Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: +T0cLLZMpi/q2Vo9jEkavMqlXyV42e3VMvYLg5dqPBs=
Subject key identifier: 32:85:99:F5:E0:C4:81:E1:06:36:E5:E5:4E:3E:70:11:47:5D:FB:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3846C3473433C0382B7A152EDD68DC88B3CAD59D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Fri 29 May 2026 12:46:40 +0000
ROA not before: Fri 29 May 2026 12:41:40 +0000
ROA not after: Fri 28 May 2027 12:46:40 +0000
asID: 7029
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.162.0/24 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:46:c3:47:34:33:c0:38:2b:7a:15:2e:dd:68:dc:88:b3:ca:d5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 29 12:41:40 2026 GMT
Not After : May 28 12:46:40 2027 GMT
Subject: CN=328599F5E0C481E10636E5E54E3E7011475DFB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:84:66:07:ab:52:8d:27:8b:1c:d7:f7:12:
5b:68:de:04:3d:87:dc:f4:78:ca:2c:50:fb:7c:7f:
b3:20:27:e6:0c:b2:85:6d:29:34:37:d2:37:99:97:
6c:d0:3e:99:c5:c3:52:fd:54:94:a0:a1:52:70:39:
f4:99:3a:99:72:2e:57:8f:51:9f:6c:8c:e7:b1:dc:
5e:e2:26:7f:0d:02:36:bd:e2:8c:a4:a3:b2:41:d0:
e9:82:46:68:06:ec:e4:1d:ef:7c:fd:a4:8b:6c:54:
60:be:58:21:46:73:7d:72:55:2b:56:22:ce:45:54:
d2:0e:83:08:43:56:23:82:a7:10:b5:96:e2:02:ae:
cd:74:fb:58:a5:b3:87:48:77:00:de:ac:de:84:5a:
0e:be:e3:56:96:67:19:a9:21:2e:83:cf:69:83:c9:
e3:94:37:87:41:c0:62:d8:48:e0:7b:f6:34:51:c0:
8d:93:26:69:a7:f5:84:0c:d4:90:8d:68:f9:4f:bd:
35:98:10:17:16:06:7c:52:d8:ec:15:89:91:c0:89:
e2:b9:71:0e:37:ba:1c:93:69:83:db:0a:e6:b4:83:
d1:49:82:1c:7b:40:39:12:54:11:94:95:a4:af:a0:
e5:48:9a:d1:2e:df:09:c0:1d:d3:53:b6:a6:36:d0:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:99:F5:E0:C4:81:E1:06:36:E5:E5:4E:3E:70:11:47:5D:FB:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0/24
51.194.55.0-51.194.59.255
78.105.128.0/21
78.105.162.0/24
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:24:16:ea:18:d6:5a:36:61:93:6f:ca:06:53:3d:b8:e3:4e:
bd:fc:fd:69:e5:54:a7:42:ec:a3:04:0d:f5:a1:20:7a:0d:ba:
a9:15:e9:53:8c:55:11:7b:a5:93:c9:c5:d3:01:a4:d3:a0:68:
72:6b:92:f4:7e:55:70:ae:c3:9d:90:b6:5d:64:3e:89:df:0c:
c3:ff:56:74:c1:99:a4:26:79:f8:ce:a3:dc:7b:b7:e5:af:d6:
b9:16:24:df:09:75:69:92:ae:41:91:ef:de:03:e7:b8:23:c4:
e2:86:04:7d:7a:67:b7:82:8d:37:69:d7:63:ac:fe:78:fc:aa:
9e:7f:bc:c9:f4:4c:89:95:b8:88:af:ce:4b:93:26:64:33:d7:
6b:bc:be:e1:c3:0a:07:00:bf:f8:bb:1f:d6:e2:a9:83:6a:f5:
93:2b:31:d4:9b:49:eb:50:d8:e7:c3:19:e1:0c:09:4f:bc:47:
ce:84:3d:df:57:e5:c4:92:19:e7:a0:9a:29:89:42:d3:d7:2b:
ff:a6:20:70:a1:91:8f:6e:8b:98:96:fb:d6:b1:32:69:22:56:
98:6c:33:f3:1c:59:11:62:25:30:e1:47:2e:41:d3:d3:64:0c:
33:91:c6:67:4e:80:68:d6:ff:2b:7b:9a:59:30:bf:84:64:db:
dc:1a:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:37 2026 by rpki-client