Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: mvum+ymoYP0LPW/wD9zhg11yIDiVURQiNxUSa7OsI9w=
Subject key identifier: D9:B5:7C:4D:85:BD:F2:64:03:0F:CC:92:07:EA:08:59:6A:EE:20:B5
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 1BA7230588C665A4A68F4F94176854020D5EAB09
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa
Signing time: Thu 22 Oct 2026 16:01:44 +0000
ROA not before: Thu 22 Oct 2026 15:56:44 +0000
ROA not after: Thu 21 Oct 2027 16:01:44 +0000
asID: 7029
IP address blocks: 79.176.8.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.24.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.80.0/24 maxlen: 24
79.176.148.0/24 maxlen: 24
79.176.149.0/24 maxlen: 24
79.176.176.0/22 maxlen: 24
79.176.252.0/24 maxlen: 24
79.176.253.0/24 maxlen: 24
79.180.12.0/22 maxlen: 24
79.180.20.0/22 maxlen: 24
79.180.28.0/22 maxlen: 24
79.180.36.0/22 maxlen: 24
79.180.96.0/22 maxlen: 24
79.182.60.0/24 maxlen: 24
79.182.124.0/24 maxlen: 24
79.182.140.0/22 maxlen: 24
79.182.172.0/24 maxlen: 24
79.182.173.0/24 maxlen: 24
79.182.174.0/24 maxlen: 24
79.182.175.0/24 maxlen: 24
79.182.232.0/22 maxlen: 24
79.182.252.0/23 maxlen: 24
79.183.20.0/22 maxlen: 24
79.183.28.0/24 maxlen: 24
79.183.29.0/24 maxlen: 24
79.183.172.0/22 maxlen: 24
79.183.188.0/22 maxlen: 24
79.183.236.0/22 maxlen: 24
109.64.12.0/22 maxlen: 24
109.64.104.0/22 maxlen: 24
109.64.224.0/23 maxlen: 24
109.65.24.0/22 maxlen: 24
109.65.40.0/22 maxlen: 24
109.65.76.0/22 maxlen: 24
109.65.108.0/22 maxlen: 24
109.65.168.0/22 maxlen: 24
109.65.172.0/22 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.222.0/23 maxlen: 24
109.66.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a7:23:05:88:c6:65:a4:a6:8f:4f:94:17:68:54:02:0d:5e:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 22 15:56:44 2026 GMT
Not After : Oct 21 16:01:44 2027 GMT
Subject: CN=D9B57C4D85BDF264030FCC9207EA08596AEE20B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:2b:12:2b:29:6e:d0:e4:3b:56:b5:0e:d5:
9f:20:3b:19:e9:e2:b9:e9:f3:9c:f5:02:17:eb:24:
b4:80:c8:16:d2:db:46:10:e5:e6:aa:89:9e:41:75:
9a:19:a1:1d:c9:76:8b:67:b3:7b:81:bc:b5:f1:d4:
8c:29:ed:55:7c:58:c3:23:94:7a:5a:cb:8d:78:89:
8d:90:06:f3:3b:02:bb:7a:0a:f1:fb:59:27:ad:4a:
e7:fa:0a:cb:13:3a:b2:14:8e:97:9c:bc:31:6b:52:
4a:18:20:ff:ad:66:80:55:dd:da:a4:38:c5:87:7a:
8d:96:bc:0d:c6:27:9c:75:b7:e1:09:04:cc:10:f6:
1b:a9:b6:3d:4b:91:63:ca:6a:2c:aa:03:91:f0:7a:
57:30:32:a5:be:ee:3f:d8:4f:6c:19:ca:64:4a:27:
f0:49:9f:da:28:a6:72:0b:04:83:c7:f8:a4:bf:04:
f2:d3:11:13:f8:60:ac:ba:4d:a1:dd:1d:87:6a:cc:
4a:d4:2c:25:71:bc:53:27:80:79:58:3e:da:b8:67:
a3:f9:3c:fa:91:f6:c1:d0:65:af:45:0f:5f:27:7e:
8a:40:0a:e0:0c:61:c4:38:95:29:1b:35:2f:76:5e:
05:84:9d:f7:ff:0e:a2:c0:0e:59:cd:5a:8f:fb:7d:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:7C:4D:85:BD:F2:64:03:0F:CC:92:07:EA:08:59:6A:EE:20:B5
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.8.0/24
79.176.16.0/24
79.176.24.0/24
79.176.44.0/24
79.176.80.0/24
79.176.148.0/23
79.176.176.0/22
79.176.252.0/23
79.180.12.0/22
79.180.20.0/22
79.180.28.0/22
79.180.36.0/22
79.180.96.0/22
79.182.60.0/24
79.182.124.0/24
79.182.140.0/22
79.182.172.0/22
79.182.232.0/22
79.182.252.0/23
79.183.20.0/22
79.183.28.0/23
79.183.172.0/22
79.183.188.0/22
79.183.236.0/22
109.64.12.0/22
109.64.104.0/22
109.64.224.0/23
109.65.24.0/22
109.65.40.0/22
109.65.76.0/22
109.65.108.0/22
109.65.168.0/21
109.65.188.0/23
109.65.222.0/23
109.66.32.0/22
Signature Algorithm: sha256WithRSAEncryption
e1:e0:9c:53:66:00:7d:02:6f:f4:9c:78:69:96:47:28:88:69:
ef:35:ea:63:2f:55:15:fb:ca:08:21:ff:82:7e:69:45:7b:b7:
1f:d3:b5:71:5c:fb:7c:c8:d0:73:cb:ca:48:70:8c:8f:09:92:
27:ad:99:5e:e5:32:67:c2:46:00:ec:b4:a3:05:04:3b:d6:52:
18:16:99:62:78:47:45:cc:e4:27:2c:d4:ed:9a:ee:73:9a:89:
73:8f:ef:f3:46:97:7e:b3:16:a9:70:b4:30:52:8c:d1:5f:c2:
3a:32:7f:89:85:47:ea:84:e1:78:ce:d5:82:bd:5e:8a:12:06:
64:f3:5c:73:af:a4:8e:dd:11:f1:c5:0f:9a:ed:40:94:14:c5:
3c:6c:39:78:95:5e:53:95:b7:8f:1f:f1:16:f4:02:c0:e3:0f:
87:af:e0:6d:87:2c:f6:ee:72:89:11:b3:ad:46:a2:e6:a2:c4:
ee:e6:60:fd:28:88:87:12:38:44:ae:0a:47:0e:e5:93:25:a5:
69:fc:d2:9b:10:ba:58:de:ec:25:c3:8b:91:2c:9f:68:63:16:
b8:9f:d0:a1:3b:29:6c:5e:c2:be:73:e0:9b:8f:32:8d:cd:1c:
76:f0:3e:0b:55:74:4c:a1:20:80:85:52:3f:da:18:ea:0e:f8:
bd:de:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:52:43 2026 by rpki-client