Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: hU0UMuz9ENvv8yw4Mc3EWvuPn7iwinjsbclY6AsehBw=
Subject key identifier: 98:43:9F:44:12:AE:D9:49:FF:41:54:F1:6F:81:0F:F5:30:E5:39:69
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 726015C5BD5E4C96EC6A8A684AA4706DCD1E29A8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
Signing time: Thu 17 Sep 2026 10:57:43 +0000
ROA not before: Thu 17 Sep 2026 10:52:43 +0000
ROA not after: Thu 16 Sep 2027 10:57:43 +0000
asID: 29802
IP address blocks: 82.21.67.0/24 maxlen: 24
82.21.74.0/24 maxlen: 24
82.21.93.0/24 maxlen: 24
82.21.103.0/24 maxlen: 24
82.21.110.0/24 maxlen: 24
82.21.113.0/24 maxlen: 24
82.21.119.0/24 maxlen: 24
82.21.122.0/24 maxlen: 24
82.21.124.0/24 maxlen: 24
82.21.132.0/24 maxlen: 24
82.21.139.0/24 maxlen: 24
82.21.140.0/24 maxlen: 24
82.21.143.0/24 maxlen: 24
82.21.148.0/24 maxlen: 24
82.21.152.0/24 maxlen: 24
82.21.155.0/24 maxlen: 24
82.21.157.0/24 maxlen: 24
82.21.163.0/24 maxlen: 24
82.22.61.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.116.0/22 maxlen: 24
82.24.128.0/22 maxlen: 24
82.24.132.0/22 maxlen: 24
82.24.136.0/22 maxlen: 24
82.24.140.0/22 maxlen: 24
82.24.148.0/22 maxlen: 24
82.24.152.0/22 maxlen: 24
82.24.156.0/22 maxlen: 24
82.24.160.0/22 maxlen: 24
82.24.164.0/22 maxlen: 24
82.24.168.0/22 maxlen: 24
82.24.176.0/22 maxlen: 24
82.24.196.0/22 maxlen: 24
82.25.146.0/23 maxlen: 24
82.25.148.0/23 maxlen: 24
82.25.150.0/23 maxlen: 24
82.25.152.0/23 maxlen: 24
82.25.154.0/23 maxlen: 24
82.25.156.0/23 maxlen: 24
82.25.158.0/23 maxlen: 24
82.25.162.0/23 maxlen: 24
82.25.164.0/23 maxlen: 24
82.25.166.0/23 maxlen: 24
82.25.168.0/23 maxlen: 24
82.25.170.0/23 maxlen: 24
82.25.172.0/23 maxlen: 24
82.25.176.0/23 maxlen: 24
82.25.178.0/23 maxlen: 24
82.25.182.0/23 maxlen: 24
82.25.188.0/23 maxlen: 24
82.26.116.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.38.174.0/24 maxlen: 24
82.39.223.0/24 maxlen: 24
82.47.240.0/23 maxlen: 24
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:60:15:c5:bd:5e:4c:96:ec:6a:8a:68:4a:a4:70:6d:cd:1e:29:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 10:52:43 2026 GMT
Not After : Sep 16 10:57:43 2027 GMT
Subject: CN=98439F4412AED949FF4154F16F810FF530E53969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:fd:fa:b0:22:92:ee:ea:e1:e0:72:7c:4e:
af:ab:09:f1:b2:06:16:c5:f9:ef:6f:3c:08:04:cf:
d7:50:85:25:43:6b:c9:8f:e3:06:c3:6a:5c:27:93:
c4:24:26:a1:ea:1b:dd:65:31:4c:a8:24:51:22:b4:
e4:43:0e:48:88:56:43:a3:86:f5:08:5d:f6:3d:c0:
e9:e1:99:42:9f:e2:69:2f:23:f3:55:bf:35:ed:5d:
65:43:25:56:45:1c:57:73:eb:65:10:bb:52:cf:20:
01:0f:c0:d5:3d:1a:f9:df:42:11:ec:38:18:d1:a4:
9e:c6:a8:4b:b9:d9:49:9f:47:90:19:91:29:4b:0c:
04:be:7b:a0:13:ec:ad:39:ff:b7:c8:86:f7:7b:72:
19:e3:4e:e9:21:c5:6f:33:47:5b:fb:f2:69:c1:a3:
2e:7c:0f:c7:47:a6:92:30:32:b1:04:71:8a:84:98:
7c:97:ee:58:08:c2:8e:e3:b1:89:9f:dc:16:0b:04:
a5:ea:e5:1f:cd:63:e3:44:fd:6a:8a:34:49:33:24:
9e:d3:8b:f6:a1:32:32:6b:fe:e8:57:f3:61:f6:12:
f4:34:8d:6d:c4:cb:9d:55:10:8e:fb:7d:4d:db:de:
fe:4d:db:65:a0:2d:83:1d:52:0a:22:21:71:b3:63:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:43:9F:44:12:AE:D9:49:FF:41:54:F1:6F:81:0F:F5:30:E5:39:69
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.67.0/24
82.21.74.0/24
82.21.93.0/24
82.21.103.0/24
82.21.110.0/24
82.21.113.0/24
82.21.119.0/24
82.21.122.0/24
82.21.124.0/24
82.21.132.0/24
82.21.139.0-82.21.140.255
82.21.143.0/24
82.21.148.0/24
82.21.152.0/24
82.21.155.0/24
82.21.157.0/24
82.21.163.0/24
82.22.61.0/24
82.24.92.0-82.24.99.255
82.24.116.0/22
82.24.128.0/20
82.24.148.0-82.24.171.255
82.24.176.0/22
82.24.196.0/22
82.25.146.0-82.25.159.255
82.25.162.0-82.25.173.255
82.25.176.0/22
82.25.182.0/23
82.25.188.0/23
82.26.116.0/24
82.26.176.0/20
82.38.174.0/24
82.39.223.0/24
82.47.240.0/23
IPv6:
2a13:9500:6::-2a13:9500:10:ffff:ffff:ffff:ffff:ffff
2a13:9500:1c::/46
Signature Algorithm: sha256WithRSAEncryption
37:94:31:59:29:e8:f5:3c:c9:6b:96:9a:37:f0:cb:44:ca:4d:
5e:a3:34:74:08:01:3d:e9:a5:a2:1e:ca:a0:d7:06:a0:ff:8a:
bc:e7:0d:e6:85:85:93:dd:34:fe:c0:05:97:34:c8:9b:6d:74:
a5:d7:23:c0:e5:6e:ac:5b:95:01:d3:b3:e9:0e:30:77:67:e5:
3e:a6:99:56:cb:14:c3:13:ad:1c:cd:35:ac:4c:ff:cf:4f:8a:
6f:23:1f:85:a2:5c:36:21:1d:4a:89:50:76:d5:46:d2:bf:87:
ea:e1:49:bc:a0:e8:8e:65:ba:fa:c0:28:dc:34:ea:96:49:2c:
17:5d:b3:24:22:14:3c:fc:c5:c4:f2:2b:05:fb:54:a6:82:98:
16:db:0e:26:0f:1d:39:9b:c3:09:65:79:9e:c0:76:8c:c4:c3:
6a:92:88:50:f1:5b:57:73:10:1d:a0:98:83:d1:10:97:ef:1a:
76:2c:3c:4f:25:03:8f:7b:03:f0:ec:51:74:7f:1d:5a:da:08:
f1:c1:17:a2:d3:45:28:e3:57:bd:16:e4:dc:d8:e4:7b:fc:5b:
b6:3c:59:f3:6a:b6:70:19:ff:95:48:3d:ca:32:ed:f7:7b:3d:
fc:52:8a:40:70:d7:c8:6e:28:e7:0f:6d:80:72:24:fa:17:78:
ad:91:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:58:06 2026 by rpki-client