Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: NHF7Se1f74D1VWigEDAOSeBirDd331nPXp8+MxaPoFc=
Subject key identifier: 88:2C:17:B2:52:23:A8:67:6D:7E:9C:27:60:68:79:ED:73:AD:E0:F6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 713B750B27E675EF01B01AD33868AEB2A18ECCB7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
Signing time: Fri 26 Sep 2025 00:05:02 +0000
ROA not before: Fri 26 Sep 2025 00:00:02 +0000
ROA not after: Fri 25 Sep 2026 00:05:02 +0000
asID: 7029
IP address blocks: 143.20.144.0/24 maxlen: 24
143.20.146.0/24 maxlen: 24
143.20.148.0/24 maxlen: 24
143.20.151.0/24 maxlen: 24
143.20.153.0/24 maxlen: 24
143.20.154.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3b:75:0b:27:e6:75:ef:01:b0:1a:d3:38:68:ae:b2:a1:8e:cc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 26 00:00:02 2025 GMT
Not After : Sep 25 00:05:02 2026 GMT
Subject: CN=882C17B25223A8676D7E9C27606879ED73ADE0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:0b:3f:e1:3e:5e:57:2d:de:ac:a5:b3:4c:
b1:78:8b:39:30:df:69:62:7c:5d:c6:60:87:bf:f4:
84:b9:a1:01:89:ff:e6:a6:e3:f3:3c:88:ef:0b:c4:
a0:e2:de:7b:60:a7:2d:48:c9:4d:ee:8e:57:04:e1:
39:f1:10:2c:54:fd:18:41:bb:c7:8b:e6:b4:c7:f2:
92:f3:fb:83:21:e9:7c:ae:3e:53:30:e1:a5:00:c3:
7a:80:96:76:f2:3b:4f:e3:1d:b3:21:51:87:93:6f:
2d:d4:ae:c2:d8:bb:b8:3a:e7:bd:c2:b3:4b:74:bc:
e2:d5:8d:a9:b6:74:13:07:3f:86:22:d5:6e:6a:fd:
4c:37:e3:33:5b:20:37:71:91:fe:f8:ef:1f:49:fc:
3d:b2:6c:a1:2d:88:02:55:1a:96:54:0a:9c:c6:d0:
82:02:3f:22:e5:13:ec:63:6d:64:6a:11:6c:3f:95:
3f:e6:f4:8f:a5:a6:07:6a:42:51:0a:27:a3:b3:c0:
97:d1:1a:bd:91:e5:f2:84:44:80:cd:2c:99:88:f9:
16:81:ac:92:13:e3:2b:65:36:11:6b:95:d9:44:ba:
84:08:43:0d:23:df:8b:28:68:81:e1:e7:07:55:c3:
48:19:e8:d8:99:a3:dc:87:95:7d:35:5f:3b:2f:82:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:17:B2:52:23:A8:67:6D:7E:9C:27:60:68:79:ED:73:AD:E0:F6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.144.0/24
143.20.146.0/24
143.20.148.0/24
143.20.151.0/24
143.20.153.0-143.20.154.255
143.20.165.0/24
143.20.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1f:16:e0:da:47:90:36:f1:e0:74:f1:ef:97:ef:a0:92:58:
3c:80:e6:77:c7:5c:1a:04:f2:4c:22:db:c0:06:cf:b6:ad:24:
f3:6f:a5:c6:dd:4a:dd:25:82:70:a9:d1:11:c5:b8:43:3a:c2:
56:25:b3:c2:0a:3b:c7:cd:1d:44:d7:fb:12:04:7a:56:2d:64:
c9:7f:5e:ff:d7:20:84:d3:25:a9:d8:0c:56:57:ee:8f:1c:d1:
28:ec:b3:80:71:9c:b6:51:5b:1f:42:bd:6e:c3:71:cd:80:25:
41:8b:2a:83:d4:a1:c9:aa:ec:ab:6f:80:26:92:c4:4c:3b:71:
a5:73:63:12:df:3d:b8:13:39:0f:24:09:23:d2:b3:d1:b6:bc:
fb:81:93:87:74:84:4f:40:32:16:d3:24:92:85:b7:45:af:e5:
53:5b:b1:69:bd:bb:37:70:cb:05:f9:6e:a2:d0:63:b0:10:4e:
b4:d1:02:41:e4:5b:6c:97:a2:29:63:47:f9:17:8b:eb:4a:80:
46:9a:dc:98:62:d9:a5:b1:44:43:75:63:36:5b:3c:7a:3e:c2:
41:31:35:14:b0:b8:8c:76:da:42:05:c3:9d:c3:98:83:c3:ce:
fd:f5:d6:cb:cd:1d:c4:3d:9e:43:27:d2:71:f7:09:c7:83:8c:
d3:d5:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:47:50 2025 by rpki-client