Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: JcsU+Zg+Is8EWWJjPyYbEMc3+9CZyw4i2FRXqUPHSo4=
Subject key identifier: 6C:24:3F:DB:D6:51:B1:72:B9:65:A6:5D:E7:00:35:B1:75:7A:45:D1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0FFA5E072819B7511A93AE617CB4FE0C7590BD29
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
Signing time: Thu 26 Jun 2025 14:01:47 +0000
ROA not before: Thu 26 Jun 2025 13:56:47 +0000
ROA not after: Thu 25 Jun 2026 14:01:47 +0000
asID: 7029
IP address blocks: 46.202.200.0/24 maxlen: 24
46.202.206.0/24 maxlen: 24
46.203.6.0/24 maxlen: 24
91.124.228.0/23 maxlen: 24
91.124.230.0/23 maxlen: 24
91.124.232.0/23 maxlen: 24
91.124.234.0/23 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.112.40.0/21 maxlen: 24
92.112.59.0/24 maxlen: 24
92.112.79.0/24 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.170.0/24 maxlen: 24
92.113.171.0/24 maxlen: 24
92.113.175.0/24 maxlen: 24
92.113.224.0/24 maxlen: 24
92.113.230.0/24 maxlen: 24
178.95.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fa:5e:07:28:19:b7:51:1a:93:ae:61:7c:b4:fe:0c:75:90:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 26 13:56:47 2025 GMT
Not After : Jun 25 14:01:47 2026 GMT
Subject: CN=6C243FDBD651B172B965A65DE70035B1757A45D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:1c:96:65:d1:35:4f:46:82:36:07:90:31:
22:6b:5c:53:92:fc:82:e5:8d:28:05:11:59:8f:67:
5f:6b:cb:57:14:01:67:f7:d4:50:9b:82:54:76:c8:
6f:5a:3f:c9:6a:46:ad:d5:dd:5f:07:82:ca:e3:32:
f9:1f:76:41:95:1e:6b:96:41:95:c1:b3:b5:ca:55:
9f:a3:b2:58:22:e0:16:fa:60:8c:3a:c6:a9:fe:0f:
e0:f2:c3:22:a0:86:6e:4e:d5:72:bc:0e:59:0c:66:
0d:9a:35:be:0e:c9:93:27:85:c1:f9:ee:47:b9:de:
2d:d0:68:92:0f:aa:44:37:62:36:a4:d0:57:dd:d8:
7c:1d:ab:de:48:46:81:79:77:57:00:1c:4f:52:e9:
ac:44:aa:4f:00:66:f8:4b:3d:f8:c2:e8:96:d0:7a:
2f:26:a3:d6:9c:f7:14:30:8d:fe:74:04:9a:50:0c:
0c:df:25:dc:0d:b9:cc:fe:94:40:bb:62:61:50:af:
27:d0:45:9f:1e:7f:c0:11:03:e5:dd:df:ab:c5:ee:
8d:30:0e:9f:f8:72:e3:c5:79:36:85:04:39:55:5b:
a5:de:04:0a:b5:0f:23:1d:3b:ad:dd:e6:d8:7d:33:
f4:a2:f2:ec:54:2b:48:01:62:60:e4:98:da:eb:33:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:3F:DB:D6:51:B1:72:B9:65:A6:5D:E7:00:35:B1:75:7A:45:D1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.200.0/24
46.202.206.0/24
46.203.6.0/24
91.124.228.0-91.124.235.255
92.112.32.0/22
92.112.40.0/21
92.112.59.0/24
92.112.79.0/24
92.112.157.0/24
92.113.170.0/23
92.113.175.0/24
92.113.224.0/24
92.113.230.0/24
178.95.208.0/20
Signature Algorithm: sha256WithRSAEncryption
15:69:ca:67:01:cb:c7:c7:3f:7e:f2:64:84:72:00:f8:44:10:
44:7d:7d:83:e2:90:90:e3:62:72:a8:bc:8d:de:72:a2:07:3c:
c3:30:f6:07:fe:44:93:2c:2b:30:94:77:59:fa:4a:8c:48:e9:
b1:85:1d:8e:16:49:66:92:18:1d:5c:24:f9:07:2d:2f:93:c8:
e3:46:c4:29:a4:9b:e1:0d:e1:5b:b2:b1:0a:4d:d6:67:7b:35:
18:6a:a8:c7:14:2b:c3:51:01:a0:b2:48:66:7e:76:67:58:63:
12:4b:64:52:2d:dc:a8:b7:3a:91:b0:c4:51:dd:23:4f:de:b0:
8a:7f:6c:61:e1:67:87:87:64:67:72:ce:07:c5:a5:7c:b5:ac:
cb:d3:b0:de:37:bd:ee:4c:72:20:57:d8:3b:11:c3:93:b1:e6:
08:cd:cd:3a:7b:4f:ad:a2:99:31:1b:8d:64:74:71:0b:0b:f3:
b0:ed:ea:91:b2:ea:35:b2:79:2f:31:d2:2e:d3:f2:d9:f3:e8:
16:47:5e:a6:d1:eb:c6:fd:39:0c:5e:e1:0a:bc:6a:d8:5d:b6:
24:74:31:28:a4:cc:27:64:c7:77:8c:8a:30:e7:10:9e:50:6c:
1d:90:2c:30:6d:7d:17:d3:2b:5f:9d:38:e5:75:e6:9f:cf:b2:
eb:d0:ad:71
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUD/peBygZt1Eak65hfLT+DHWQvSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA2MjYxMzU2NDdaFw0yNjA2MjUxNDAxNDdaMDMxMTAvBgNV
BAMTKDZDMjQzRkRCRDY1MUIxNzJCOTY1QTY1REU3MDAzNUIxNzU3QTQ1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsByWZdE1T0aCNgeQMSJrXFOS
/ILljSgFEVmPZ19ry1cUAWf31FCbglR2yG9aP8lqRq3V3V8HgsrjMvkfdkGVHmuW
QZXBs7XKVZ+jslgi4Bb6YIw6xqn+D+DywyKghm5O1XK8DlkMZg2aNb4OyZMnhcH5
7ke53i3QaJIPqkQ3Yjak0Ffd2Hwdq95IRoF5d1cAHE9S6axEqk8AZvhLPfjC6JbQ
ei8mo9ac9xQwjf50BJpQDAzfJdwNucz+lEC7YmFQryfQRZ8ef8ARA+Xd36vF7o0w
Dp/4cuPFeTaFBDlVW6XeBAq1DyMdO63d5th9M/Si8uxUK0gBYmDkmNrrM/G/AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUbCQ/29ZRsXK5ZaZd5wA1sXV6RdEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzAyOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB1BggrBgEFBQcBBwEB/wRmMGQwYgQCAAEwXAMEAC7KyAME
AC7KzgMEAC7LBjAMAwQCW3zkAwQCW3zoAwQCXHAgAwQDXHAoAwQAXHA7AwQAXHBP
AwQAXHCdAwQBXHGqAwQAXHGvAwQAXHHgAwQAXHHmAwQEsl/QMA0GCSqGSIb3DQEB
CwUAA4IBAQAVacpnAcvHxz9+8mSEcgD4RBBEfX2D4pCQ42JyqLyN3nKiBzzDMPYH
/kSTLCswlHdZ+kqMSOmxhR2OFklmkhgdXCT5By0vk8jjRsQppJvhDeFbsrEKTdZn
ezUYaqjHFCvDUQGgskhmfnZnWGMSS2RSLdyotzqRsMRR3SNP3rCKf2xh4WeHh2Rn
cs4HxaV8tazL07DeN73uTHIgV9g7EcOTseYIzc06e0+topkxG41kdHELC/Ow7eqR
suo1snkvMdIu0/LZ8+gWR16m0evG/TkMXuEKvGrYXbYkdDEopMwnZMd3jIow5xCe
UGwdkCwwbX0X0ytfnTjldeafz7Lr0K1x
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:48:57 2025 by rpki-client