:9f:0b:59:a5:aa:17:ad:d1:d8:ad:96:4b:f4:
f5:25:4f:e9:cb:0e:a5:33:83:96:0b:1c:69:d5:a0:
13:22:41:4d:60:22:5a:87:09:01:64:ae:90:80:2e:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A2:66:07:5C:71:76:96:DE:7D:3C:45:70:16:45:B2:76:C1:51:2A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
46.203.198.0/24
46.203.201.0/24
46.203.206.0/24
46.203.209.0/24
91.124.130.0/24
92.112.134.0/24
92.112.136.0/24
92.112.139.0/24
92.112.145.0/24
92.112.148.0/24
92.112.150.0/24
92.112.168.0/23
92.112.173.0-92.112.174.255
92.112.203.0/24
92.112.214.0/24
92.113.83.0/24
92.113.103.0/24
92.113.232.0/23
92.113.237.0-92.113.238.255
92.113.242.0/23
178.94.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:50:92:3a:16:93:e8:bb:8d:cc:ce:d5:93:05:ff:c2:af:a3:
5f:4f:57:c8:0d:6c:31:7e:03:f7:35:6d:86:3b:88:a6:68:d1:
b8:be:52:b5:6a:03:71:47:aa:5a:51:c5:da:cb:a3:bd:1c:d3:
a0:c7:54:8a:f0:c7:8a:21:90:f8:4e:28:a1:5a:53:1f:b2:b6:
ee:0c:80:11:24:9b:b8:02:db:bd:ff:45:99:a6:3a:b0:98:da:
31:e0:a0:cb:68:d3:4d:e2:1f:ef:05:b6:6f:ab:b6:9d:03:93:
44:75:00:9a:db:6f:fd:52:f4:56:9f:45:ff:19:e3:fa:bc:c5:
a7:7d:57:84:ad:54:11:7e:75:c4:57:f8:31:4d:0d:fd:10:25:
81:0a:fd:15:bb:ec:a0:ef:4a:84:8e:08:d1:8c:b7:11:5a:75:
b3:ff:d4:e9:d0:af:13:b2:6e:d9:de:f4:a1:c8:52:bb:13:2f:
62:66:a3:d3:c1:5f:8b:f7:94:1d:9c:fb:09:2e:6d:c5:52:19:
c0:71:af:df:21:1c:5b:9f:8d:24:19:09:10:87:e9:6f:7f:6c:
05:80:66:4c:49:cf:db:5d:dc:98:7f:20:1a:a1:5b:31:dd:45:
47:93:8d:32:b1:f9:66:8d:a9:38:c2:61:56:e8:3a:c8:b3:c2:
37:3f:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:32 2026 by rpki-client