Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: bKZPp23sos15XiDxP24LOXCzF7rcigIueoLLy+wqLIU=
Subject key identifier: F6:7A:23:38:13:ED:FD:33:99:DB:34:90:B4:D5:AB:7B:4F:96:9F:2A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1B468DBF6A1A315C5CD22E6DD05EFDB88C8C2DED
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
Signing time: Mon 29 Sep 2025 14:10:28 +0000
ROA not before: Mon 29 Sep 2025 14:05:28 +0000
ROA not after: Mon 28 Sep 2026 14:10:28 +0000
asID: 7029
IP address blocks: 46.202.87.0/24 maxlen: 24
46.202.96.0/24 maxlen: 24
46.202.97.0/24 maxlen: 24
46.202.98.0/24 maxlen: 24
46.202.99.0/24 maxlen: 24
46.202.124.0/24 maxlen: 24
46.202.125.0/24 maxlen: 24
46.202.126.0/24 maxlen: 24
46.202.127.0/24 maxlen: 24
46.202.200.0/24 maxlen: 24
46.202.201.0/24 maxlen: 24
46.202.202.0/24 maxlen: 24
46.202.203.0/24 maxlen: 24
46.202.206.0/24 maxlen: 24
46.202.207.0/24 maxlen: 24
46.202.216.0/24 maxlen: 24
46.202.217.0/24 maxlen: 24
46.202.219.0/24 maxlen: 24
46.202.220.0/24 maxlen: 24
46.202.221.0/24 maxlen: 24
46.202.222.0/24 maxlen: 24
46.202.223.0/24 maxlen: 24
46.203.3.0/24 maxlen: 24
46.203.5.0/24 maxlen: 24
46.203.6.0/24 maxlen: 24
46.203.13.0/24 maxlen: 24
46.203.14.0/24 maxlen: 24
46.203.21.0/24 maxlen: 24
46.203.22.0/24 maxlen: 24
46.203.29.0/24 maxlen: 24
46.203.32.0/24 maxlen: 24
46.203.43.0/24 maxlen: 24
46.203.44.0/24 maxlen: 24
46.203.47.0/24 maxlen: 24
46.203.54.0/24 maxlen: 24
46.203.56.0/24 maxlen: 24
46.203.58.0/24 maxlen: 24
46.203.62.0/24 maxlen: 24
46.203.74.0/24 maxlen: 24
46.203.80.0/24 maxlen: 24
46.203.91.0/24 maxlen: 24
46.203.92.0/24 maxlen: 24
46.203.104.0/24 maxlen: 24
46.203.113.0/24 maxlen: 24
46.203.121.0/24 maxlen: 24
46.203.137.0/24 maxlen: 24
46.203.161.0/24 maxlen: 24
91.124.228.0/23 maxlen: 24
91.124.230.0/23 maxlen: 24
91.124.232.0/23 maxlen: 24
91.124.234.0/23 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.112.40.0/21 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.198.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
92.113.254.0/23 maxlen: 24
178.92.80.0/24 maxlen: 24
178.92.82.0/24 maxlen: 24
178.95.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:46:8d:bf:6a:1a:31:5c:5c:d2:2e:6d:d0:5e:fd:b8:8c:8c:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 29 14:05:28 2025 GMT
Not After : Sep 28 14:10:28 2026 GMT
Subject: CN=F67A233813EDFD3399DB3490B4D5AB7B4F969F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:c4:14:60:0b:e6:74:54:92:1a:07:0a:46:
bd:ba:19:c7:7e:c8:6c:e0:58:9e:26:7b:3f:21:9c:
5b:36:de:f8:44:bc:e7:ef:f9:91:a3:98:9e:b1:37:
73:fc:2f:ce:9c:c2:2b:5a:26:df:b0:40:0b:b0:29:
df:10:c0:98:28:70:66:d2:2f:94:35:9c:13:9b:af:
22:96:01:c9:8e:2c:fa:df:b5:3a:0e:30:74:ff:ae:
63:5d:c0:8d:a2:bd:13:04:0f:d7:ad:55:09:9f:ff:
00:50:40:57:bd:69:a2:74:52:8a:bb:2c:47:29:d1:
16:d2:aa:c7:10:a7:33:49:52:fc:72:66:e0:af:9b:
47:b4:5a:44:55:47:34:de:55:83:e1:82:8b:81:c0:
bb:45:dc:ab:6d:c3:8f:18:57:99:74:9a:61:2d:46:
2a:8a:46:96:28:fc:84:91:b9:06:5f:52:d1:55:9c:
b7:3a:f1:05:a7:9e:64:e8:bc:ac:6f:fc:a2:db:5e:
67:75:3e:06:8d:92:69:e8:0d:7e:bd:70:54:7f:94:
3c:2b:44:17:6f:d0:9e:20:b6:15:0e:73:fc:af:ff:
1c:2b:2e:01:ba:61:26:e1:df:90:91:1b:ac:e8:da:
e2:7b:37:1f:3a:85:59:c1:b0:b7:23:b8:0d:14:fb:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:23:38:13:ED:FD:33:99:DB:34:90:B4:D5:AB:7B:4F:96:9F:2A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.87.0/24
46.202.96.0/22
46.202.124.0/22
46.202.200.0/22
46.202.206.0/23
46.202.216.0/23
46.202.219.0-46.202.223.255
46.203.3.0/24
46.203.5.0-46.203.6.255
46.203.13.0-46.203.14.255
46.203.21.0-46.203.22.255
46.203.29.0/24
46.203.32.0/24
46.203.43.0-46.203.44.255
46.203.47.0/24
46.203.54.0/24
46.203.56.0/24
46.203.58.0/24
46.203.62.0/24
46.203.74.0/24
46.203.80.0/24
46.203.91.0-46.203.92.255
46.203.104.0/24
46.203.113.0/24
46.203.121.0/24
46.203.137.0/24
46.203.161.0/24
91.124.228.0-91.124.235.255
92.112.32.0/22
92.112.40.0/21
92.112.157.0/24
92.113.198.0/24
92.113.215.0/24
92.113.254.0/23
178.92.80.0/24
178.92.82.0/24
178.95.208.0/20
Signature Algorithm: sha256WithRSAEncryption
18:ea:a3:0e:73:75:1f:b2:9a:9f:a4:ab:b2:24:24:ea:2c:e3:
f0:b8:7e:44:8b:60:48:09:8b:21:aa:b4:e1:a6:3b:51:a8:55:
82:ce:21:5f:e5:62:c8:1f:9f:99:76:95:a2:3d:a5:14:bb:a4:
34:d0:1f:5f:9d:82:90:e1:6a:c1:3c:6a:64:84:26:c8:45:10:
08:51:a6:ff:0a:ff:56:c3:ac:e1:1d:5e:d2:ef:20:a1:62:91:
74:6a:c1:60:f4:c9:95:45:c4:81:dc:c9:67:bb:3a:67:99:05:
a8:49:a0:fb:08:40:3c:75:6b:bd:9c:9a:a7:f2:e9:fd:b2:7d:
46:a0:c8:2b:04:48:0b:ba:2e:87:7b:7d:26:f9:3d:b0:6e:b4:
0c:1f:45:93:12:18:0b:d2:13:4a:22:57:bb:04:58:2e:02:60:
2e:f4:98:9b:a7:35:4a:dd:59:08:bb:40:fc:33:3e:64:5b:45:
d6:2c:4b:a1:20:29:b7:ff:c4:bb:d2:11:1d:d0:95:80:68:40:
8b:39:3c:14:24:67:09:cb:6a:e3:a0:10:d2:2e:78:ed:06:7d:
79:09:06:3b:fb:6f:40:3b:b7:c7:50:d4:70:04:85:d3:68:02:
14:0c:ab:cb:e6:0a:d6:a7:a3:71:e1:cc:5c:72:92:49:2f:d0:
fb:fb:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:34 2025 by rpki-client