Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: wofEU6uZLi7kcv68aasGdUzugCalp9vdfJ7EWuB9zDE=
Subject key identifier: 6D:B3:6C:6E:86:76:B8:19:75:A3:25:88:8C:B9:CE:00:1E:C0:26:C4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0CCF4B1208D6A007293EE7C9DDC49097665AD36A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
Signing time: Wed 23 Sep 2026 06:15:06 +0000
ROA not before: Wed 23 Sep 2026 06:10:06 +0000
ROA not after: Wed 22 Sep 2027 06:15:06 +0000
asID: 7029
IP address blocks: 90.96.4.0/22 maxlen: 24
90.96.12.0/22 maxlen: 24
90.96.20.0/22 maxlen: 24
90.96.28.0/22 maxlen: 24
90.96.36.0/22 maxlen: 24
90.96.44.0/22 maxlen: 24
90.96.48.0/22 maxlen: 24
90.96.56.0/22 maxlen: 24
90.96.64.0/22 maxlen: 24
90.96.132.0/22 maxlen: 24
90.96.140.0/22 maxlen: 24
90.96.148.0/22 maxlen: 24
90.96.156.0/22 maxlen: 24
90.96.164.0/22 maxlen: 24
90.96.172.0/22 maxlen: 24
90.96.240.0/22 maxlen: 24
143.20.153.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cf:4b:12:08:d6:a0:07:29:3e:e7:c9:dd:c4:90:97:66:5a:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 23 06:10:06 2026 GMT
Not After : Sep 22 06:15:06 2027 GMT
Subject: CN=6DB36C6E8676B81975A325888CB9CE001EC026C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:fb:23:2b:43:cf:68:ff:f7:8b:d6:4c:37:
e0:79:59:21:6c:62:f3:25:74:9f:85:04:1e:ad:d8:
b0:71:ee:9a:af:ab:26:ba:8b:13:1d:81:f2:72:d2:
7b:26:e9:ec:93:fe:13:b2:66:2b:e1:22:cf:15:cc:
b9:3b:4a:e5:fb:8a:cb:ed:9c:30:2a:a9:9e:b0:68:
43:1e:72:67:a7:7d:a3:51:61:d8:70:1e:11:4b:f9:
9e:28:d7:a7:c9:9c:b7:af:38:b7:fd:f4:7c:f7:4a:
a2:31:4b:c8:0b:bd:62:02:ab:02:41:30:55:fd:58:
5b:96:38:d3:56:b1:f1:1e:73:9f:26:dd:b1:d3:f1:
23:97:d7:1a:27:23:01:78:25:7a:cf:2d:08:c4:d6:
50:8e:b9:40:58:9e:1c:c6:43:76:dd:f8:61:90:01:
e8:bd:8a:16:eb:e6:d0:85:1f:14:4b:cd:6a:38:73:
a9:eb:a7:58:3e:4b:2c:65:0b:97:b3:e7:fa:22:14:
02:59:7f:85:a3:cd:c8:df:db:61:ca:ee:a8:3e:6f:
05:df:94:ad:4a:19:ed:17:1b:75:32:97:5e:c0:07:
67:bb:7d:d7:4f:20:89:3e:a8:1c:fa:ae:35:2e:b8:
30:41:25:2c:19:2c:b6:5c:47:e9:7d:54:17:56:10:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:6C:6E:86:76:B8:19:75:A3:25:88:8C:B9:CE:00:1E:C0:26:C4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.4.0/22
90.96.12.0/22
90.96.20.0/22
90.96.28.0/22
90.96.36.0/22
90.96.44.0-90.96.51.255
90.96.56.0/22
90.96.64.0/22
90.96.132.0/22
90.96.140.0/22
90.96.148.0/22
90.96.156.0/22
90.96.164.0/22
90.96.172.0/22
90.96.240.0/22
143.20.153.0/24
143.20.198.0/24
143.20.219.0/24
Signature Algorithm: sha256WithRSAEncryption
08:37:31:e5:5f:41:27:48:f9:64:ed:00:c7:8b:25:c8:8c:90:
d8:92:44:74:0d:00:d7:ee:d8:b4:7d:16:fb:83:c8:c5:11:fa:
7f:62:46:15:2e:cf:3f:80:a4:c2:98:8f:6b:72:3f:e3:44:cd:
d7:ba:fa:38:34:04:2f:27:1b:f4:91:9e:66:73:de:9e:d1:10:
66:8d:42:b5:33:82:bf:4b:c5:b8:82:01:17:3d:0a:12:14:16:
5b:63:52:86:9f:42:3b:da:15:b4:68:d7:4a:5f:21:2a:50:dc:
b6:41:27:7f:9c:1b:46:3b:d6:e3:04:c7:b3:cb:12:6a:84:12:
af:56:ee:50:19:07:46:42:eb:43:c0:d5:68:b4:11:0b:9c:58:
29:d7:55:fa:75:95:53:fa:fb:8b:58:1f:b8:7d:ee:1c:f8:a3:
af:e7:e0:c2:67:cc:4c:8e:10:35:83:f2:80:c5:84:5d:a1:f3:
8d:55:c5:cb:7f:76:5b:29:6d:fe:2c:2c:c9:7c:ce:0f:81:f2:
db:0b:38:35:09:77:ce:0e:af:fc:92:26:e3:97:f3:db:aa:f5:
39:b2:80:f0:c8:db:35:2d:49:7e:35:3b:2b:b4:f1:ce:5b:d7:
47:3f:09:12:d3:e8:38:93:62:44:7b:f0:cf:28:2e:fb:2a:30:
5e:86:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:06:31 2026 by rpki-client