Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: 01ufC8pL6Xasr5RuU1+qiqBGYhLow/a6pII9CjumL6M=
Subject key identifier: 08:09:78:52:E7:AB:AA:8D:07:B8:B5:AB:09:92:81:D9:CE:53:51:30
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 37C09079DB4D38E1A4606B349285A8AF7668E007
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
Signing time: Thu 31 Jul 2025 00:02:04 +0000
ROA not before: Wed 30 Jul 2025 23:57:04 +0000
ROA not after: Thu 30 Jul 2026 00:02:04 +0000
asID: 29802
IP address blocks: 193.176.129.0/24 maxlen: 24
194.147.6.0/24 maxlen: 24
194.147.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c0:90:79:db:4d:38:e1:a4:60:6b:34:92:85:a8:af:76:68:e0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 30 23:57:04 2025 GMT
Not After : Jul 30 00:02:04 2026 GMT
Subject: CN=08097852E7ABAA8D07B8B5AB099281D9CE535130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:9b:dc:12:29:ba:73:02:2e:a8:a6:4d:b0:
80:c1:c6:1e:01:96:a4:41:3a:3a:42:f8:2f:03:ed:
9b:56:36:5a:31:dc:b5:17:6f:2a:a8:7f:cb:82:49:
f0:f7:1a:e5:ae:f3:cb:ca:a4:45:4b:d3:e6:42:9d:
fb:4f:76:00:16:c6:32:29:d2:d6:c7:be:f8:3c:8c:
d7:9b:66:a7:55:88:9c:79:70:41:1b:f2:86:d9:fa:
a3:1c:ae:c0:3d:67:07:f8:46:b5:9d:4f:74:f7:c2:
85:84:95:90:1f:77:5b:c0:cf:c3:60:bc:1d:fb:79:
ca:89:42:19:f9:2e:03:4b:84:f1:25:c9:d3:28:3b:
81:f7:d4:b7:f4:4e:72:c2:65:c3:a0:10:0d:30:76:
62:46:6a:2e:6c:3f:6b:ee:1f:44:84:ed:a0:72:e6:
53:17:26:c4:2d:22:ac:37:c9:28:22:b1:bd:a9:1a:
bc:ea:25:09:38:12:22:29:2c:0c:97:0f:c6:3f:7d:
9e:2a:c1:d6:68:4d:d0:7c:97:d8:b5:53:a7:59:fb:
69:61:aa:47:6c:7a:42:af:e9:de:cf:9e:0f:8c:e3:
06:2e:32:d1:26:4e:6c:de:09:bc:88:ed:d7:5d:82:
91:7f:d5:f4:9a:0b:d2:2b:5e:91:29:b0:ad:ad:31:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:78:52:E7:AB:AA:8D:07:B8:B5:AB:09:92:81:D9:CE:53:51:30
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.129.0/24
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
52:c4:66:8a:88:69:74:03:ca:1d:7f:c4:da:4e:5e:28:9f:24:
1b:3d:11:ab:2d:00:59:2b:94:56:8e:b1:88:7e:84:5b:cc:02:
c7:e0:65:0e:e0:dc:b7:3a:64:7e:d8:0c:3c:70:24:c6:42:f4:
b0:10:43:8d:72:cf:5e:05:2f:48:72:54:e7:72:69:f8:ab:55:
e2:7b:00:6e:f1:11:a6:8f:c0:e6:99:4a:ee:3f:5b:72:02:a8:
2e:e5:25:41:bb:7d:0c:74:dd:d0:4f:8c:49:87:33:e0:9e:a6:
0c:ee:66:72:04:93:e4:5d:b1:6a:a4:d6:b6:4f:2c:79:3b:5f:
94:4f:0a:f1:f0:11:55:37:db:f9:31:61:6a:3d:9e:16:b4:c2:
d0:cc:d4:e9:9f:a1:98:3e:79:d6:bf:ce:60:c9:60:b7:7b:b4:
8d:5d:db:d8:c3:d0:15:f1:4f:29:74:a3:be:19:6c:09:d1:34:
77:7d:78:30:e7:74:67:62:fa:31:20:4a:75:c9:94:ec:cb:e1:
8f:45:56:a5:c0:8d:8b:70:2f:87:43:20:07:16:cb:af:3e:fc:
d2:a6:49:e3:36:5d:02:cb:08:b9:6b:f0:2b:03:1b:df:b0:3c:
cb:8b:c0:9c:ac:95:ba:d2:31:1e:12:df:a0:1c:3a:c9:f4:39:
a8:22:66:4c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUN8CQedtNOOGkYGs0koWor3Zo4AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA3MzAyMzU3MDRaFw0yNjA3MzAwMDAyMDRaMDMxMTAvBgNV
BAMTKDA4MDk3ODUyRTdBQkFBOEQwN0I4QjVBQjA5OTI4MUQ5Q0U1MzUxMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcZvcEim6cwIuqKZNsIDBxh4B
lqRBOjpC+C8D7ZtWNlox3LUXbyqof8uCSfD3GuWu88vKpEVL0+ZCnftPdgAWxjIp
0tbHvvg8jNebZqdViJx5cEEb8obZ+qMcrsA9Zwf4RrWdT3T3woWElZAfd1vAz8Ng
vB37ecqJQhn5LgNLhPElydMoO4H31Lf0TnLCZcOgEA0wdmJGai5sP2vuH0SE7aBy
5lMXJsQtIqw3ySgisb2pGrzqJQk4EiIpLAyXD8Y/fZ4qwdZoTdB8l9i1U6dZ+2lh
qkdsekKv6d7Png+M4wYuMtEmTmzeCbyI7dddgpF/1fSaC9IrXpEpsK2tMennAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUCAl4Uuerqo0HuLWrCZKB2c5TUTAwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADBsIED
BAHCkwYwDQYJKoZIhvcNAQELBQADggEBAFLEZoqIaXQDyh1/xNpOXiifJBs9East
AFkrlFaOsYh+hFvMAsfgZQ7g3Lc6ZH7YDDxwJMZC9LAQQ41yz14FL0hyVOdyafir
VeJ7AG7xEaaPwOaZSu4/W3ICqC7lJUG7fQx03dBPjEmHM+CepgzuZnIEk+RdsWqk
1rZPLHk7X5RPCvHwEVU32/kxYWo9nha0wtDM1OmfoZg+eda/zmDJYLd7tI1d29jD
0BXxTyl0o74ZbAnRNHd9eDDndGdi+jEgSnXJlOzL4Y9FVqXAjYtwL4dDIAcWy68+
/NKmSeM2XQLLCLlr8CsDG9+wPMuLwJyslbrSMR4S36AcOsn0OagiZkw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:50 2025 by rpki-client