Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40792.roa
File: AS40792.roa (raw, json)
Hash identifier: NpdrYgHLtW3EDx+PD2t2ggLtDMG7vrpH/SrNpuro57A=
Subject key identifier: 15:F6:52:FF:51:73:96:5F:99:2D:58:62:DE:62:8C:B7:F2:89:68:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6AC82D499FB154A92B0900F64E5AFB61547116A1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40792.roa
Signing time: Sat 20 Jun 2026 05:52:15 +0000
ROA not before: Sat 20 Jun 2026 05:47:15 +0000
ROA not after: Sat 19 Jun 2027 05:52:15 +0000
asID: 40792
IP address blocks: 143.14.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c8:2d:49:9f:b1:54:a9:2b:09:00:f6:4e:5a:fb:61:54:71:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 20 05:47:15 2026 GMT
Not After : Jun 19 05:52:15 2027 GMT
Subject: CN=15F652FF5173965F992D5862DE628CB7F289689E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:3d:6d:9a:17:6b:08:a4:2d:be:68:04:2e:
43:a8:fe:85:c3:15:32:88:0d:d8:33:d1:25:66:00:
5a:37:9f:dc:a6:7b:c5:0e:89:2f:17:d9:12:a7:da:
e3:f3:28:ce:d3:11:7a:69:9e:44:d1:94:73:fd:60:
72:c1:b8:68:0e:18:0a:5b:06:2d:b6:4a:0d:ce:d2:
7b:5b:7e:31:8b:27:ea:7b:78:98:c4:79:97:9f:26:
5d:2c:54:f2:3b:78:9a:0a:c1:a6:fe:20:ad:a0:7f:
a4:02:36:e7:b3:02:20:af:e0:20:fd:e6:49:82:eb:
b7:41:8d:e6:75:32:fa:8f:e0:93:7b:72:aa:7c:ac:
cc:31:97:f7:57:69:69:54:e9:4a:21:11:88:96:f2:
d4:40:d0:55:e0:c2:b7:52:05:07:c4:56:40:0a:89:
20:ba:81:c3:45:ee:e4:7c:7e:ac:89:f0:6f:c7:a9:
fc:65:df:ed:25:6d:cf:88:a7:28:a4:cb:32:1d:6c:
77:d0:72:ac:e7:be:a2:4b:72:16:56:d7:96:1f:2e:
f4:44:74:d6:ff:49:cf:5d:a7:e6:79:19:2e:10:8f:
e1:f2:54:d8:13:5a:b9:36:55:4b:fa:af:37:88:38:
9d:bc:a4:56:8f:2e:f8:9b:20:7e:3b:ea:1c:26:a1:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:52:FF:51:73:96:5F:99:2D:58:62:DE:62:8C:B7:F2:89:68:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40792.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:0e:b7:4e:fe:ad:e3:d5:50:88:16:31:cc:8f:3d:8f:90:af:
91:ba:6c:f3:1e:2f:ef:25:ec:b8:85:51:5e:bd:8d:a8:02:54:
3c:67:83:2f:15:f7:2e:29:b0:56:9c:5e:00:31:7e:8d:10:c5:
49:04:bf:8d:d8:4f:4e:21:07:f1:4a:8f:b4:4d:29:46:3b:14:
4e:0d:f9:96:65:a5:2d:d3:d0:cb:e0:77:73:d2:88:16:23:73:
e9:c6:65:2c:bc:f3:36:aa:e4:20:a4:92:d3:0f:43:63:fe:59:
b0:e9:a7:b6:b1:f1:ee:89:ba:7d:f4:ac:9a:50:1a:1b:e9:48:
3c:e8:d5:03:6c:6c:01:67:bb:80:da:9d:5e:c8:21:fb:45:8d:
e1:71:dc:13:39:9d:11:d2:6c:f4:ae:4e:23:66:2f:b9:61:14:
0f:14:1b:2e:18:c9:92:fe:ec:ca:0e:e5:5b:b2:8f:af:cd:35:
40:c7:3b:ac:4f:24:63:c9:31:f1:97:be:f5:be:43:e8:af:3a:
30:83:b8:a6:c6:3f:6e:1c:f7:9a:3a:83:84:f1:28:3f:3c:29:
14:29:ee:8a:59:d4:fc:b4:6e:38:f4:4f:1e:86:3d:dd:1a:c5:
b9:c1:ac:5b:5f:7d:50:e5:34:b8:4a:c7:34:54:02:08:1d:1f:
2f:e3:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:16:57 2026 by rpki-client