Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: RUKEukNFvSwDSPNmPzzQsOxrppE7VIJptXonesG6JMA=
Subject key identifier: F5:B2:29:CB:02:B0:CD:2A:02:22:81:68:4E:0D:E3:45:6D:CD:03:00
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 01F1A75F7D7F8DE6DDAFA40C88337E757258AC77
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
Signing time: Tue 05 May 2026 07:40:01 +0000
ROA not before: Tue 05 May 2026 07:35:01 +0000
ROA not after: Tue 04 May 2027 07:40:01 +0000
asID: 7029
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.52.0/24 maxlen: 24
51.194.53.0/24 maxlen: 24
51.194.54.0/24 maxlen: 24
51.194.55.0/24 maxlen: 24
51.194.56.0/24 maxlen: 24
51.194.57.0/24 maxlen: 24
51.194.58.0/24 maxlen: 24
51.194.59.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.162.0/24 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f1:a7:5f:7d:7f:8d:e6:dd:af:a4:0c:88:33:7e:75:72:58:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 5 07:35:01 2026 GMT
Not After : May 4 07:40:01 2027 GMT
Subject: CN=F5B229CB02B0CD2A022281684E0DE3456DCD0300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:1f:cb:25:66:04:20:16:d9:00:33:3f:0b:
c8:4f:f1:2e:12:3f:cb:fb:24:40:d4:7c:fd:81:fc:
db:f4:2f:3e:cb:94:bb:d4:a8:c0:49:f7:88:e1:4e:
fc:a3:78:9d:6e:96:3c:6f:39:f9:be:bb:26:85:c3:
44:22:2d:af:e6:4a:d4:dc:88:cd:f4:6f:6e:69:37:
7f:ba:45:e6:44:22:17:19:71:ee:75:ff:ae:8e:9e:
ad:90:d3:97:c9:4d:b6:76:15:66:54:4d:94:59:cd:
f8:eb:70:cf:8c:6c:02:35:05:2d:98:50:d5:41:42:
3f:d5:f0:e9:c0:e0:cc:50:e9:c2:75:61:1b:e8:5a:
8c:53:20:26:c2:bc:7a:06:93:d7:08:97:be:12:50:
5b:a3:f7:35:b2:30:eb:10:9f:37:9c:7b:1b:30:c1:
5a:5e:89:fd:fa:bc:6e:26:ac:3d:54:b7:81:cc:4f:
24:2c:f0:6c:c6:32:ee:b6:a8:4c:fe:7e:cf:0a:3c:
9c:d5:ac:89:6e:9a:e5:7c:38:0c:ef:8f:1c:d9:98:
5e:ff:e9:51:d5:43:b3:38:8e:7a:c0:e0:19:20:29:
da:b8:7c:e9:e3:a3:d4:b2:73:e8:ea:fd:88:08:0b:
bd:78:69:3a:8c:6d:7c:70:c6:33:2e:0d:95:32:22:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:29:CB:02:B0:CD:2A:02:22:81:68:4E:0D:E3:45:6D:CD:03:00
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
51.194.52.0-51.194.59.255
78.105.128.0/21
78.105.162.0/24
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
93:4e:1d:4a:e8:ae:8e:aa:fe:6e:77:7f:3e:30:7e:cc:51:a9:
d9:4f:d6:22:8c:9f:8f:98:63:43:fd:0f:b7:ff:2f:ad:f4:86:
3a:5f:d7:83:84:80:0a:ca:ed:6d:c9:d7:2d:c2:b0:9d:58:40:
c3:7f:94:83:ca:1e:a2:9b:fd:e0:ea:ee:7c:80:74:55:d4:2c:
81:c2:e3:fa:44:31:c1:36:44:58:7f:23:1c:a4:d9:b4:1c:fa:
d0:76:34:80:24:26:55:c8:d8:ab:4a:b0:38:d1:20:70:78:0f:
5b:18:4e:6b:06:8a:ef:d2:ea:db:2d:d6:93:69:f6:61:e7:ce:
3d:6c:14:1b:b0:47:12:dc:68:57:86:51:ec:0f:46:28:28:53:
3d:82:99:30:5b:2a:62:fd:a9:a2:c1:a4:ae:60:7b:0e:9a:b9:
bf:bb:f1:e9:2b:53:f1:db:c3:22:41:74:0d:da:84:b0:6a:c5:
65:91:fe:02:2b:51:c5:93:78:22:4b:b4:aa:3c:10:51:d8:d1:
00:02:27:9f:6a:eb:4d:42:55:77:70:c5:f7:9e:82:82:a6:58:
c9:f8:ba:c2:39:9c:ae:ac:66:ff:b6:f1:31:cf:ce:4a:86:6d:
bf:4c:cf:c2:c6:78:87:37:9c:91:8b:55:a9:cd:1c:e1:dd:c8:
d7:2a:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:22 2026 by rpki-client