Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 8AYUlEgLdtsMqazcZRP2M98yAKC8OwtaP4ATSxLdW1Q=
Subject key identifier: 99:81:85:F2:7B:F2:E3:14:D1:1C:56:28:84:5A:B1:E6:D1:40:29:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 327489297C5C4B18F73A87C1E1A8A33779292970
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
Signing time: Wed 08 Jul 2026 10:28:14 +0000
ROA not before: Wed 08 Jul 2026 10:23:14 +0000
ROA not after: Wed 07 Jul 2027 10:28:14 +0000
asID: 40676
IP address blocks: 96.62.73.0/24 maxlen: 24
140.233.183.0/24 maxlen: 24
145.223.52.0/24 maxlen: 24
145.223.56.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
146.103.44.0/24 maxlen: 24
146.103.55.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:74:89:29:7c:5c:4b:18:f7:3a:87:c1:e1:a8:a3:37:79:29:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 8 10:23:14 2026 GMT
Not After : Jul 7 10:28:14 2027 GMT
Subject: CN=998185F27BF2E314D11C5628845AB1E6D1402981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:0d:28:5c:ae:4f:ae:38:a8:bf:a4:7d:dd:
f4:60:a9:42:79:a8:a0:13:d2:1f:ee:31:bb:bb:b4:
86:b7:97:92:c7:42:dc:10:e2:98:b5:82:d9:d2:00:
2c:15:b8:c3:39:02:97:54:f7:0c:17:6c:5a:7f:c8:
cf:e8:e5:c6:39:97:d7:9d:ee:28:b4:1e:ec:2f:e9:
1b:ed:1d:e0:d0:b3:20:27:29:d0:ef:11:2f:fa:b1:
5b:47:2a:a6:bc:26:e7:bc:ce:43:80:ee:0d:ef:11:
60:7b:d6:bf:25:b6:2a:7f:9a:de:bc:ea:b8:98:ff:
f1:5e:10:d3:31:75:30:90:ec:06:2d:2f:dd:2a:5b:
86:a4:a4:19:84:7a:f3:18:fc:66:8e:e7:e2:b1:26:
92:6a:68:fe:5d:e1:16:d7:73:bf:5d:eb:e9:d1:39:
46:a9:7a:ce:b3:c1:8d:70:aa:6a:d1:d3:6b:91:54:
97:62:b3:bf:02:e6:07:dd:2f:c0:bb:11:4b:6b:8a:
6f:ee:db:cb:66:78:a3:5c:71:38:93:1e:a8:13:fc:
d1:43:9e:bf:7e:1b:48:e5:d9:1f:c8:4c:99:af:8f:
ff:a2:91:5d:66:cc:e8:6f:8e:27:dc:4d:9f:9e:4e:
13:a0:59:e5:4b:e8:ea:5c:68:18:a0:54:7e:d2:fb:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:85:F2:7B:F2:E3:14:D1:1C:56:28:84:5A:B1:E6:D1:40:29:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.73.0/24
140.233.183.0/24
145.223.52.0/24
145.223.56.0/24
146.103.31.0/24
146.103.44.0/24
146.103.55.0/24
150.241.208.0/24
167.148.200.0/24
168.222.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:56:47:77:c5:49:b2:48:34:8d:ea:b5:9b:b8:5d:81:e8:70:
9f:42:43:6a:6e:a9:87:94:15:79:95:38:4d:1a:99:ba:46:d0:
67:65:c5:e2:40:f0:c6:c8:39:19:87:3b:6d:6b:2a:1c:e4:bd:
74:b8:e4:64:e9:39:a0:51:17:74:bf:fc:d1:3e:ae:89:36:06:
53:e5:26:11:1e:03:eb:b1:11:8d:0e:ee:52:32:62:2a:8f:a2:
96:5b:ea:e5:9a:47:0b:59:9e:b3:4d:66:3f:56:22:d2:33:63:
5b:ef:3d:57:78:56:41:a0:2f:14:4e:e7:ab:7f:38:9c:16:d5:
bb:3e:6c:e4:48:3e:ed:ad:92:5f:6c:36:4c:f1:4a:1a:39:89:
e7:af:cc:8b:f4:f3:d5:78:76:17:e3:ee:24:3f:1b:7f:61:82:
41:4a:79:2d:92:fd:ca:37:1e:cc:3f:ee:02:af:8e:0a:2e:19:
f9:5c:1d:62:d2:43:03:6a:f6:d8:02:a3:74:88:67:0d:9b:37:
8b:af:11:2f:b0:47:c2:a2:ca:43:f3:58:48:e4:38:df:86:37:
67:6b:4b:cd:59:36:e0:c1:a5:a6:13:17:74:78:73:a8:e5:16:
9d:8f:7d:1a:d4:a3:47:6f:25:ee:25:80:fd:00:d3:ba:5f:16:
84:7b:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:36 2026 by rpki-client