Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: C7Hl1k7ZeVq6gnLsYHIm/KKwvtlt55uNR5QB0ZDkgW0=
Subject key identifier: E8:5B:56:19:07:A3:CD:BA:C9:AE:8F:BE:9C:E0:D6:56:FF:01:23:FC
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 435F78A1C5B4518F03496576809B1838BB34D091
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Mon 05 Oct 2026 20:41:01 +0000
ROA not before: Mon 05 Oct 2026 20:36:01 +0000
ROA not after: Mon 04 Oct 2027 20:41:01 +0000
asID: 7029
IP address blocks: 51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
94.116.36.0/22 maxlen: 24
94.116.72.0/22 maxlen: 24
94.194.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5f:78:a1:c5:b4:51:8f:03:49:65:76:80:9b:18:38:bb:34:d0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 5 20:36:01 2026 GMT
Not After : Oct 4 20:41:01 2027 GMT
Subject: CN=E85B561907A3CDBAC9AE8FBE9CE0D656FF0123FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:8a:8f:df:99:ff:d0:07:f6:31:4c:50:37:
a6:5e:dc:50:6a:d7:8a:09:d4:f1:4e:49:6c:a5:bf:
de:3a:8c:d6:09:25:5f:fe:5a:52:e8:76:3e:dd:4d:
68:6d:c2:a5:39:53:95:84:bc:2f:63:dd:13:6a:b1:
92:9e:59:84:99:5a:0b:04:df:77:bd:ac:a3:a7:43:
a6:19:39:28:46:a7:18:f7:e3:22:60:d0:77:33:79:
61:1d:99:f8:2a:d5:8c:6f:2c:05:a7:c7:9d:bd:17:
66:c8:5e:a6:0a:da:87:cf:44:ec:3f:6a:4e:ab:d6:
e7:d3:f6:df:c8:aa:df:4b:8c:88:a9:1e:8c:24:b7:
3f:5e:5a:1f:95:ed:94:e8:47:9a:bc:95:4f:ea:92:
fb:2a:ee:6c:4b:b3:22:06:8c:f4:3d:6e:6f:a6:75:
50:c0:b5:12:d4:33:12:f8:5c:2c:71:c0:3d:2f:6a:
7d:3f:6f:37:87:5e:09:39:5f:00:c9:4c:d5:97:96:
ed:cd:22:e7:13:f4:b3:91:b4:5f:d8:19:aa:9c:25:
5c:99:f5:ce:27:47:12:91:7b:49:0c:50:4a:3e:d2:
6c:2c:58:34:cd:a7:d9:ec:9d:8a:55:68:ef:8e:c4:
1e:24:a7:9f:26:d5:e3:b9:4f:0c:37:f6:dd:d9:f4:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:56:19:07:A3:CD:BA:C9:AE:8F:BE:9C:E0:D6:56:FF:01:23:FC
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.49.0-51.146.51.255
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0/24
51.194.55.0-51.194.59.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
94.116.36.0/22
94.116.72.0/22
94.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
96:75:4c:ed:fb:67:01:51:2b:eb:86:9c:7a:c0:22:72:13:0b:
a1:b4:29:50:7c:90:e1:13:90:2b:54:e0:80:fc:7b:49:d9:f3:
96:ee:53:d9:2b:45:6c:0c:e4:48:76:03:cb:c7:24:98:05:89:
9a:ef:f1:80:e1:4b:fc:bf:57:72:c9:83:9b:bf:a1:63:c4:15:
3f:e8:5b:9a:2b:8a:f0:28:4f:40:80:f3:bc:ba:71:80:08:e2:
e2:e7:34:ee:09:3f:a7:7c:26:ce:72:b2:81:ff:5b:8e:2d:62:
b4:d1:6e:1d:ba:70:a1:f5:4c:ad:9e:0d:8e:14:81:e3:81:da:
9b:84:94:49:cd:18:6e:26:73:09:50:4c:5c:d4:4a:38:38:65:
00:83:d0:34:7a:13:bd:56:57:84:bb:92:bb:64:30:03:d8:34:
b5:97:7e:b0:26:93:94:8b:47:29:e8:b3:a3:74:ca:66:72:1a:
3e:d5:05:44:7d:69:bf:20:d2:ba:ec:c0:45:89:b4:02:4f:80:
71:ab:5f:e5:ac:93:2d:bd:23:7d:38:43:d1:35:ff:f9:c2:fa:
aa:a3:97:1b:bc:d2:9a:81:85:1c:04:7d:1f:6c:80:b6:99:f6:
28:ee:84:c7:c7:c3:20:cd:82:41:95:2f:fb:e1:a7:b6:43:e0:
0d:2e:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 20:04:37 2026 by rpki-client