Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: I/vfl4ThG6Zr7/3vcXeSasklRzNkSuliccyvsw1aHGM=
Subject key identifier: 6B:FE:26:28:08:83:E2:A2:9F:28:D9:1B:06:3B:91:E3:0F:20:D5:1C
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 1B54E5E675B4066652E801EC499B0487A8CFF059
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS7029.roa
Signing time: Wed 07 Oct 2026 22:21:48 +0000
ROA not before: Wed 07 Oct 2026 22:16:48 +0000
ROA not after: Wed 06 Oct 2027 22:21:48 +0000
asID: 7029
IP address blocks: 46.33.31.0/24 maxlen: 24
95.175.148.0/24 maxlen: 24
109.175.153.0/24 maxlen: 24
109.175.163.0/24 maxlen: 24
109.175.164.0/24 maxlen: 24
109.175.165.0/24 maxlen: 24
109.175.171.0/24 maxlen: 24
109.175.182.0/24 maxlen: 24
109.175.191.0/24 maxlen: 24
109.175.198.0/24 maxlen: 24
109.175.199.0/24 maxlen: 24
109.175.201.0/24 maxlen: 24
109.175.202.0/24 maxlen: 24
109.175.203.0/24 maxlen: 24
109.175.204.0/24 maxlen: 24
130.43.143.0/24 maxlen: 24
130.43.156.0/24 maxlen: 24
130.43.166.0/24 maxlen: 24
130.43.178.0/24 maxlen: 24
130.43.179.0/24 maxlen: 24
130.43.184.0/24 maxlen: 24
130.43.188.0/24 maxlen: 24
130.43.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:54:e5:e6:75:b4:06:66:52:e8:01:ec:49:9b:04:87:a8:cf:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Oct 7 22:16:48 2026 GMT
Not After : Oct 6 22:21:48 2027 GMT
Subject: CN=6BFE26280883E2A29F28D91B063B91E30F20D51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:4c:95:f1:b6:6b:16:3b:b2:5a:fd:96:35:
86:af:51:15:d6:b6:85:cf:c3:de:d1:f8:b8:b9:0f:
22:2f:be:5a:c2:06:5c:3c:2e:db:7f:03:74:74:00:
9b:b8:d5:4e:3b:22:e3:19:ac:0d:4d:50:c6:3a:6d:
30:60:89:c6:87:ee:9f:b7:97:15:2f:2a:62:22:cb:
94:79:f3:11:9f:c8:0c:cd:55:ee:fa:12:25:1e:d4:
6d:15:31:fb:4b:0a:92:3f:ff:70:1e:b0:61:41:1b:
a5:9f:5a:85:77:d9:9b:84:b1:7e:bc:85:fb:4b:18:
84:53:7b:2c:a6:f9:6c:db:b5:d3:86:af:8c:a8:e9:
05:29:da:fa:8b:90:81:1a:9d:60:c6:3d:04:be:36:
2d:59:a8:17:01:84:94:1b:c1:8b:66:7e:21:02:5d:
7b:b9:d1:4c:92:f8:af:f4:e9:62:c8:ac:5c:7b:87:
ca:7c:1b:a4:2c:b0:a7:e1:30:7c:30:b4:b6:88:5d:
fe:b4:c9:91:b0:c6:0c:e9:36:fa:df:a0:5a:8c:18:
9c:37:3d:1c:fa:75:ea:86:02:79:ce:fa:c6:d8:30:
07:ae:b5:46:c8:98:ab:f1:22:11:a7:6a:7c:2b:b1:
65:0d:67:88:c5:29:62:73:59:81:51:da:67:4b:14:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:26:28:08:83:E2:A2:9F:28:D9:1B:06:3B:91:E3:0F:20:D5:1C
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.31.0/24
95.175.148.0/24
109.175.153.0/24
109.175.163.0-109.175.165.255
109.175.171.0/24
109.175.182.0/24
109.175.191.0/24
109.175.198.0/23
109.175.201.0-109.175.204.255
130.43.143.0/24
130.43.156.0/24
130.43.166.0/24
130.43.178.0/23
130.43.184.0/24
130.43.188.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ce:2b:93:9b:39:7d:25:1a:c1:c3:bf:da:eb:f7:47:f3:75:
50:3a:4e:61:ca:4b:02:22:f5:cd:5a:27:ce:af:2f:a2:29:86:
4c:fc:27:a5:1f:6b:61:d5:03:9e:41:49:2e:7b:fc:e5:05:14:
4c:12:81:4f:6a:15:f3:6f:0c:9b:9b:bf:4c:09:50:43:a9:89:
6a:0f:94:5a:b5:eb:37:09:a0:5c:2e:40:1f:11:2c:f4:3d:a9:
6c:49:dd:2c:c8:7b:4f:f7:3c:28:f2:8d:35:95:1d:9d:ca:07:
52:51:5e:a6:fc:1d:94:e1:56:7d:b7:b6:8d:9a:bf:89:f6:2b:
4c:15:fd:43:d8:78:d6:05:39:ca:eb:27:a7:6c:ba:31:ff:ba:
f8:e9:bf:72:f5:e9:62:1a:ed:00:f9:95:e6:78:71:24:f7:fa:
81:1e:87:32:9f:4a:7c:20:76:5b:39:19:c6:29:25:e8:88:e5:
9e:ac:d8:e9:dc:0d:7a:f7:f5:6a:b6:56:b3:af:2f:e3:f2:7d:
c8:c0:27:2a:16:de:78:f5:ca:ca:e0:44:c1:98:4e:b1:00:6f:
2e:a7:7b:b9:2e:48:56:77:94:24:81:a9:80:a5:dd:88:06:69:
eb:d9:80:a4:d6:84:9b:55:79:bf:57:ed:03:81:75:20:45:34:
e2:96:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:57:56 2026 by rpki-client