Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: J4SHDF1WdGUrTFxoviioRVtw3rLOP7vEPJ+tmK5PEvM=
Subject key identifier: 06:BF:71:2D:2D:80:FA:8D:2F:D5:68:5D:B7:C8:56:CE:7B:E4:8B:50
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 435E8953FFB05243A0F53EFB14FD29C1B3C26C23
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
Signing time: Mon 02 Nov 2026 10:07:49 +0000
ROA not before: Mon 02 Nov 2026 10:02:49 +0000
ROA not after: Mon 01 Nov 2027 10:07:49 +0000
asID: 29802
IP address blocks: 82.21.103.0/24 maxlen: 24
82.21.110.0/24 maxlen: 24
82.21.113.0/24 maxlen: 24
82.21.119.0/24 maxlen: 24
82.21.122.0/24 maxlen: 24
82.21.124.0/24 maxlen: 24
82.21.132.0/24 maxlen: 24
82.21.139.0/24 maxlen: 24
82.21.143.0/24 maxlen: 24
82.21.155.0/24 maxlen: 24
82.21.163.0/24 maxlen: 24
82.22.61.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.116.0/22 maxlen: 24
82.24.128.0/22 maxlen: 24
82.24.132.0/22 maxlen: 24
82.24.136.0/22 maxlen: 24
82.24.140.0/22 maxlen: 24
82.24.148.0/22 maxlen: 24
82.24.152.0/22 maxlen: 24
82.24.156.0/22 maxlen: 24
82.24.160.0/22 maxlen: 24
82.24.168.0/22 maxlen: 24
82.24.176.0/22 maxlen: 24
82.24.194.0/24 maxlen: 24
82.24.196.0/22 maxlen: 24
82.25.148.0/23 maxlen: 24
82.25.150.0/23 maxlen: 24
82.25.152.0/23 maxlen: 24
82.25.156.0/23 maxlen: 24
82.25.158.0/23 maxlen: 24
82.25.162.0/23 maxlen: 24
82.25.164.0/23 maxlen: 24
82.25.166.0/23 maxlen: 24
82.25.168.0/23 maxlen: 24
82.25.170.0/23 maxlen: 24
82.25.172.0/23 maxlen: 24
82.25.176.0/23 maxlen: 24
82.25.178.0/23 maxlen: 24
82.25.182.0/23 maxlen: 24
82.25.188.0/23 maxlen: 24
82.26.116.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.38.174.0/24 maxlen: 24
82.39.223.0/24 maxlen: 24
82.47.240.0/23 maxlen: 24
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5e:89:53:ff:b0:52:43:a0:f5:3e:fb:14:fd:29:c1:b3:c2:6c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 2 10:02:49 2026 GMT
Not After : Nov 1 10:07:49 2027 GMT
Subject: CN=06BF712D2D80FA8D2FD5685DB7C856CE7BE48B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:0f:41:84:63:39:57:77:b6:7e:24:54:31:
93:38:51:7e:a8:bc:87:8b:25:ed:28:51:a5:66:b2:
87:db:02:6c:cf:2f:91:9d:b6:fb:49:c6:2a:64:6c:
d0:ad:7b:ba:9e:fb:af:6f:22:47:fe:0e:e9:8a:a6:
71:f8:3b:19:bf:03:2e:04:26:3d:b9:5d:9f:22:db:
b4:e9:b1:39:2f:bd:bb:25:a0:20:05:d3:25:31:41:
e7:13:80:4d:dd:6b:0e:42:90:9b:2c:1d:48:ee:ed:
e9:d8:81:bc:e0:53:0a:7a:81:4e:fb:b1:82:38:c2:
5d:ef:c2:fd:b4:97:70:50:32:12:7f:d9:ad:8d:7d:
e2:e9:b9:fa:1a:5a:f0:85:c5:bb:8c:35:52:d7:9a:
90:d9:c8:ba:8a:2c:fe:88:54:e4:53:d8:3b:8f:9f:
98:ae:a5:21:51:9d:7a:6a:ba:6b:54:fd:01:55:b8:
1b:36:9d:72:09:96:39:0f:ed:0f:f8:56:09:24:50:
26:a5:18:c3:8f:96:3d:7a:15:25:aa:bf:62:6c:8e:
e5:55:5a:50:22:57:14:ba:d1:5b:c9:a3:88:f4:c9:
71:a4:2e:51:0b:91:58:02:f3:95:b6:89:a2:02:7b:
19:32:0b:61:08:8b:08:00:d3:aa:40:3a:ff:ee:5d:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:71:2D:2D:80:FA:8D:2F:D5:68:5D:B7:C8:56:CE:7B:E4:8B:50
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.103.0/24
82.21.110.0/24
82.21.113.0/24
82.21.119.0/24
82.21.122.0/24
82.21.124.0/24
82.21.132.0/24
82.21.139.0/24
82.21.143.0/24
82.21.155.0/24
82.21.163.0/24
82.22.61.0/24
82.24.92.0-82.24.99.255
82.24.116.0/22
82.24.128.0/20
82.24.148.0-82.24.163.255
82.24.168.0/22
82.24.176.0/22
82.24.194.0/24
82.24.196.0/22
82.25.148.0-82.25.153.255
82.25.156.0/22
82.25.162.0-82.25.173.255
82.25.176.0/22
82.25.182.0/23
82.25.188.0/23
82.26.116.0/24
82.26.176.0/20
82.38.174.0/24
82.39.223.0/24
82.47.240.0/23
IPv6:
2a13:9500:6::-2a13:9500:10:ffff:ffff:ffff:ffff:ffff
2a13:9500:1c::/46
Signature Algorithm: sha256WithRSAEncryption
54:8c:a1:3c:0c:e7:fe:e9:63:96:5f:15:e0:dc:54:93:bc:4e:
84:2a:58:dd:0c:f2:ca:59:63:f1:fd:cc:45:5d:d2:2a:47:85:
6b:ba:df:cc:97:bb:40:92:a1:4a:b6:f0:99:6f:43:e3:c0:19:
fd:0c:73:38:ac:21:7a:77:25:3c:b8:98:20:86:cb:34:7c:bc:
d1:0f:66:38:8e:82:f7:b1:ef:9a:99:bd:a4:d4:e0:50:be:2d:
e5:68:df:85:44:c5:95:52:9e:89:ec:b4:af:30:f0:d7:5b:da:
c3:37:d6:42:cd:80:d2:0b:57:81:02:da:86:22:ae:e6:61:27:
9d:3b:e3:1e:2d:57:0d:c5:a8:90:ae:b4:04:09:77:51:ca:e2:
70:9d:3d:62:af:fa:2d:cf:8b:68:c8:bc:87:b2:9d:f3:91:0e:
44:d2:81:f1:9f:1c:79:27:0d:aa:9d:14:54:ae:b4:6c:14:f6:
f0:23:66:c5:54:b5:35:05:09:7c:c2:b9:7f:f6:c0:48:89:a1:
31:a2:ad:24:17:f1:bb:42:a6:38:d6:6d:96:7d:45:ba:4a:1a:
e7:89:ef:ec:07:d3:c5:a1:d8:ad:9d:93:52:e0:f1:f5:0b:d0:
8a:9a:3e:ef:b2:3d:5c:02:18:d5:d6:df:38:60:bf:d1:85:40:
6f:35:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:13:35 2026 by rpki-client