Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29066.roa
File: AS29066.roa (raw, json)
Hash identifier: WMRWZMmP+Uu6QQXRym5ogni21mAOEVInwGwg1KOZ+2Q=
Subject key identifier: 2A:70:F7:D6:4D:47:7F:F1:0A:89:FD:33:24:E3:FA:5C:A2:1A:29:F5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7406737BFDA745DA99E7B8CCD7C10D6007336E72
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29066.roa
Signing time: Wed 08 Apr 2026 09:47:03 +0000
ROA not before: Wed 08 Apr 2026 09:42:03 +0000
ROA not after: Wed 07 Apr 2027 09:47:03 +0000
asID: 29066
IP address blocks: 141.11.54.0/23 maxlen: 23
141.11.162.0/23 maxlen: 23
141.11.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:06:73:7b:fd:a7:45:da:99:e7:b8:cc:d7:c1:0d:60:07:33:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 8 09:42:03 2026 GMT
Not After : Apr 7 09:47:03 2027 GMT
Subject: CN=2A70F7D64D477FF10A89FD3324E3FA5CA21A29F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:5e:71:79:23:f2:53:84:6f:0f:f7:ed:5e:
d0:a3:09:4f:61:a5:42:14:d5:6c:d3:d4:76:b9:71:
db:72:ad:e4:42:49:41:9d:2e:f8:be:99:d6:79:10:
20:c9:7c:af:74:cf:63:ad:2b:e8:66:c1:52:b1:dc:
6a:5b:65:3a:25:0e:ca:43:63:e6:d6:91:e5:97:9d:
e0:05:87:78:10:3b:7b:9a:18:d1:cb:18:88:87:83:
12:d9:db:8a:b1:e3:e7:33:5b:17:78:14:87:84:63:
f8:97:2e:6f:4b:75:e4:c6:a0:32:a4:09:5e:23:a0:
e9:d2:5e:2a:48:4e:19:5e:78:32:7d:d0:08:91:2d:
b6:ec:d4:eb:2b:35:7c:a5:85:f6:94:fd:1b:95:9a:
6e:db:0f:ca:7c:50:ee:5d:c3:71:47:5b:95:d1:a9:
04:00:4c:95:7a:0b:2e:f3:92:c9:cb:ea:19:30:b4:
6f:5f:2d:17:22:7f:78:9d:75:d7:3b:54:aa:f5:f2:
13:f9:8d:79:a3:33:fd:c1:0c:4e:0e:0a:5d:2a:a8:
e4:6d:93:c1:da:95:5e:ff:41:af:98:3f:6b:ac:1d:
77:9c:06:71:9c:7f:71:8b:f1:a8:5a:84:66:6b:1d:
c0:d3:59:ba:6e:87:c1:58:c1:e6:a0:c5:12:d2:f2:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:F7:D6:4D:47:7F:F1:0A:89:FD:33:24:E3:FA:5C:A2:1A:29:F5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.54.0/23
141.11.162.0/23
141.11.206.0/23
Signature Algorithm: sha256WithRSAEncryption
17:4b:a8:c3:68:16:20:58:b2:98:2b:19:57:e8:72:a0:6d:26:
81:7c:55:96:32:f7:b9:63:71:14:02:72:33:41:56:fc:58:1f:
2b:eb:d1:cb:50:e7:04:b0:ef:d9:c5:d4:8b:f3:48:91:bc:cc:
51:ab:72:30:39:ce:7d:68:71:2b:a4:e1:b8:bf:a1:45:e6:89:
b3:9f:4b:b8:cd:11:39:38:c6:c3:7d:8b:95:53:53:b7:01:17:
65:4e:db:d3:d6:bb:4b:93:2a:7b:9f:33:06:52:ac:92:b7:4f:
20:ef:58:cc:8f:f4:d0:37:ba:a1:28:20:d5:b7:11:8a:7d:ea:
44:fd:09:e9:ba:96:54:5e:28:ec:0a:31:e3:ea:48:02:c5:4c:
34:9b:7c:68:8a:98:50:da:70:df:03:1d:7b:e9:c0:4d:12:c6:
89:97:4f:5e:42:b2:a2:cc:4a:27:14:a4:c1:62:8c:2e:c6:55:
b5:e9:ea:7d:9c:55:1b:85:df:c3:6c:cc:3b:13:fa:c0:51:5f:
71:51:3a:55:ca:bf:37:ed:c3:aa:4a:d5:a4:ed:22:f7:a9:71:
5c:3a:37:ba:6b:38:73:19:21:01:fb:48:c2:39:13:04:23:55:
70:d6:fa:1a:d0:25:6d:64:2e:ff:fc:e3:2a:cb:78:da:06:96:
46:7b:aa:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:35:38 2026 by rpki-client