Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS40352.roa
File: AS40352.roa (raw, json)
Hash identifier: zD0xqd5sXzdGo6EF84+O92Ic0KmkhjIMhSt0sdwuKTc=
Subject key identifier: ED:05:D4:43:0D:74:23:F6:8D:57:3A:E6:4E:75:D1:BB:49:59:C8:40
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7DAF4101830DCFB142E3156D1CCC330C46C8D107
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS40352.roa
Signing time: Tue 07 Apr 2026 08:43:08 +0000
ROA not before: Tue 07 Apr 2026 08:38:08 +0000
ROA not after: Tue 06 Apr 2027 08:43:08 +0000
asID: 40352
IP address blocks: 212.60.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 14:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:af:41:01:83:0d:cf:b1:42:e3:15:6d:1c:cc:33:0c:46:c8:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 7 08:38:08 2026 GMT
Not After : Apr 6 08:43:08 2027 GMT
Subject: CN=ED05D4430D7423F68D573AE64E75D1BB4959C840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:d8:09:7f:67:29:89:bd:f5:fa:06:3b:dd:
ae:f0:09:7f:5b:7a:f6:2a:a0:db:ea:4c:cf:35:93:
42:0b:99:5b:bf:4f:f7:cd:53:41:64:64:ff:d8:c3:
7b:5c:3d:7e:e9:d7:92:62:98:0b:3b:37:66:62:c9:
0f:82:ab:cf:f7:2f:be:0b:be:31:fc:7e:75:f5:b0:
a8:e5:68:8c:cd:3c:6d:17:49:cf:c2:8b:65:bc:56:
49:66:3b:d7:3f:92:93:5c:64:28:1c:d2:86:78:a5:
9a:56:1f:cd:85:3f:db:90:2b:20:9a:16:f5:e4:e6:
af:e0:43:26:67:95:77:f5:07:87:19:6f:f0:0d:64:
95:0c:ec:16:40:dd:0c:03:5d:88:83:f6:34:a6:3d:
b6:6d:47:c3:27:46:b0:79:62:22:bd:02:25:96:47:
8d:8e:7b:a5:5d:ec:de:28:ed:4c:a0:5f:d7:0a:b4:
c6:b4:23:2b:e0:0f:85:ff:e7:ae:aa:a5:d6:41:a6:
03:3c:75:b4:80:7d:65:38:01:5e:c7:93:71:20:c1:
82:33:02:24:60:9d:c0:e7:02:77:a3:01:ef:58:da:
49:a4:b2:5d:db:f1:60:9c:e9:49:92:ab:46:d5:73:
34:52:ea:ce:75:ec:e5:f8:71:34:9a:5c:73:5f:c3:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:D4:43:0D:74:23:F6:8D:57:3A:E6:4E:75:D1:BB:49:59:C8:40
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS40352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.148.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a4:ef:3e:26:2e:df:35:db:ca:1f:06:ab:5e:71:c0:ac:d1:
c4:24:c4:80:3a:38:d6:f5:b4:47:01:d7:e9:ef:c4:d4:a0:6f:
17:4a:67:25:cf:f4:6b:6f:05:41:1b:ef:f4:e3:40:3a:c7:65:
ee:66:fa:b0:ea:4f:01:f6:86:26:6d:f0:e0:ca:03:13:f0:c6:
a7:52:9d:b7:30:eb:a4:87:18:18:f4:d5:a2:9b:dc:b9:11:2a:
53:4e:dc:76:8d:6c:ad:28:ea:16:09:74:21:67:99:81:fe:5d:
4a:f1:ef:c6:3f:47:23:bb:02:d7:cd:d3:36:63:87:26:4f:cf:
1b:4c:10:ef:f5:d7:97:c3:0d:94:5a:1e:d1:7f:a5:78:77:f9:
6f:b5:48:cc:e1:51:7f:66:8d:4b:65:8b:00:1f:5e:54:5b:02:
16:64:f0:d2:ce:1a:da:17:2e:f3:3d:f9:1f:25:9b:89:dc:c2:
c3:d1:fc:0b:b5:ea:96:3c:50:b2:1a:17:1a:dd:a3:99:44:1a:
47:46:4b:4e:ff:93:41:f1:32:41:88:e8:e4:d8:10:d3:2e:1c:
14:a3:5e:f1:5f:03:d7:1d:57:5a:a5:a0:5e:6a:b8:48:e0:61:
5c:6a:ee:1d:38:d2:84:79:6b:21:60:b9:c0:05:ab:4b:43:5e:
90:cd:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:36 2026 by rpki-client