Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: JQVPRvApPEhnPRVvXtjISkMq+ZCahLZUMAlydyJt8uk=
Subject key identifier: 04:5C:BF:92:12:E5:1F:B6:06:71:68:B2:4A:F1:17:3E:6C:D8:7F:6C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 38E1C5BE2C80A6D17010093BEA2D6D237B952737
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
Signing time: Sun 26 Oct 2025 00:10:14 +0000
ROA not before: Sun 26 Oct 2025 00:05:14 +0000
ROA not after: Sun 25 Oct 2026 00:10:14 +0000
asID: 7029
IP address blocks: 140.233.192.0/18 maxlen: 24
143.14.204.0/24 maxlen: 24
143.14.205.0/24 maxlen: 24
143.14.206.0/24 maxlen: 24
143.14.207.0/24 maxlen: 24
143.14.211.0/24 maxlen: 24
143.14.212.0/24 maxlen: 24
143.14.215.0/24 maxlen: 24
143.14.232.0/21 maxlen: 24
155.117.172.0/24 maxlen: 24
155.117.173.0/24 maxlen: 24
155.117.174.0/24 maxlen: 24
155.117.175.0/24 maxlen: 24
155.117.176.0/24 maxlen: 24
155.117.177.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.124.0/22 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.216.0/22 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e1:c5:be:2c:80:a6:d1:70:10:09:3b:ea:2d:6d:23:7b:95:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 26 00:05:14 2025 GMT
Not After : Oct 25 00:10:14 2026 GMT
Subject: CN=045CBF9212E51FB6067168B24AF1173E6CD87F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:2e:83:b3:e9:1f:2a:1f:82:a5:02:04:1f:
89:0a:bc:1e:6f:59:66:e3:bb:d8:af:77:7b:a7:34:
7a:6b:2c:85:ea:84:64:99:c1:61:c6:b7:58:4a:1a:
cd:a1:99:69:a4:39:eb:8b:1d:97:7a:00:5f:78:07:
87:e8:dc:d8:62:bc:bc:84:a0:8d:b2:be:34:7d:ff:
38:0b:d5:71:91:d6:87:dd:96:e0:91:f5:22:c4:ef:
c0:68:39:48:fe:b4:5a:0d:31:bc:85:41:21:27:ce:
56:da:03:26:7d:fb:ef:56:23:ef:e7:da:96:bc:39:
36:a5:b4:bd:65:0c:6f:22:1f:f4:bd:17:15:24:a9:
e1:95:9d:fa:14:9b:42:87:b8:0e:12:e0:1c:4e:2b:
94:00:da:e1:04:90:c5:d1:b5:03:c4:05:75:9e:dc:
41:d9:66:b6:78:7c:b8:90:66:75:a3:fa:db:fc:3b:
1e:54:b3:d9:4a:2f:49:3f:f5:fb:7c:f9:e6:0c:f5:
13:5c:09:0e:5c:67:99:d9:44:d9:50:19:a4:52:a3:
d0:99:9d:70:9d:5a:f0:dc:df:07:01:b0:f3:b8:4a:
90:a8:d0:95:e9:fc:fa:c9:67:14:d8:df:4e:70:f6:
54:2f:f3:0b:cc:2f:ef:9f:6b:e7:e9:b9:af:02:ad:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5C:BF:92:12:E5:1F:B6:06:71:68:B2:4A:F1:17:3E:6C:D8:7F:6C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
143.14.204.0/22
143.14.211.0-143.14.212.255
143.14.215.0/24
143.14.232.0/21
155.117.172.0-155.117.177.255
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.124.0/22
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.44.0/23
167.148.48.0-167.148.67.255
167.148.76.0/22
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.216.0-167.148.221.255
167.148.224.0/19
Signature Algorithm: sha256WithRSAEncryption
26:92:25:89:34:eb:38:7f:19:b3:97:cc:4b:a6:0a:0a:e3:25:
27:9a:12:0a:40:ed:05:32:df:0d:db:ae:39:35:a9:83:65:83:
99:cb:ab:96:7e:90:db:27:31:21:0d:7e:fc:1c:6e:0a:8c:f4:
12:48:c8:1a:22:22:b0:cc:5f:a0:35:ca:67:64:73:74:f4:6e:
17:5b:59:9a:6b:41:00:4a:1a:90:90:ed:37:4d:36:95:a3:75:
46:67:0f:84:d5:4e:b9:1e:30:ff:a3:ef:fa:da:36:94:09:9b:
15:54:77:69:d4:d3:d2:21:03:7b:fe:f5:d1:9e:1d:a4:8d:ad:
a8:8f:0c:a7:4c:4e:c9:7d:50:c7:c0:f9:8f:3c:61:15:a1:37:
e3:c1:d1:41:ba:dc:7f:3e:3d:4e:05:10:8b:2b:3c:de:94:5f:
19:cb:73:75:09:c6:b2:e7:33:bb:c2:cf:10:d0:bb:6d:28:a0:
8a:73:6f:d9:a8:23:10:bd:73:8b:94:bd:94:6b:9b:a8:d6:36:
84:a8:07:f5:0c:e9:d5:09:f8:24:c3:d9:db:de:c2:a7:5a:f2:
0a:f5:51:59:ef:5e:03:c8:d1:a1:0b:b4:9b:7d:14:f1:9c:f9:
31:2b:e9:16:5c:34:06:21:11:c7:ce:4b:ed:5b:e2:71:22:26:
1c:87:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:31 2025 by rpki-client