Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: vVjMdufbuv4MWgh4fUqh/7Sst2jfyc9zvH8IZw9o8Yc=
Subject key identifier: A9:89:9D:56:0B:60:34:FC:DC:BA:5D:87:7A:13:96:3E:8E:44:73:21
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 25BD5688EAA8FFA60A2B315F6883D9FAD2BE80DD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
Signing time: Tue 12 May 2026 11:35:39 +0000
ROA not before: Tue 12 May 2026 11:30:39 +0000
ROA not after: Tue 11 May 2027 11:35:39 +0000
asID: 7029
IP address blocks: 46.202.200.0/24 maxlen: 24
46.202.206.0/24 maxlen: 24
46.203.6.0/24 maxlen: 24
91.124.0.0/24 maxlen: 24
91.124.2.0/24 maxlen: 24
91.124.3.0/24 maxlen: 24
91.124.16.0/24 maxlen: 24
91.124.59.0/24 maxlen: 24
91.124.82.0/24 maxlen: 24
91.124.90.0/24 maxlen: 24
91.124.134.0/24 maxlen: 24
91.124.208.0/24 maxlen: 24
91.124.228.0/23 maxlen: 24
91.124.230.0/23 maxlen: 24
91.124.232.0/23 maxlen: 24
91.124.234.0/23 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
92.113.254.0/23 maxlen: 24
178.92.80.0/24 maxlen: 24
178.92.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bd:56:88:ea:a8:ff:a6:0a:2b:31:5f:68:83:d9:fa:d2:be:80:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 12 11:30:39 2026 GMT
Not After : May 11 11:35:39 2027 GMT
Subject: CN=A9899D560B6034FCDCBA5D877A13963E8E447321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:88:26:6f:37:69:4f:0e:08:f9:c0:b4:f5:
f8:96:5e:60:a3:02:ee:41:d5:4e:fd:0b:07:c9:8d:
1a:08:90:6f:8b:4d:73:e4:a9:17:2a:fa:6b:70:2b:
a9:7f:d1:77:77:17:23:9a:b8:6e:3e:b5:7f:5d:ab:
78:fd:fc:30:aa:74:f6:8f:f3:b7:5a:d4:7a:b5:0e:
8d:eb:f5:79:ae:32:ec:6c:0b:5f:32:5d:20:2d:c6:
94:89:1b:f7:9b:29:60:54:c2:a0:3b:77:71:7a:f4:
92:21:08:97:20:f5:d8:a1:0b:0f:41:3e:71:47:bc:
92:c2:b0:67:f7:aa:74:d6:62:4f:6e:9a:66:8d:ad:
f8:9a:dc:00:90:b2:6f:fc:50:54:ac:a9:22:e0:92:
16:7d:9a:0e:c9:5b:8d:7f:5f:bc:94:7f:68:73:7d:
64:96:e6:8a:ad:fc:5c:2c:08:46:e1:d6:2a:fb:7f:
5b:df:87:29:1a:96:d7:32:c2:ca:f2:19:d4:eb:35:
70:e5:95:6b:01:99:bf:b2:80:39:74:f7:a9:52:86:
a8:1b:24:6f:4b:39:29:a0:9c:43:8b:01:d7:61:ad:
87:a2:ea:2c:5c:28:05:fb:6a:ed:f8:d2:4c:98:ce:
60:da:f4:de:ac:2d:30:fc:4e:5f:1d:8e:23:7e:6e:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:9D:56:0B:60:34:FC:DC:BA:5D:87:7A:13:96:3E:8E:44:73:21
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.200.0/24
46.202.206.0/24
46.203.6.0/24
91.124.0.0/24
91.124.2.0/23
91.124.16.0/24
91.124.59.0/24
91.124.82.0/24
91.124.90.0/24
91.124.134.0/24
91.124.208.0/24
91.124.228.0-91.124.235.255
92.112.32.0/22
92.113.215.0/24
92.113.254.0/23
178.92.80.0/24
178.92.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9d:7f:3b:f0:d4:99:55:57:72:20:09:04:dd:05:b5:81:bb:
ab:88:92:0b:af:b5:26:8a:91:11:e9:4d:f2:82:87:1f:dd:da:
97:9b:a3:b7:6f:fa:b2:ed:50:31:a8:90:f3:3a:13:fe:c0:92:
3b:3d:c3:72:66:66:c8:75:80:eb:02:ec:80:da:f4:47:27:ae:
b4:6c:29:6f:ce:ea:a5:0b:f8:95:cf:10:ce:8a:7a:44:f3:ca:
a4:54:a2:e5:1b:a4:c5:d7:08:65:ab:d0:57:c9:d6:98:fc:46:
a7:d5:33:bd:9e:a7:6a:0a:47:81:f1:d5:21:37:57:16:03:22:
f9:83:31:b0:d2:c7:4c:3b:1a:80:59:fb:a8:26:d0:98:6f:be:
e7:d7:90:78:b0:c8:a4:8d:8d:3f:58:34:66:aa:d4:3d:6f:cc:
10:26:0b:8f:28:8c:23:a6:db:41:66:14:22:20:05:97:6f:d1:
2c:59:30:dd:e1:5b:4e:9d:33:32:41:c3:08:66:e4:45:85:cb:
ed:a9:a7:8d:de:99:3d:b8:73:86:a3:6a:c1:e6:31:19:71:1f:
63:db:89:24:bd:af:f9:85:ea:ec:87:83:dd:39:f1:35:00:26:
bd:f2:6b:54:7d:47:b4:21:52:42:4c:ac:33:de:fa:1f:03:c5:
55:d7:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:35:32 2026 by rpki-client