Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: XcM4yoni6xKJ5bAUSIn1n6nrhrt59n5yuaLjcg/rxM4=
Subject key identifier: 8B:A9:EA:BB:E1:08:73:81:2D:73:12:61:9F:01:FC:6A:5B:15:C1:33
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7AB4CDAB748F399B8BE7B7DDF2F3BD326D2765BB
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Fri 06 Jun 2025 10:00:10 +0000
ROA not before: Fri 06 Jun 2025 09:55:10 +0000
ROA not after: Fri 05 Jun 2026 10:00:10 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.105.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 20:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b4:cd:ab:74:8f:39:9b:8b:e7:b7:dd:f2:f3:bd:32:6d:27:65:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 6 09:55:10 2025 GMT
Not After : Jun 5 10:00:10 2026 GMT
Subject: CN=8BA9EABBE10873812D7312619F01FC6A5B15C133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:5b:27:a5:de:9d:05:63:f6:15:5b:64:48:
f3:a2:d3:60:ae:1b:7c:e4:64:c9:ee:9a:da:4b:eb:
63:24:0d:28:bc:cc:6a:c3:8c:c2:9f:ea:8a:ec:8b:
cb:d5:07:93:75:95:72:aa:72:2d:db:3b:b8:03:b8:
49:36:a0:07:17:c6:1d:9e:1c:73:88:21:35:cf:5d:
49:69:65:3f:66:49:cb:c3:a2:66:40:d5:dc:4a:5a:
04:3f:b4:44:6c:73:c5:cf:82:02:98:fd:9f:fd:d8:
5a:dd:8d:40:61:82:e3:2e:cf:fc:ac:cb:64:df:10:
81:58:b7:5f:20:31:1b:0d:8d:a0:3c:b5:8b:44:9e:
92:64:49:7a:1e:81:9b:97:c7:73:e1:f3:8d:c3:41:
55:b6:9b:88:3b:d9:ee:72:3b:da:34:b2:b0:76:eb:
94:22:d5:4c:0d:87:1d:99:3d:2a:a2:a0:73:64:2c:
24:78:62:35:57:ac:8c:3d:6c:ff:78:c8:ab:7b:00:
b0:64:50:f4:9c:00:bf:97:62:c2:1d:b1:fc:e4:d7:
ed:ba:33:51:4f:3a:82:77:d5:ca:15:55:1a:c9:2f:
78:0b:2a:9a:83:29:bf:fa:be:dc:36:5f:58:80:dd:
2d:8a:31:9c:74:2b:d7:62:60:6a:b0:6f:7e:8c:e8:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A9:EA:BB:E1:08:73:81:2D:73:12:61:9F:01:FC:6A:5B:15:C1:33
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.105.0/24
141.11.115.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:9c:13:5f:ca:b4:d2:2e:ed:a9:8e:65:3e:e1:df:d6:52:7c:
3d:1f:af:48:be:70:90:ff:ca:f3:92:2d:5d:7e:77:14:08:05:
52:cb:9f:94:97:88:9d:ea:ed:ff:41:40:43:4b:c1:2b:ab:a8:
af:d3:86:2e:a0:55:d2:c5:65:f6:10:b5:18:4a:96:6e:9c:20:
71:b4:89:39:12:a5:54:3c:4e:d8:8e:ef:47:be:20:c6:94:83:
8a:19:2a:7e:57:10:f6:77:fa:9e:9e:7c:fd:46:e3:cb:2a:29:
f4:ed:65:f8:9c:6f:fe:37:37:0f:61:30:d4:f5:c7:19:4b:9a:
14:ab:b1:75:fd:d9:59:08:c1:2b:6b:35:5a:c1:30:aa:c7:d8:
19:4a:89:2b:4c:12:c3:e4:73:2b:df:ad:6c:a9:36:8f:5a:ac:
b2:eb:a0:b1:15:52:9c:05:44:b1:47:a2:a7:6b:71:c8:0f:89:
8f:d0:b4:f0:d2:1e:90:b6:93:92:9c:ef:d9:a5:60:76:28:54:
e0:3c:81:ae:5a:0d:fa:d8:60:42:df:f0:ee:8d:24:a7:38:8f:
4c:b1:77:5e:77:d4:d9:39:1b:8e:dd:c3:2a:03:3b:b4:af:96:
53:74:23:8b:1f:92:62:ed:9c:38:12:ec:a6:6d:ed:20:5c:55:
7b:6a:69:38
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUerTNq3SPOZuL57fd8vO9Mm0nZbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA2MDYwOTU1MTBaFw0yNjA2MDUxMDAwMTBaMDMxMTAvBgNV
BAMTKDhCQTlFQUJCRTEwODczODEyRDczMTI2MTlGMDFGQzZBNUIxNUMxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCciVsnpd6dBWP2FVtkSPOi02Cu
G3zkZMnumtpL62MkDSi8zGrDjMKf6orsi8vVB5N1lXKqci3bO7gDuEk2oAcXxh2e
HHOIITXPXUlpZT9mScvDomZA1dxKWgQ/tERsc8XPggKY/Z/92FrdjUBhguMuz/ys
y2TfEIFYt18gMRsNjaA8tYtEnpJkSXoegZuXx3Ph843DQVW2m4g72e5yO9o0srB2
65Qi1UwNhx2ZPSqioHNkLCR4YjVXrIw9bP94yKt7ALBkUPScAL+XYsIdsfzk1+26
M1FPOoJ31coVVRrJL3gLKpqDKb/6vtw2X1iA3S2KMZx0K9diYGqwb36M6EfHAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUi6nqu+EIc4EtcxJhnwH8alsVwTMwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACNCyMD
BACNCyYDBACNC2kDBACNC3MDBADCPFowDQYJKoZIhvcNAQELBQADggEBAMqcE1/K
tNIu7amOZT7h39ZSfD0fr0i+cJD/yvOSLV1+dxQIBVLLn5SXiJ3q7f9BQENLwSur
qK/Thi6gVdLFZfYQtRhKlm6cIHG0iTkSpVQ8TtiO70e+IMaUg4oZKn5XEPZ3+p6e
fP1G48sqKfTtZficb/43Nw9hMNT1xxlLmhSrsXX92VkIwStrNVrBMKrH2BlKiStM
EsPkcyvfrWypNo9arLLroLEVUpwFRLFHoqdrccgPiY/QtPDSHpC2k5Kc79mlYHYo
VOA8ga5aDfrYYELf8O6NJKc4j0yxd1531Nk5G47dwyoDO7SvllN0I4sfkmLtnDgS
7KZt7SBcVXtqaTg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:34 2025 by rpki-client