Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa
File: AS29262.roa (raw, json)
Hash identifier: zEmPBB1qL/2rZRuTMI2mvB5n+yXbgQlxabwLkdD6pyw=
Subject key identifier: E4:72:76:14:D0:68:2E:FC:FA:C5:06:18:C6:61:9E:9F:CC:94:FC:05
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 68AEA449CAFFBCC6EB475FAAC2E66AF6E9D8204A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa
Signing time: Mon 18 May 2026 21:03:22 +0000
ROA not before: Mon 18 May 2026 20:58:22 +0000
ROA not after: Mon 17 May 2027 21:03:22 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
85.8.156.0/24 maxlen: 24
85.8.157.0/24 maxlen: 24
85.8.158.0/24 maxlen: 24
85.8.159.0/24 maxlen: 24
85.8.160.0/24 maxlen: 24
85.8.161.0/24 maxlen: 24
85.8.162.0/24 maxlen: 24
85.8.163.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.35.0/24 maxlen: 24
139.28.212.0/24 maxlen: 24
139.28.213.0/24 maxlen: 24
139.28.214.0/24 maxlen: 24
139.28.215.0/24 maxlen: 24
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
2a02:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ae:a4:49:ca:ff:bc:c6:eb:47:5f:aa:c2:e6:6a:f6:e9:d8:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 18 20:58:22 2026 GMT
Not After : May 17 21:03:22 2027 GMT
Subject: CN=E4727614D0682EFCFAC50618C6619E9FCC94FC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:84:28:70:b6:5c:97:f4:0a:f9:58:40:75:
7c:c9:cf:0d:eb:7f:83:ef:81:b5:be:70:51:a5:26:
38:98:58:fa:b2:02:02:cc:23:8e:d8:a9:c3:a9:84:
68:70:30:d0:84:f0:24:0d:c3:92:42:ba:30:51:8e:
0f:f5:d5:5b:19:cc:bf:d1:9e:87:e3:a9:40:a3:da:
65:be:32:ae:17:4f:77:fb:f6:11:88:3c:b4:db:18:
83:30:15:ac:44:cb:b1:87:d7:1e:14:ea:e8:ff:a3:
e6:8c:fe:14:e9:fb:8d:5a:b5:85:a2:3e:9e:24:e9:
78:8e:84:00:bc:e0:e3:00:73:16:9e:05:02:8d:75:
c6:0a:ad:10:35:bd:e5:cf:d2:c7:44:d7:02:62:dd:
46:04:04:3f:27:4b:83:2a:57:f5:60:82:c2:bc:66:
c5:1d:45:cd:70:52:93:50:e0:fa:ff:0a:4d:1d:d0:
17:e4:ba:2f:87:96:1e:0e:75:c5:91:00:92:84:d5:
c4:9f:fe:78:a4:1a:28:3a:6f:3b:7c:e2:50:0b:cd:
0b:6e:58:1e:8f:e4:b0:54:be:d7:9a:5b:41:e1:55:
90:c2:92:ab:06:ba:bb:ad:33:61:a7:1c:90:8d:ff:
ea:51:cf:33:56:a8:36:5f:22:ef:00:52:8a:de:de:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:72:76:14:D0:68:2E:FC:FA:C5:06:18:C6:61:9E:9F:CC:94:FC:05
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
85.8.156.0-85.8.163.255
93.190.8.0/22
139.28.32.0/22
139.28.212.0/22
194.169.92.0/22
IPv6:
2a02:f240::/29
Signature Algorithm: sha256WithRSAEncryption
62:03:1c:1c:83:62:93:a9:c6:ba:18:12:0e:17:35:10:d6:30:
2a:8b:43:32:02:15:c4:e1:3d:e0:87:18:8b:f8:68:60:95:25:
01:77:5e:e1:b9:dc:95:79:22:6e:a8:3e:6b:a1:f7:40:7f:5f:
69:5f:98:1e:2d:69:ff:d0:82:e3:fd:fd:c1:41:7b:54:e1:dc:
fb:49:f9:5e:ee:8e:95:28:d0:04:c2:a3:d3:ff:f3:d5:6d:95:
e9:a9:7e:aa:98:04:40:53:0d:a3:c8:6c:f6:a0:97:39:4b:98:
c5:d5:87:93:64:19:57:16:ee:d9:85:41:0a:10:9d:11:6c:94:
71:ea:96:09:18:67:8d:de:74:e1:ba:93:45:52:cf:66:71:cc:
56:1f:16:ce:d3:62:58:98:f6:34:61:d1:e1:4d:f6:33:b6:3c:
ed:bc:97:44:e9:d3:06:58:be:4a:33:bb:5a:17:96:51:4c:1d:
45:58:d4:ae:79:9f:0d:d5:55:02:7e:c5:f1:49:60:32:08:e2:
d0:8e:db:ca:51:e2:9c:93:30:c6:11:cc:e7:10:28:01:bf:2e:
94:e8:7b:e9:2f:83:44:65:f6:d7:a6:9a:ed:18:9b:32:b3:fc:
f9:14:8d:e7:77:99:66:b3:7c:69:ad:b3:d7:c9:b1:9d:63:f0:
cf:a4:91:a1
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUaK6kScr/vMbrR1+qwuZq9unYIEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA1MTgyMDU4MjJaFw0yNzA1MTcyMTAzMjJaMDMxMTAvBgNV
BAMTKEU0NzI3NjE0RDA2ODJFRkNGQUM1MDYxOEM2NjE5RTlGQ0M5NEZDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmoQocLZcl/QK+VhAdXzJzw3r
f4PvgbW+cFGlJjiYWPqyAgLMI47YqcOphGhwMNCE8CQNw5JCujBRjg/11VsZzL/R
nofjqUCj2mW+Mq4XT3f79hGIPLTbGIMwFaxEy7GH1x4U6uj/o+aM/hTp+41atYWi
Pp4k6XiOhAC84OMAcxaeBQKNdcYKrRA1veXP0sdE1wJi3UYEBD8nS4MqV/VggsK8
ZsUdRc1wUpNQ4Pr/Ck0d0Bfkui+Hlh4OdcWRAJKE1cSf/nikGig6bzt84lALzQtu
WB6P5LBUvteaW0HhVZDCkqsGurutM2GnHJCN/+pRzzNWqDZfIu8AUore3vBzAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU5HJ2FNBoLvz6xQYYxmGen8yU/AUwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjkyNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUHAQcBAf8ERTBDMDIEAgABMCwDBAI+tiAw
DAMEAlUInAMEAlUIoAMEAl2+CAMEAoscIAMEAosc1AMEAsKpXDANBAIAAjAHAwUD
KgLyQDANBgkqhkiG9w0BAQsFAAOCAQEAYgMcHINik6nGuhgSDhc1ENYwKotDMgIV
xOE94IcYi/hoYJUlAXde4bnclXkibqg+a6H3QH9faV+YHi1p/9CC4/39wUF7VOHc
+0n5Xu6OlSjQBMKj0//z1W2V6al+qpgEQFMNo8hs9qCXOUuYxdWHk2QZVxbu2YVB
ChCdEWyUceqWCRhnjd504bqTRVLPZnHMVh8WztNiWJj2NGHR4U32M7Y87byXROnT
Bli+SjO7WheWUUwdRVjUrnmfDdVVAn7F8UlgMgji0I7bylHinJMwxhHM5xAoAb8u
lOh76S+DRGX216aa7RibMrP8+RSN53eZZrN8aa2z18mxnWPwz6SRoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:13:11 2026 by rpki-client