Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: pAOgLaWrytqXrVqqaJNLPmjF0hNA6CXyymEcs8Pp/gw=
Subject key identifier: C5:76:47:07:33:B2:3A:FF:0B:7E:A4:93:F2:99:06:C1:B3:97:AA:A2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 73FB998D3CF7DAC1FEFFDEC50EBC28008A8C4623
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Fri 18 Sep 2026 11:50:55 +0000
ROA not before: Fri 18 Sep 2026 11:45:55 +0000
ROA not after: Fri 17 Sep 2027 11:50:55 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.82.0/23 maxlen: 24
141.11.92.0/24 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.161.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fb:99:8d:3c:f7:da:c1:fe:ff:de:c5:0e:bc:28:00:8a:8c:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 18 11:45:55 2026 GMT
Not After : Sep 17 11:50:55 2027 GMT
Subject: CN=C576470733B23AFF0B7EA493F29906C1B397AAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:79:75:d7:04:fe:55:0c:fd:a5:b9:96:87:
59:ad:09:74:68:56:a9:30:62:c9:8f:59:36:33:25:
01:b4:dc:c6:d6:d7:20:f0:a9:5a:88:54:59:be:dc:
46:f9:d7:35:60:6a:f8:aa:ec:42:b6:9a:ab:78:98:
06:16:ae:0a:78:dc:39:01:54:fb:77:56:c5:bb:af:
4c:0e:7a:bb:89:a9:1d:b3:4d:69:45:85:d9:38:78:
81:3f:33:44:42:d6:46:a8:d0:25:21:97:b8:d8:17:
25:66:99:04:b4:82:69:a2:a2:db:f0:6f:bd:58:f8:
df:95:81:d2:9e:b2:a0:29:98:81:db:c7:db:d4:51:
b9:e7:7a:66:7d:b1:50:57:33:4d:10:4f:53:30:7f:
37:de:93:4c:7e:16:1d:4f:79:da:14:7e:e4:4a:71:
ea:cc:d1:c3:d5:78:17:09:d5:a6:5f:b4:30:b5:36:
21:19:3b:f3:0b:32:9b:4a:5d:01:c7:ec:f1:a4:0c:
e0:30:b6:3e:24:94:4b:ae:36:0f:3f:65:fc:c0:bf:
84:13:11:db:7e:ba:ca:07:72:91:cd:44:e0:52:87:
aa:4e:14:3f:55:ab:ab:8c:80:f0:76:08:e5:90:4c:
fb:5c:2d:14:c2:15:5a:e4:16:18:c7:e6:9d:3a:92:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:76:47:07:33:B2:3A:FF:0B:7E:A4:93:F2:99:06:C1:B3:97:AA:A2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.82.0/23
141.11.92.0/24
141.11.121.0/24
141.11.161.0/24
141.11.186.0/24
141.11.198.0/24
141.11.216.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b2:4d:fb:ea:18:41:8f:5a:e7:22:a1:ee:3a:5f:d6:a7:da:
2a:3d:60:0b:30:71:2e:7f:94:33:49:d8:4e:2d:e3:51:c4:8a:
46:d4:a6:d3:86:16:a6:8d:5c:f3:55:1c:b0:26:9b:c3:cb:ce:
4a:1b:ce:ec:47:ee:b2:d6:fb:5a:8b:dd:80:60:eb:d7:a3:78:
05:ef:09:d1:3b:83:6a:be:2f:56:34:05:d4:97:9f:51:4e:4c:
c8:4c:c1:42:d9:ac:eb:35:99:c9:89:4a:c6:1b:81:55:41:02:
e0:e1:c7:2e:61:a6:98:38:36:da:71:82:4a:f5:cd:3b:de:08:
f0:ba:43:de:56:86:05:db:95:ef:fc:41:a8:91:74:46:07:a8:
04:40:38:fd:aa:78:68:f5:76:06:0e:91:58:e2:c9:2e:5a:5f:
da:54:9f:97:a5:93:5d:fa:9a:1b:c9:ea:3f:ca:8f:c4:63:88:
0a:ee:70:a6:fd:08:2c:f7:fe:5c:bd:a8:a5:a8:39:6b:2a:75:
95:ba:b5:6e:52:9e:42:66:b2:7b:6f:09:67:3b:dd:9e:38:01:
4c:c9:f5:79:9e:57:55:a3:9d:9b:34:83:98:5a:b1:0a:0e:51:
10:f0:1b:81:5b:8f:d6:5c:bc:1e:ae:e2:44:78:22:2c:75:7f:
4e:1d:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:51:16 2026 by rpki-client