Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: LNpotZy4Xd78zNyYSAPBKx5qCBaXbji0m0T6N0Om+PQ=
Subject key identifier: DC:11:BF:C2:7D:A9:0B:5A:EF:5D:BE:DA:2B:0E:FD:58:F5:49:6F:69
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4813CA2F1A98E4D322B0ADBC8B3EA865256CEB38
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7029.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 7029
IP address blocks: 46.236.244.0/22 maxlen: 24
46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:13:ca:2f:1a:98:e4:d3:22:b0:ad:bc:8b:3e:a8:65:25:6c:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=DC11BFC27DA90B5AEF5DBEDA2B0EFD58F5496F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:3e:d6:2e:06:6f:e6:dd:5f:49:60:63:47:
ef:64:b8:43:c4:5f:57:7b:75:23:28:11:5d:0c:d8:
a2:0e:2e:f1:ac:87:e2:e9:85:5b:e3:8c:a1:90:a3:
1a:0b:0c:58:e3:65:91:7c:d4:47:aa:9a:b9:62:f9:
fb:72:d8:d7:92:f3:49:9d:b5:f3:28:0e:84:bb:32:
c3:76:d7:1c:e2:c9:33:80:da:aa:c5:26:f0:2a:8c:
31:f5:11:ed:21:ca:61:90:70:a2:26:28:bb:ef:1f:
70:4f:a6:f6:fe:c9:5c:3e:e0:c8:66:24:93:f9:59:
1e:df:9e:47:73:e1:bd:57:ea:8d:b7:34:bc:77:01:
2e:a5:29:1a:c9:2a:ac:9f:1e:80:5f:ac:a6:8c:d4:
1a:2f:79:07:fe:15:e7:6d:b1:0c:2d:29:62:7d:25:
a8:54:5e:bf:d3:89:80:a6:ce:fe:7f:ab:16:7a:75:
8e:cf:d7:bb:02:92:d6:41:4f:f5:87:3f:8a:4d:82:
00:12:f9:82:fb:b7:79:d5:a6:75:b0:46:c3:0f:dc:
47:68:67:7e:ad:9d:d4:74:fa:8c:7e:6d:a5:37:b1:
d5:a2:d3:ca:74:d0:be:7c:e3:e4:62:29:82:06:1f:
55:c9:bc:8c:6f:82:32:8d:45:f9:04:10:1d:ee:ba:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:BF:C2:7D:A9:0B:5A:EF:5D:BE:DA:2B:0E:FD:58:F5:49:6F:69
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0-46.236.251.255
Signature Algorithm: sha256WithRSAEncryption
17:ac:a0:d3:ee:43:25:71:cb:f9:1c:9c:ce:49:d6:57:4b:8e:
87:04:a8:03:08:45:81:67:07:55:a1:3d:e8:c5:2c:c8:b0:46:
c9:ea:c3:de:6a:07:4c:07:86:0a:88:21:bf:21:40:a9:b7:7e:
bb:26:2b:09:40:a7:3c:87:89:77:1a:2d:2e:ee:35:52:fc:cf:
ad:93:bb:cf:7b:07:b6:33:48:75:cf:47:e0:84:03:08:b6:75:
93:20:07:f5:4e:ed:22:0c:ff:4e:53:05:f7:54:ca:cb:dd:5b:
72:52:05:c7:11:22:64:29:60:84:60:a0:46:33:d8:a2:bf:2e:
8e:24:8b:a9:9e:83:94:21:8a:6c:df:0e:90:77:06:0f:d4:81:
5d:02:3c:4e:f9:94:48:75:c3:d5:79:ef:12:c4:a9:45:36:7c:
8e:11:5b:cb:ff:a0:b1:95:89:6c:46:54:35:6a:19:62:0c:74:
9a:40:fd:2f:fa:ee:ca:f6:64:ce:f4:04:e0:64:b5:c9:c3:68:
7a:5f:59:2f:9d:a4:33:bc:1d:f8:bf:7a:97:83:7b:23:95:4d:
3b:29:35:32:ca:c9:da:88:a3:b5:b5:ce:24:ea:38:19:6d:20:
bd:fb:15:58:a9:35:95:dc:2c:86:1f:7a:c8:92:81:a7:ce:2b:
c0:c8:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:31:14 2026 by rpki-client