Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: 7iEf48Dtg92PC7pYIz4k33x9xNxkt6F1h38JNyx9r3Q=
Subject key identifier: 03:7D:E9:22:D0:4E:9B:B1:DF:86:5C:90:42:35:45:00:12:28:48:7C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 51AD6D725611C80E24406D2C59EFF136EFBC4A5D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa
Signing time: Mon 26 Oct 2026 20:59:12 +0000
ROA not before: Mon 26 Oct 2026 20:54:12 +0000
ROA not after: Mon 25 Oct 2027 20:59:12 +0000
asID: 29802
IP address blocks: 85.155.225.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ad:6d:72:56:11:c8:0e:24:40:6d:2c:59:ef:f1:36:ef:bc:4a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 26 20:54:12 2026 GMT
Not After : Oct 25 20:59:12 2027 GMT
Subject: CN=037DE922D04E9BB1DF865C90423545001228487C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:7c:bf:30:0c:7b:51:a6:91:78:15:62:98:
24:2f:72:12:3e:11:36:fd:26:12:6e:35:29:e0:79:
2f:2b:89:9b:70:96:b8:15:62:9d:b4:c4:b8:37:e5:
2d:31:1e:52:22:20:48:80:fd:f5:3d:a5:a0:4f:f7:
f4:d3:21:bd:80:b2:57:d9:8c:38:79:3a:a5:0b:5c:
67:ba:d8:0c:23:76:bd:0b:b9:66:5f:08:a1:03:2b:
1f:8d:1f:1b:fa:19:03:5a:2a:ab:97:08:a7:86:26:
aa:d3:fa:3d:6d:5c:56:a3:36:97:e6:0a:6c:28:82:
42:fe:f4:95:5e:d3:6a:7a:04:2d:66:3a:6f:87:d8:
47:6e:fa:f7:d5:fe:4c:bf:23:22:6b:36:25:df:f8:
1d:14:f7:b3:f0:45:a2:96:03:bf:dd:40:01:fc:2e:
89:34:3a:51:28:63:c1:ac:d0:cf:40:8c:38:0c:20:
27:14:11:e1:4f:08:0a:d2:47:cd:b5:3f:24:17:c1:
8d:4a:64:99:6f:14:02:0c:d2:f5:50:33:15:10:85:
55:7c:1e:16:c8:57:f4:b4:63:da:ae:bc:b8:b3:7f:
20:69:66:bc:89:58:44:7b:ef:da:88:33:c8:ae:ce:
6d:9b:9e:dd:7b:fa:37:7d:88:39:82:51:aa:b1:e9:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:E9:22:D0:4E:9B:B1:DF:86:5C:90:42:35:45:00:12:28:48:7C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.225.0/24
185.99.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8a:e4:5f:c8:71:ea:f2:42:ca:d8:00:9b:a9:4b:27:70:57:
b3:8e:be:0a:6d:4c:74:92:38:13:e4:39:37:bf:be:17:f9:24:
45:6f:c5:eb:c9:6a:7c:60:4b:ab:88:89:e8:e0:e8:57:64:83:
59:73:9c:d0:78:d8:ae:5a:e5:ef:bf:dc:c7:0f:8e:bf:2e:2e:
ee:b6:6b:63:f9:70:22:d6:49:e5:21:ed:a5:bb:43:f6:7d:dd:
a4:39:d5:d1:1e:c7:bd:04:55:61:7c:81:9f:ef:20:f9:95:4f:
1f:c6:3b:be:c5:93:03:41:66:1a:d6:16:04:4e:8b:7a:a0:4b:
a9:aa:03:5e:28:92:51:70:6b:b9:2d:62:29:be:34:ca:5b:63:
eb:2e:3e:a4:d5:97:42:16:c8:2e:45:76:b1:da:db:11:8e:cb:
51:76:5b:14:0c:06:3c:77:62:09:0f:8c:97:29:11:bb:6f:fa:
84:68:2d:b5:c6:92:e3:25:8c:d1:48:df:c1:53:e7:78:27:7d:
7e:fa:4e:94:1b:a4:ac:06:8e:e7:a6:f6:72:93:da:61:06:a3:
97:4f:4e:f2:09:ef:6a:b7:cb:93:39:12:81:37:4f:45:cd:d0:
64:78:15:82:7f:59:c1:1a:b6:f6:3b:09:30:93:8c:0e:69:c9:
c8:66:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:12:01 2026 by rpki-client