Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: SUP7SUc/vf/MANsnIVWIsZAmIJpPQrMUiEU6f+5PPKA=
Subject key identifier: 48:5A:DE:3A:EB:B1:2D:8C:1D:3F:31:C2:80:8B:31:3A:C7:6E:87:33
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 62C0BD5BD7B50E650CA6ED0BD226FBBA715D3B0F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Wed 23 Sep 2026 06:14:56 +0000
ROA not before: Wed 23 Sep 2026 06:09:56 +0000
ROA not after: Wed 22 Sep 2027 06:14:56 +0000
asID: 7029
IP address blocks: 51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
94.116.36.0/22 maxlen: 24
94.116.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c0:bd:5b:d7:b5:0e:65:0c:a6:ed:0b:d2:26:fb:ba:71:5d:3b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 06:09:56 2026 GMT
Not After : Sep 22 06:14:56 2027 GMT
Subject: CN=485ADE3AEBB12D8C1D3F31C2808B313AC76E8733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:b8:ff:6f:79:20:8d:1f:f5:b2:e8:6f:88:
51:df:75:d8:7b:86:76:53:28:b8:45:da:e1:a0:87:
1a:62:ab:0f:d1:ea:96:9f:10:3e:c7:16:83:58:c3:
4f:94:49:1d:b3:34:64:39:55:29:40:14:b9:04:e8:
65:d9:ea:7b:16:2e:fa:1a:52:1f:db:0c:f2:50:ba:
b9:1f:bb:a8:2b:c5:16:ce:ca:5d:57:84:9a:23:72:
16:85:d8:48:36:56:2f:f5:7f:4f:71:a1:50:ea:a3:
b8:d7:66:fd:37:eb:75:bc:da:b2:af:f6:4f:f6:db:
b2:8a:ae:9f:ac:83:2d:de:14:13:7d:26:ef:29:46:
44:4a:2e:99:9c:c5:d0:18:1a:8c:4f:5e:19:be:10:
e6:34:06:55:b8:e3:37:fb:60:b4:33:c3:5e:10:15:
58:d9:85:4c:35:72:12:3d:90:7b:be:1e:78:4b:e2:
31:65:79:a0:f8:83:fa:53:76:36:1e:fe:d5:72:f6:
69:eb:40:22:cc:3d:5e:b1:74:48:ba:c7:bc:a7:c3:
c8:de:b7:71:f1:54:be:35:42:79:e6:d0:99:66:95:
d5:14:a1:10:7c:22:03:bc:d9:ed:42:c7:f5:82:cb:
ff:fa:e7:d7:cd:b9:75:ab:de:b7:60:e2:91:24:b0:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:DE:3A:EB:B1:2D:8C:1D:3F:31:C2:80:8B:31:3A:C7:6E:87:33
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.49.0-51.146.51.255
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0/24
51.194.55.0-51.194.59.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
94.116.36.0/22
94.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
80:68:3e:53:5b:16:6b:b9:2e:a0:2b:63:5e:63:91:b7:73:b3:
68:86:bc:be:84:4b:fd:fb:6b:ad:6f:f9:ff:e2:18:3c:c7:72:
24:a4:32:2f:d9:85:e7:55:10:72:e1:4d:f0:f8:64:4c:b3:f6:
c6:a9:dc:50:80:ec:d0:cb:7a:5e:d7:26:07:54:68:7a:5f:05:
06:26:e7:af:e4:14:80:18:d3:ac:2c:0e:a6:d3:22:71:85:b3:
49:45:a5:6c:75:7f:3e:af:8d:0c:85:e4:b8:7a:73:a9:68:8a:
72:9c:27:f0:44:91:a7:58:a3:12:d5:ad:28:42:71:98:f0:dd:
e9:35:2a:b9:62:f9:bb:c5:fc:cd:a1:23:30:3f:54:23:a8:ed:
c3:e0:ca:5e:3a:88:e8:f2:aa:30:74:25:fd:2f:66:c0:90:e2:
dd:7b:c8:a9:aa:ce:97:30:ba:c6:45:1c:3b:df:da:11:2d:a9:
75:ba:69:8c:58:2d:ea:3d:d4:10:4e:18:0d:40:ac:c9:b6:2d:
3e:8b:df:d2:a4:8e:43:4d:05:41:a5:a7:4f:5d:fe:e3:56:f0:
47:d1:fc:92:63:19:fe:dc:cf:f1:36:46:16:c0:b5:da:3a:01:
8e:ea:f0:6d:fc:06:e8:f0:02:da:bb:e5:52:28:96:da:ae:6c:
0c:d9:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:40:49 2026 by rpki-client