Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: 47nUQgbYhF7dNYRUX8+af4X+uycHaKt2hNgJMgorOEs=
Subject key identifier: 65:EA:40:76:36:4B:74:3B:89:EB:F4:A5:0A:4C:15:E2:D4:CE:E3:47
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4B39D7A7BD215C50D2D71AE135A4549D5CF2FA82
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Fri 05 Jun 2026 13:45:49 +0000
ROA not before: Fri 05 Jun 2026 13:40:49 +0000
ROA not after: Fri 04 Jun 2027 13:45:49 +0000
asID: 7029
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:39:d7:a7:bd:21:5c:50:d2:d7:1a:e1:35:a4:54:9d:5c:f2:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 5 13:40:49 2026 GMT
Not After : Jun 4 13:45:49 2027 GMT
Subject: CN=65EA4076364B743B89EBF4A50A4C15E2D4CEE347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:c7:29:ce:d8:cf:4e:96:fb:70:9c:f7:1c:
6c:95:f7:95:35:53:71:66:c1:4e:51:c4:3c:dc:f5:
74:6a:23:b0:95:d3:07:6c:aa:1a:fd:06:63:ab:39:
e2:ab:74:44:87:3f:a9:79:00:bd:62:74:97:8a:48:
df:12:b8:41:58:1e:79:8a:c8:56:cc:ce:5d:70:b3:
b6:6c:9b:46:8d:7f:f7:94:d1:cf:28:18:32:43:d4:
40:f2:73:29:05:1e:9d:b7:ff:bd:2e:74:c4:dd:10:
0b:a4:1d:a3:e4:74:59:0e:66:4a:43:18:73:e2:31:
e6:11:82:27:09:e6:ea:bd:be:c1:d0:c0:92:8a:e6:
65:4f:22:96:87:3e:17:da:0c:b1:cc:0b:f5:62:e1:
08:b5:d1:52:29:a5:bc:15:ae:d1:b2:ea:dd:9a:7b:
01:2c:b8:5b:bf:f4:c6:99:2a:7c:8d:6e:3a:4e:7a:
9e:ae:77:30:97:a6:e2:d5:14:5a:91:4c:7b:50:e2:
5e:c8:c7:76:0d:19:58:e2:46:55:0f:f6:ec:0c:dd:
04:cf:9a:ba:cf:b9:44:5c:91:9e:e7:e4:35:20:3a:
48:28:24:8c:11:be:fd:12:2b:29:2d:37:66:1d:9c:
c7:60:80:84:30:c3:8f:62:ac:41:64:e0:f2:cc:b5:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:40:76:36:4B:74:3B:89:EB:F4:A5:0A:4C:15:E2:D4:CE:E3:47
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0/24
51.194.55.0-51.194.59.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
48:52:d1:06:08:9d:47:b1:d9:27:ee:20:18:ca:2a:e3:cd:56:
47:de:22:9e:79:09:01:36:b0:10:0a:66:45:05:3f:67:27:92:
30:af:65:92:be:b6:ba:bb:94:fd:da:13:0c:16:a6:6c:40:97:
3d:ae:34:65:12:46:09:73:af:38:4b:9b:b3:1e:39:e6:54:cd:
64:a3:7a:a3:16:9d:97:cb:57:ab:cf:10:be:d9:f2:4a:93:33:
01:69:f7:dc:f3:07:1a:3b:b2:86:75:56:b1:1f:c0:ee:e1:45:
fe:f1:d9:d1:07:05:b2:19:82:26:0a:7e:fe:2b:91:53:c9:5e:
aa:08:36:32:37:50:f9:68:11:43:34:50:63:bb:c6:a9:9a:2f:
54:ff:09:f3:a4:38:9b:a1:0d:2d:8f:c4:c4:b8:9b:b3:7a:b7:
e7:4b:6a:85:e9:f8:88:08:b1:e6:27:7f:a8:38:b2:56:48:72:
98:d3:72:d9:dc:af:0e:e8:29:b6:fe:5a:0c:a3:6a:ed:28:60:
57:47:31:cb:95:4f:88:5f:8e:38:b3:7e:32:ea:01:30:01:fb:
d1:83:47:3d:f9:24:e8:6b:12:ea:0d:b8:d1:55:fd:6e:9b:e3:
3d:12:c7:c7:69:c2:c6:c8:4c:26:41:da:ea:7d:d9:0b:a2:55:
64:09:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:07 2026 by rpki-client