Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: UCuw3Z9lVcpw85rKdVSoPkQu7bot6T4TRwxmVZW6VJg=
Subject key identifier: D9:C7:08:01:74:3E:0B:DD:23:46:A7:3E:BB:93:AB:61:0C:4A:8E:E7
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 30F3B06008FFB2E827E7F9EF148F2C13D39AF96B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS29802.roa
Signing time: Wed 04 Mar 2026 08:30:27 +0000
ROA not before: Wed 04 Mar 2026 08:25:27 +0000
ROA not after: Wed 03 Mar 2027 08:30:27 +0000
asID: 29802
IP address blocks: 147.125.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 11:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f3:b0:60:08:ff:b2:e8:27:e7:f9:ef:14:8f:2c:13:d3:9a:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:27 2026 GMT
Not After : Mar 3 08:30:27 2027 GMT
Subject: CN=D9C70801743E0BDD2346A73EBB93AB610C4A8EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:64:51:b5:18:0d:9b:92:bb:0d:65:b8:68:
b8:cb:69:3b:0b:b4:26:1e:2c:73:36:8f:27:d8:1c:
63:3f:40:8e:70:bf:7e:ec:12:31:49:a1:92:1e:ec:
94:26:8d:d1:22:d3:71:ae:c8:b7:93:77:1f:e9:c9:
1d:e1:47:5b:bf:25:e7:3b:5d:40:7a:13:0d:28:e6:
75:01:f9:06:94:41:8b:69:27:51:85:77:2a:9b:6d:
8b:ea:ec:ac:91:09:b7:c5:ad:49:ad:81:63:d3:fa:
16:40:1f:2b:fb:5c:2e:09:23:c5:4b:de:4c:80:59:
a7:70:73:e8:f2:8b:3a:22:d3:fb:52:ad:96:37:99:
33:f6:2a:40:cf:b1:98:ec:be:e1:81:fe:40:23:6a:
df:ee:b4:9f:b8:cb:be:5f:bc:5c:fe:9f:d1:bc:2e:
f4:81:6b:11:78:87:0c:22:9c:79:d8:03:41:30:f9:
49:9f:0b:29:ed:ea:f8:fd:d8:c4:79:4b:3a:69:5f:
ba:75:64:b0:9f:b6:dd:51:0e:c7:00:4d:d8:69:f8:
1c:ab:fe:71:70:d0:29:13:86:f3:64:4d:80:3b:5d:
02:a0:86:50:38:d0:7b:0d:3a:35:b1:2c:57:4d:62:
cf:0c:da:d8:8d:e1:b8:d3:54:b8:05:86:0e:bd:1e:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:08:01:74:3E:0B:DD:23:46:A7:3E:BB:93:AB:61:0C:4A:8E:E7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.215.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0d:3a:a7:0b:42:8a:d5:14:2d:49:58:89:21:26:c3:55:ca:
2b:2d:50:a8:97:55:21:54:13:ad:d2:0a:f6:ed:bd:a4:a6:a0:
5f:6c:58:96:3b:d3:df:77:c5:67:63:94:90:a6:e8:b1:be:44:
af:05:2f:7e:3e:c0:c0:84:2a:60:69:bb:3f:83:ae:9f:4c:56:
49:5b:22:1e:26:0b:36:19:18:53:99:bc:15:a2:f9:d7:c9:b4:
b4:c4:68:ef:24:b7:de:d1:64:75:fa:0b:fc:6c:05:14:d8:e5:
13:80:81:8d:78:8b:f1:33:ed:0a:03:1f:7d:82:28:3d:15:3c:
9d:dd:ef:c1:25:77:c3:d2:b8:87:c0:73:bd:a3:63:24:8b:6f:
16:67:71:1d:c7:de:d5:4c:80:8f:c4:eb:20:56:a8:e6:89:eb:
e9:d2:9f:cf:18:ac:a3:f6:f9:ee:39:c5:1a:41:0e:99:3f:e4:
36:f5:3a:47:36:e2:ed:3a:43:f4:a8:04:a7:67:6e:63:d0:70:
81:e1:0a:48:fe:68:7e:0c:f0:74:e4:4c:aa:44:06:3c:6c:9d:
da:d1:1d:94:92:ce:61:ec:46:8e:6d:52:18:51:a6:23:7f:5c:
c6:87:cf:4a:e3:e2:0a:81:79:20:68:9f:47:b6:52:03:25:66:
7c:37:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:17:04 2026 by rpki-client