Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: wkUsCOPjvO7McHsjxBjs++SB/soSU85PnQmns6pZ5cA=
Subject key identifier: 41:E3:56:FD:E0:D1:3E:6C:42:A6:88:EB:50:E2:19:17:57:C3:38:8D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 32285EE93A5C4FA232AC9F605B66A6D10B61492F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Thu 09 Apr 2026 13:19:50 +0000
ROA not before: Thu 09 Apr 2026 13:14:50 +0000
ROA not after: Thu 08 Apr 2027 13:19:50 +0000
asID: 7029
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.53.0/24 maxlen: 24
51.194.54.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:28:5e:e9:3a:5c:4f:a2:32:ac:9f:60:5b:66:a6:d1:0b:61:49:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 9 13:14:50 2026 GMT
Not After : Apr 8 13:19:50 2027 GMT
Subject: CN=41E356FDE0D13E6C42A688EB50E2191757C3388D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:5d:40:a1:9d:29:05:5e:a6:26:51:29:9c:
2e:54:53:e2:19:aa:9c:6b:d7:b7:bf:88:1c:33:db:
60:ae:6e:22:6d:3a:73:85:60:7f:c0:8e:05:20:78:
7e:8b:db:33:70:4d:c3:4b:d8:64:e0:6c:03:aa:80:
73:4c:93:a8:43:1a:0b:12:d3:ab:ea:ac:cc:8c:2f:
d6:38:24:77:ca:40:58:3b:78:65:e1:9e:e6:59:f1:
f1:5d:d8:22:cf:56:ae:20:60:85:23:b9:c6:61:8b:
47:2d:12:ad:8d:c3:ef:d3:a9:ef:b6:73:59:04:2a:
f1:aa:c8:bb:51:ad:36:b6:18:b5:6c:14:bd:b6:99:
e8:ae:07:00:cb:1c:78:44:e3:ce:e3:5d:16:5e:dc:
9f:86:29:d6:40:37:be:08:a6:b2:34:31:ee:29:3b:
b8:83:b1:5f:8f:02:db:65:b9:7b:37:2e:a4:d0:c3:
17:7a:d3:dd:d2:32:d8:43:66:67:5f:0c:2f:5e:78:
ea:f2:5a:34:a9:c5:d9:93:dc:aa:58:19:35:ab:57:
21:3f:a6:d3:50:01:88:1b:6b:16:fa:e3:c8:93:c5:
bc:50:7a:7f:a1:d4:24:18:63:47:4a:65:d9:68:23:
e1:67:b8:73:18:e2:91:b7:ad:74:66:4a:50:3e:6e:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:56:FD:E0:D1:3E:6C:42:A6:88:EB:50:E2:19:17:57:C3:38:8D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0-51.194.59.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:da:b3:44:a2:4d:45:6f:a3:1b:d3:3e:af:97:55:95:f6:ac:
6d:b5:64:79:c4:c6:28:20:d0:b4:4f:42:79:07:eb:e8:85:45:
72:56:60:3c:d2:2f:7c:df:95:95:80:27:24:b4:8e:37:18:42:
e4:1a:6d:fa:9e:71:2b:06:a0:d2:53:ee:c1:f9:f2:7d:d9:d3:
33:8e:e4:3b:f3:27:99:84:58:a7:85:24:3e:6c:45:a1:13:3c:
5c:f3:8b:36:91:fd:c6:f1:2a:43:b4:b1:43:b1:94:44:96:bb:
55:d8:ec:91:e7:db:59:bd:49:03:ef:ad:8a:05:ca:ed:59:0a:
66:b1:fd:25:06:82:8c:54:3b:97:f3:43:b7:05:2a:05:cb:b4:
8f:04:83:df:ed:85:37:6e:ca:47:20:fa:92:56:c6:f8:a1:bc:
2e:94:92:55:e8:28:a2:e2:39:b5:42:10:8c:0d:53:80:82:33:
51:23:91:b9:a9:61:d9:8d:27:67:e0:8c:14:d6:dd:46:ac:f9:
19:53:74:f0:59:35:cc:5b:65:27:08:5f:91:40:e0:47:de:6f:
50:31:41:b6:07:02:aa:e8:63:02:68:98:13:14:7b:09:84:9d:
c3:3c:09:1b:d7:a3:58:59:7c:26:56:61:61:95:b7:6d:0b:41:
02:70:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:17:29 2026 by rpki-client