Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: 5Uu1TvRTu6sfHwH9I4KUR5uBxRR1XTewIUY6R8pTwu4=
Subject key identifier: 05:8C:50:5E:61:FD:67:AC:2F:3B:49:A2:E3:1A:6B:DD:71:77:A9:C0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4D4D299C6D310D3A9CB696FC1B66E72AB3C03658
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Wed 01 Jul 2026 17:16:16 +0000
ROA not before: Wed 01 Jul 2026 17:11:16 +0000
ROA not after: Wed 30 Jun 2027 17:16:16 +0000
asID: 7029
IP address blocks: 51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4d:29:9c:6d:31:0d:3a:9c:b6:96:fc:1b:66:e7:2a:b3:c0:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 1 17:11:16 2026 GMT
Not After : Jun 30 17:16:16 2027 GMT
Subject: CN=058C505E61FD67AC2F3B49A2E31A6BDD7177A9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:b3:c7:18:29:43:10:f5:11:94:0c:1a:62:
65:05:ad:72:c1:82:d7:ed:8b:44:30:20:97:24:a5:
97:36:b1:cc:13:61:83:81:ef:68:6a:c7:ef:91:c6:
bd:85:dd:2e:2f:4c:c3:88:f5:b6:a8:67:d6:52:10:
d8:92:81:3a:a4:19:f4:da:27:1c:bd:33:03:23:9b:
56:60:ca:09:6f:44:d5:3a:ef:71:ff:57:24:8a:ad:
20:1f:c0:04:86:ba:dc:65:b2:26:0d:a2:bd:ee:f9:
cd:f8:ad:ab:d8:ae:49:13:fc:e7:8d:8d:3c:70:18:
31:df:b0:4b:6b:34:e9:72:4f:e0:dc:14:d3:1c:17:
ab:64:d5:6f:57:70:dc:78:53:a3:04:13:80:9b:b2:
3c:34:23:f4:ca:08:7d:db:71:39:2f:98:23:04:a5:
09:0f:e9:59:12:40:bc:93:e9:ab:5e:d9:52:04:4a:
4a:19:05:a5:4c:dc:08:ca:a1:4f:fb:25:2a:13:56:
71:18:fe:eb:37:43:12:c2:bc:e2:1f:85:f6:7d:82:
82:5d:a5:1e:c5:5b:24:bd:0e:05:b5:3c:69:0b:79:
49:ca:ed:e7:57:95:76:9c:06:a2:ae:48:8f:0d:01:
59:ab:eb:f8:eb:42:dd:b0:2e:f1:7e:14:64:7e:ce:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8C:50:5E:61:FD:67:AC:2F:3B:49:A2:E3:1A:6B:DD:71:77:A9:C0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.49.0-51.146.51.255
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0/24
51.194.55.0-51.194.59.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:fa:9c:88:57:97:b9:ec:59:f9:e4:10:8e:ed:e2:61:23:c4:
b6:6b:bb:c3:ef:d9:a2:14:c7:42:3e:11:89:ef:76:91:ec:30:
b9:d0:8e:a1:70:26:28:ee:d3:da:eb:b7:5e:f0:c8:0e:c2:5b:
87:6a:a8:25:b1:95:5d:01:89:51:86:49:f4:1a:ce:14:b1:7b:
19:fe:73:d9:72:8c:d0:10:77:98:dd:67:14:c2:6c:c0:a3:7c:
a5:bd:c9:68:0d:b2:86:e4:79:a7:62:8c:f9:d1:81:5f:77:35:
ff:2e:7d:b7:10:83:ea:cb:31:6d:d1:bf:8c:a5:91:c8:c9:9a:
98:50:3d:b2:ad:90:b4:1b:0c:76:c7:79:e0:2f:96:dc:61:be:
22:87:b2:eb:98:9b:49:38:d5:8e:65:46:d6:f1:0f:7d:72:78:
0c:41:a6:29:0c:19:30:db:89:6c:64:e5:ed:bb:d2:b7:ac:fa:
c2:b3:11:83:47:0b:7d:b3:f2:8b:3e:77:14:b5:89:d4:61:fd:
41:8f:f2:37:7f:d9:34:e1:56:70:5c:52:e2:0c:e0:c7:93:14:
5c:69:42:d6:8e:ea:67:a3:51:e4:09:45:70:41:00:9b:95:ed:
34:59:26:e9:15:10:f7:84:c0:18:58:8c:cb:1d:74:0a:7b:c7:
f6:e0:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:25 2026 by rpki-client