Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: BO7wepNHNtKCcDizVwNNP7zy0cpA5F+wQWQLga+B0G8=
Subject key identifier: 63:8D:8F:42:5E:A6:BD:B8:4B:93:B4:F8:EA:A4:A6:12:C1:66:50:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07151A4259ACB87029E785416535E06AD2DD870D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
Signing time: Sat 08 Aug 2026 00:02:05 +0000
ROA not before: Fri 07 Aug 2026 23:57:05 +0000
ROA not after: Sat 07 Aug 2027 00:02:05 +0000
asID: 7029
IP address blocks: 140.233.192.0/18 maxlen: 24
143.14.204.0/24 maxlen: 24
143.14.205.0/24 maxlen: 24
143.14.206.0/24 maxlen: 24
143.14.207.0/24 maxlen: 24
143.14.211.0/24 maxlen: 24
143.14.212.0/24 maxlen: 24
143.14.215.0/24 maxlen: 24
143.14.232.0/21 maxlen: 24
155.117.172.0/24 maxlen: 24
155.117.173.0/24 maxlen: 24
155.117.174.0/24 maxlen: 24
155.117.175.0/24 maxlen: 24
155.117.176.0/24 maxlen: 24
155.117.177.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:15:1a:42:59:ac:b8:70:29:e7:85:41:65:35:e0:6a:d2:dd:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 23:57:05 2026 GMT
Not After : Aug 7 00:02:05 2027 GMT
Subject: CN=638D8F425EA6BDB84B93B4F8EAA4A612C166508F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:b2:da:bf:91:42:60:6d:36:fc:02:6a:51:
d6:7a:72:51:d6:b7:c3:2e:4c:0f:8a:b8:04:24:0f:
85:70:4b:50:50:9e:ab:5e:e7:89:29:7c:e5:c7:cb:
9e:d6:99:fe:45:0f:96:04:c5:8a:31:2b:96:43:28:
83:ad:4e:20:2a:74:d4:55:73:bf:50:32:cf:8b:07:
46:6a:15:d4:24:15:0b:6a:9a:a0:07:4d:76:f3:9f:
3d:7f:7d:4d:80:f2:34:44:dc:d7:ec:41:f0:b0:2a:
e4:81:77:cf:f8:d6:d4:bd:06:3f:7a:ca:62:56:97:
37:5e:03:76:b1:73:ea:f9:79:37:a0:ef:f6:22:5c:
b2:43:d7:56:c0:db:2f:33:fe:56:67:18:25:2c:a9:
fc:f9:9d:30:16:b7:ba:55:61:09:45:c7:44:8e:de:
97:3a:69:27:6d:ce:7f:e3:38:7f:41:40:08:ec:84:
e5:41:b3:88:0c:a6:ef:04:93:20:b1:2e:60:c5:83:
55:4d:d0:c0:74:b7:45:9a:ab:f2:d2:5c:b2:9c:29:
a0:10:c5:41:59:e7:17:91:33:13:ec:f0:08:59:46:
b1:53:06:9f:12:b5:b7:f8:41:06:62:90:ff:b0:c7:
27:3e:0a:aa:af:04:7c:f3:09:a7:96:99:7c:81:88:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:8F:42:5E:A6:BD:B8:4B:93:B4:F8:EA:A4:A6:12:C1:66:50:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
143.14.204.0/22
143.14.211.0-143.14.212.255
143.14.215.0/24
143.14.232.0/21
155.117.172.0-155.117.177.255
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:98:92:87:d9:9a:8d:6f:00:91:79:27:3c:49:97:9f:90:
3a:8f:5e:67:83:a2:e8:43:93:93:42:98:65:c0:c5:69:58:37:
82:ad:85:ce:66:0d:94:e4:a8:e2:09:54:af:47:34:43:5f:f5:
c1:ec:4c:a5:7b:31:95:1a:b7:98:14:e5:73:6a:8a:0a:68:d0:
63:fd:4b:92:c6:ec:b9:c9:e3:05:1b:53:a0:42:6c:4a:47:3e:
00:a8:ca:a4:0a:76:2d:9f:e1:49:98:50:7b:1f:3b:4f:ce:7c:
fd:7b:b5:77:b8:b2:c8:36:b5:11:3f:42:22:be:36:ea:32:45:
f9:43:3d:93:1e:be:58:7a:f3:d8:19:f0:d5:04:bf:25:51:f7:
51:69:6e:62:0e:9d:19:3c:4c:b5:72:be:62:2c:4d:ed:8b:15:
09:d6:6a:c0:2a:b2:48:02:f0:59:d7:82:bc:43:0e:bc:08:40:
5f:14:d6:3c:01:9e:d1:ea:5d:bf:0a:5f:31:b3:71:78:ff:9f:
18:8e:4e:41:a6:b5:53:fa:2d:53:80:78:b4:ed:10:99:f2:15:
20:36:c6:00:40:c8:a1:81:a0:9f:30:e4:dc:ef:5e:66:60:10:
d3:e7:1a:3d:62:5e:90:d9:de:cc:ee:18:80:5f:24:0b:56:b9:
b9:ce:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:54:11 2026 by rpki-client