Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: m0gbZMWZp76kjbxDZRJNudz/zWuCT7JXyAjOXoFvIrA=
Subject key identifier: 6B:BF:AC:B3:9A:49:81:05:BD:B3:4D:3D:2B:83:5B:9B:17:2F:DD:CE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5CD713C35B2F7A173C41D20EBACED8F30B7059CD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
Signing time: Sat 17 Oct 2026 09:38:21 +0000
ROA not before: Sat 17 Oct 2026 09:33:21 +0000
ROA not after: Sat 16 Oct 2027 09:38:21 +0000
asID: 40676
IP address blocks: 140.233.183.0/24 maxlen: 24
145.223.52.0/24 maxlen: 24
145.223.56.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
146.103.44.0/24 maxlen: 24
146.103.55.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d7:13:c3:5b:2f:7a:17:3c:41:d2:0e:ba:ce:d8:f3:0b:70:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 09:33:21 2026 GMT
Not After : Oct 16 09:38:21 2027 GMT
Subject: CN=6BBFACB39A498105BDB34D3D2B835B9B172FDDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:0d:f7:87:9c:fd:cd:c1:6d:d4:73:4c:49:
0e:fa:d1:0a:8c:0f:9c:8c:8a:22:99:11:98:c5:05:
c9:74:ea:c2:40:65:b9:fc:29:59:d7:1f:81:fe:8e:
f7:95:06:26:2e:5b:c2:ed:5a:48:de:7a:a0:9f:1a:
69:64:42:f3:04:78:38:83:45:49:f2:da:b1:ec:6a:
f1:24:51:35:96:d8:e7:c9:79:92:4a:9c:b6:d9:ff:
04:db:e2:a1:e0:0b:80:cb:80:80:2d:1b:dc:ab:c9:
1b:93:a4:91:03:04:d7:30:97:fe:ee:6c:1f:53:d6:
78:bb:8e:e8:48:e7:f7:e9:5b:bb:3b:6c:17:77:f1:
dd:0b:b0:1e:ff:93:55:7a:d6:f4:84:0d:aa:75:17:
d1:43:51:9e:77:15:a9:1f:27:f4:d5:ed:cf:cb:8d:
25:7b:a3:0d:09:5b:d6:c2:c3:ca:72:98:01:8d:6b:
56:8b:cd:9a:95:23:04:0d:7f:98:1a:28:d5:27:be:
9f:a9:a7:91:87:d8:ab:9d:ef:78:cb:3e:66:92:71:
10:06:57:aa:f5:ff:2f:47:24:bc:8d:64:c4:f3:1b:
64:d9:63:6f:09:69:74:da:c0:fe:e1:7c:d4:01:a8:
b2:81:f0:2e:45:43:a3:5d:7c:eb:1d:25:6f:37:fb:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:AC:B3:9A:49:81:05:BD:B3:4D:3D:2B:83:5B:9B:17:2F:DD:CE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.183.0/24
145.223.52.0/24
145.223.56.0/24
146.103.31.0/24
146.103.44.0/24
146.103.55.0/24
150.241.208.0/24
155.117.184.0/24
162.141.178.0/24
167.148.200.0/24
168.222.19.0/24
Signature Algorithm: sha256WithRSAEncryption
27:73:59:c9:99:bf:6b:25:c1:bc:88:c5:5c:ec:95:c7:ca:a0:
90:29:f3:37:98:c1:29:b8:d6:9d:d0:b5:8d:f6:e8:51:fc:d3:
1a:b2:38:37:0c:cf:0a:ae:ea:d5:92:1f:87:a9:26:65:6b:bf:
79:81:31:a2:31:c8:fa:a4:9d:1b:b6:7f:2a:35:3b:e8:eb:93:
94:c8:58:4b:36:81:91:55:8d:3f:18:bf:7b:98:e8:f9:50:df:
0f:88:96:c6:7d:7b:5e:5c:5f:ef:37:70:2c:bb:32:24:2b:48:
bf:99:1a:4d:42:a5:2d:5c:6a:c4:ad:3d:84:94:8d:0a:76:27:
6d:d5:ad:f0:37:c6:4a:69:54:01:f6:60:c8:61:d1:a1:a1:05:
27:35:b3:02:55:78:fb:36:29:1e:60:ea:9c:77:75:18:7f:f9:
6e:69:2b:de:40:db:49:19:4a:f6:df:8d:32:f0:79:68:b3:5e:
ea:b8:ae:ef:2a:20:fe:ff:38:42:f2:0d:52:0d:de:45:2b:72:
63:78:75:34:f0:63:85:a3:4f:78:d7:c1:2e:d1:8f:1d:77:9a:
fe:b5:5e:99:a2:97:fe:50:a9:65:79:f1:68:17:c3:96:5c:1e:
f6:27:c6:ce:59:9f:97:d8:72:d0:e0:7b:96:3a:a9:4f:60:ce:
df:e1:3b:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:51:19 2026 by rpki-client