Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: rTGJUCL5Y1z4FcoaMKpQnwmkg1ZkiWwOvulgBKKwkaE=
Subject key identifier: CA:3B:95:87:71:A7:D9:81:B3:C2:89:6A:8A:63:F2:A2:65:09:73:36
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7C71B2313016530AFF57FA82B97ECE3CAE4D55A7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Tue 10 Feb 2026 00:15:51 +0000
ROA not before: Tue 10 Feb 2026 00:10:51 +0000
ROA not after: Tue 09 Feb 2027 00:15:51 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.82.0/23 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:71:b2:31:30:16:53:0a:ff:57:fa:82:b9:7e:ce:3c:ae:4d:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 10 00:10:51 2026 GMT
Not After : Feb 9 00:15:51 2027 GMT
Subject: CN=CA3B958771A7D981B3C2896A8A63F2A265097336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:ff:25:f5:a9:6b:bd:01:45:b9:41:79:a1:
a1:5e:39:47:1f:05:17:ec:2f:b4:e3:23:15:d1:35:
2c:4b:15:af:21:9f:17:06:a1:3f:0f:7e:fc:cb:4d:
89:ce:d6:e2:15:df:c0:fa:9d:e1:a2:ed:75:ff:04:
43:7d:1c:1b:5f:95:f4:fe:b6:f3:cf:be:66:fe:34:
20:c9:aa:4c:1b:48:6d:d4:9a:d7:fa:4c:3e:cb:7f:
ee:30:f2:39:18:3f:0e:55:a7:24:56:c7:ee:b4:12:
fa:94:93:34:93:9c:8d:19:21:61:c1:75:1c:f2:8a:
d3:dd:01:8f:4b:a8:48:0d:32:fd:27:01:bd:84:ac:
28:95:44:40:7f:ae:f6:fc:08:d7:a4:e1:81:0c:b1:
73:32:b7:6c:f3:31:1b:81:0d:ed:16:b6:40:82:9b:
b4:c7:49:cd:80:6a:b3:f3:72:a8:30:a3:2a:9e:bd:
56:c5:a0:d8:7a:3c:3a:1c:79:2c:6b:71:76:a9:2b:
d2:63:a6:1e:bf:f6:02:09:4d:ff:22:b1:b8:4f:cc:
2a:aa:f0:7b:88:71:af:02:af:d2:9b:8a:62:73:ca:
41:fb:4e:a9:be:26:1e:a5:c5:63:5e:06:73:e5:0d:
d5:e3:6e:86:6c:df:39:c7:e6:7f:d4:9d:c7:f8:1a:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:95:87:71:A7:D9:81:B3:C2:89:6A:8A:63:F2:A2:65:09:73:36
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.82.0/23
141.11.121.0/24
141.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f1:15:41:52:7c:70:57:9d:43:aa:2d:86:84:e4:c3:6e:2e:
36:2b:51:b6:91:e3:6c:7c:71:d7:be:84:0f:49:db:04:f0:c6:
22:43:7a:be:34:83:20:a1:bc:13:e3:74:b0:0b:0e:4a:22:62:
ca:8e:9f:0a:64:24:67:76:e0:cc:c2:e3:81:63:95:f7:ba:5f:
1d:11:23:b1:a1:e4:df:87:98:02:a5:40:ae:90:b9:8c:87:1a:
37:0d:fb:8c:c8:a9:f9:db:eb:10:9a:8d:8e:18:e2:90:85:00:
94:92:f4:e2:d9:a0:0e:44:b7:3d:d0:c8:be:a6:d9:4d:94:64:
e1:7f:b2:8c:6e:4a:04:74:b3:22:b0:5c:15:14:29:26:29:c2:
31:68:6f:f5:a5:c6:24:2d:80:e7:97:86:ad:1b:e5:47:b2:db:
34:ef:fc:21:db:34:cb:11:9f:b9:33:0d:30:60:d9:5e:f3:e6:
f9:cf:71:46:3b:43:e6:cc:2b:37:c6:fb:69:91:d4:a3:53:e3:
62:e8:73:ca:c4:17:82:e3:27:85:a8:2d:6c:ba:5d:f2:86:74:
55:3a:36:68:66:97:89:bd:a8:7a:dd:5c:76:d4:14:fd:86:59:
96:a1:d1:f7:0d:97:9f:54:5d:bb:03:e1:c6:19:52:de:49:cf:
96:7f:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:48:56 2026 by rpki-client