Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: aADL96v2a0QjRSNrk9OF84GkOY7VX1sdigAAhQvkOJM=
Subject key identifier: 25:5E:8D:FD:0D:90:DF:29:63:06:48:FF:26:C1:5B:2C:47:76:46:91
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2250FB6DCFB6A6B35FADE7046CF4FF92B006FFB1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
Signing time: Thu 03 Sep 2026 03:42:23 +0000
ROA not before: Thu 03 Sep 2026 03:37:23 +0000
ROA not after: Thu 02 Sep 2027 03:42:23 +0000
asID: 40676
IP address blocks: 140.233.183.0/24 maxlen: 24
145.223.52.0/24 maxlen: 24
145.223.56.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
146.103.44.0/24 maxlen: 24
146.103.55.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:50:fb:6d:cf:b6:a6:b3:5f:ad:e7:04:6c:f4:ff:92:b0:06:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 03:37:23 2026 GMT
Not After : Sep 2 03:42:23 2027 GMT
Subject: CN=255E8DFD0D90DF29630648FF26C15B2C47764691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:34:e6:3f:42:1e:27:19:2e:d2:2b:78:af:
1d:dd:6b:57:85:84:97:8c:d4:b6:64:6a:cc:8d:f7:
08:25:8c:68:a6:c0:cb:a8:ae:18:63:42:11:aa:64:
95:95:38:74:96:5b:d6:77:52:b3:68:a0:5e:77:00:
43:7f:dd:7e:87:66:77:22:1a:19:53:bd:6c:a3:29:
86:c9:03:cc:02:c8:02:3a:9e:3a:57:68:1d:57:15:
88:c5:15:a1:2a:7e:1f:fc:9e:60:b2:3c:12:80:8a:
16:72:3d:d5:29:26:cc:8f:64:61:bd:ba:99:eb:21:
62:7e:73:de:61:36:ec:e6:ac:ba:d0:2c:94:e4:62:
dc:4f:8b:b1:0b:30:47:3a:d4:eb:92:b9:d6:22:0f:
2b:8f:ce:1c:73:c5:60:f0:35:0a:c6:65:80:cc:76:
61:20:0f:2e:b3:17:0f:ae:fb:06:f4:65:3e:bc:7c:
27:d8:42:52:e6:87:e1:d9:5c:6b:36:37:f9:c2:d5:
ba:eb:4a:52:73:40:4a:66:12:a4:17:94:24:25:3c:
3f:aa:c7:7a:e7:1e:0d:7e:39:90:98:e7:bd:25:5f:
d1:9a:bf:39:80:ab:e1:20:c3:85:10:c6:46:2a:ea:
18:07:dd:39:84:95:2c:a8:03:70:44:6c:84:92:5e:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:8D:FD:0D:90:DF:29:63:06:48:FF:26:C1:5B:2C:47:76:46:91
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.183.0/24
145.223.52.0/24
145.223.56.0/24
146.103.31.0/24
146.103.44.0/24
146.103.55.0/24
150.241.208.0/24
162.141.178.0/24
167.148.200.0/24
168.222.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:82:94:b1:68:33:49:54:df:16:d1:5d:20:fb:59:e4:d7:7a:
1f:e7:29:40:7a:f5:60:07:bf:47:21:c9:6d:52:c6:dd:64:ac:
20:dc:fb:f1:d3:8c:ba:c3:5e:cd:ce:6e:4a:62:cf:6f:c9:12:
1b:90:26:db:5e:0f:dd:ba:7b:c7:6a:a8:0d:2f:23:05:e5:65:
75:f0:2b:e7:63:7c:6b:f0:4a:f6:16:57:ea:77:7f:16:62:eb:
fe:ab:31:a5:eb:ae:68:a3:3c:4b:ef:5b:0b:3a:e1:37:04:94:
68:c7:31:9a:e1:35:8e:91:fc:c5:fe:7e:4b:0b:37:0b:03:c3:
34:82:e6:23:28:c5:73:ee:a7:a8:39:ea:e8:00:f0:55:e8:d4:
25:44:82:7e:f9:d8:ea:9c:9e:a6:8a:d3:a7:a5:69:46:0b:85:
67:a0:65:84:a4:cf:b9:5f:44:a5:80:f3:67:af:f6:49:bf:57:
5b:78:ba:c6:5e:47:a6:f8:cb:8a:d0:58:66:40:f8:34:69:41:
e8:37:4d:70:a3:fe:e1:1e:4a:39:62:ca:d0:38:20:92:53:d6:
15:c1:7b:ac:43:ab:39:d9:bd:bc:73:80:89:3a:ff:1d:3b:38:
a9:34:8c:21:ac:ea:93:e8:70:55:e8:a3:92:53:c7:70:a9:08:
3d:22:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:51 2026 by rpki-client