Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: z70yTsZedoZXA+lL9nXfXvd5+CIF8oiE1fxRL85Bvf8=
Subject key identifier: 31:70:E2:0E:D8:EA:AD:B3:90:D0:F9:2B:87:08:88:7A:4D:A5:55:2C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4B5BBDB291C2BFD5D1F864548786E51AB9F8B99B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
Signing time: Tue 15 Sep 2026 01:16:38 +0000
ROA not before: Tue 15 Sep 2026 01:11:38 +0000
ROA not after: Tue 14 Sep 2027 01:16:38 +0000
asID: 29802
IP address blocks: 46.202.100.0/24 maxlen: 24
46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
46.203.198.0/24 maxlen: 24
46.203.201.0/24 maxlen: 24
46.203.206.0/24 maxlen: 24
46.203.209.0/24 maxlen: 24
91.124.130.0/24 maxlen: 24
92.112.134.0/24 maxlen: 24
92.112.136.0/24 maxlen: 24
92.112.139.0/24 maxlen: 24
92.112.145.0/24 maxlen: 24
92.112.148.0/24 maxlen: 24
92.112.150.0/24 maxlen: 24
92.112.168.0/24 maxlen: 24
92.112.169.0/24 maxlen: 24
92.112.173.0/24 maxlen: 24
92.112.174.0/24 maxlen: 24
92.112.203.0/24 maxlen: 24
92.112.226.0/24 maxlen: 24
92.113.83.0/24 maxlen: 24
92.113.103.0/24 maxlen: 24
92.113.232.0/24 maxlen: 24
92.113.233.0/24 maxlen: 24
92.113.237.0/24 maxlen: 24
92.113.238.0/24 maxlen: 24
92.113.242.0/24 maxlen: 24
92.113.243.0/24 maxlen: 24
178.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 17:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5b:bd:b2:91:c2:bf:d5:d1:f8:64:54:87:86:e5:1a:b9:f8:b9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 15 01:11:38 2026 GMT
Not After : Sep 14 01:16:38 2027 GMT
Subject: CN=3170E20ED8EAADB390D0F92B8708887A4DA5552C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:27:a0:5b:e6:c0:e4:90:87:f9:a6:c7:d7:
05:9d:eb:74:cb:6e:0b:38:e0:cc:ba:d4:87:e6:8e:
b6:2e:4d:39:72:a9:5e:26:45:9c:84:fb:df:fd:70:
19:2c:63:dc:b8:a1:5f:c8:46:a7:28:0a:28:22:55:
fd:62:5d:bf:85:39:d6:51:e3:be:23:96:c2:35:c7:
b8:90:19:7e:cd:9c:e4:fe:aa:45:31:6a:a4:f2:f9:
44:47:83:a6:65:e3:38:b6:ab:d0:27:44:fe:18:2b:
41:38:c4:89:01:f5:10:07:2d:de:c0:1a:fe:95:df:
29:70:7a:ce:0a:60:b0:14:17:a5:d1:26:f8:84:26:
41:fc:1c:99:5e:9b:7c:25:12:58:a8:60:3a:de:ad:
ae:69:73:18:c0:9c:e4:40:66:67:46:e0:ce:7b:96:
de:d4:52:ba:ae:64:59:5b:3b:e8:c5:cf:4d:72:6b:
47:ed:9e:41:75:d7:da:64:f9:7f:e9:14:e5:58:4f:
46:be:bb:56:d7:50:43:37:4e:48:9d:6a:eb:89:ed:
7a:14:a2:08:27:0e:13:32:32:5f:37:18:fa:0a:b1:
32:ef:b9:94:15:f4:04:f8:82:a2:62:1e:da:58:0e:
e5:1f:f8:79:fd:5e:4f:e2:42:db:16:b0:51:0e:77:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:E2:0E:D8:EA:AD:B3:90:D0:F9:2B:87:08:88:7A:4D:A5:55:2C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.100.0/24
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
46.203.198.0/24
46.203.201.0/24
46.203.206.0/24
46.203.209.0/24
91.124.130.0/24
92.112.134.0/24
92.112.136.0/24
92.112.139.0/24
92.112.145.0/24
92.112.148.0/24
92.112.150.0/24
92.112.168.0/23
92.112.173.0-92.112.174.255
92.112.203.0/24
92.112.226.0/24
92.113.83.0/24
92.113.103.0/24
92.113.232.0/23
92.113.237.0-92.113.238.255
92.113.242.0/23
178.92.127.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e5:6b:2d:43:59:3b:c4:77:0e:6e:08:db:61:f1:95:ac:5d:
54:d4:b7:35:e5:c5:cd:b2:ef:f3:8b:37:8f:f0:c2:0d:a4:87:
c0:b0:b4:f0:3d:d0:ca:38:4e:09:5d:83:52:52:74:1d:c7:a5:
95:c1:78:e7:29:21:c0:7c:11:90:fa:23:b5:63:2c:fe:8f:bb:
31:52:51:be:ae:a4:50:c1:6b:60:8c:6e:c3:86:4b:f1:b8:7c:
ff:81:1b:88:db:64:69:59:3b:21:09:e5:bd:18:15:8d:7c:3c:
8d:20:7e:51:22:7c:7b:42:60:b9:80:86:94:7d:22:07:2f:d3:
ea:cf:c9:fa:a0:78:6c:99:44:3f:ee:72:02:31:70:e0:b6:b4:
88:7e:b6:0c:9b:5e:d4:19:91:1f:48:25:ac:27:fe:c0:54:bf:
ed:12:2c:28:b5:dc:73:56:54:6b:0b:5b:de:e6:06:ed:1b:d1:
72:e3:5e:a8:42:72:27:40:d2:2b:d8:3e:47:7f:75:15:e0:4f:
69:5f:2a:a7:df:61:f7:39:a2:78:53:b9:49:ed:3f:60:62:a9:
f1:95:1e:3a:6b:da:76:8d:d5:d1:57:be:64:f3:8b:08:d0:c0:
bc:24:00:28:1d:92:16:30:16:cc:c4:1b:5e:29:73:a5:06:b9:
13:d2:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:21:00 2026 by rpki-client