Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa
File: AS40244.roa (raw, json)
Hash identifier: 1yZMKisTopIipdMmYcrO3H899B/ArzRm84Sr1AkR420=
Subject key identifier: 4A:49:C6:61:73:47:F4:7F:0D:E3:D0:91:F8:74:10:0E:11:D5:24:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2F6CE1E9CB7C3A25B1DED473566712810CFF1B84
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa
Signing time: Sat 08 Aug 2026 05:27:44 +0000
ROA not before: Sat 08 Aug 2026 05:22:44 +0000
ROA not after: Sat 07 Aug 2027 05:27:44 +0000
asID: 40244
IP address blocks: 181.214.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6c:e1:e9:cb:7c:3a:25:b1:de:d4:73:56:67:12:81:0c:ff:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 8 05:22:44 2026 GMT
Not After : Aug 7 05:27:44 2027 GMT
Subject: CN=4A49C6617347F47F0DE3D091F874100E11D52480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:8c:ea:7d:0b:82:41:a1:ea:3a:76:3e:88:
df:40:f2:7e:84:49:39:b8:56:cf:b4:a5:9a:cb:ef:
70:e9:63:4b:72:d3:42:55:bb:5d:2f:c2:76:3c:83:
07:5e:6e:42:66:4e:9e:72:fb:5f:ec:4c:57:2f:23:
d5:2e:a7:8f:9c:2d:0a:78:3b:f4:33:b6:85:62:f5:
9b:e4:fb:2d:9f:49:1c:51:0e:76:00:37:f1:d4:13:
2b:3d:8d:01:26:2f:c0:cc:d1:35:2f:67:32:36:40:
3e:15:46:f8:88:c4:09:88:44:70:d8:f3:07:39:00:
f9:8b:24:81:96:9b:7c:23:5d:2a:ae:75:7c:1c:e8:
e9:ec:4b:4f:29:b9:1e:8b:d2:16:cd:d8:33:d4:07:
ac:cf:4d:8c:8f:b4:db:16:24:99:02:bc:c6:f1:4b:
91:3c:85:4e:eb:ae:a9:0a:1a:c4:7f:0c:b7:08:c8:
4f:e3:5a:f3:81:1e:88:12:14:a1:28:6c:02:bf:4c:
9f:34:97:67:46:f1:95:98:74:76:4d:86:8f:a2:37:
37:b3:0d:25:05:6d:29:52:46:e5:3d:6e:2f:cb:a6:
6d:b1:52:a5:a7:71:72:46:c0:6b:db:f9:09:18:39:
de:6d:7a:24:72:df:c5:bc:75:a5:4d:29:fe:27:b9:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:C6:61:73:47:F4:7F:0D:E3:D0:91:F8:74:10:0E:11:D5:24:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.149.0/24
Signature Algorithm: sha256WithRSAEncryption
69:95:19:e2:8f:01:4a:f6:6a:37:84:92:ad:df:6b:d5:24:6e:
59:8c:13:79:bb:2c:a8:80:a8:f0:ad:71:5a:dc:56:6e:5b:65:
40:2a:7b:2d:4a:96:db:a6:93:9a:88:e3:be:bd:5a:d0:22:1c:
bd:7d:7a:61:0b:1a:6c:c8:a7:99:eb:17:18:0d:71:5a:2d:0d:
d0:ac:48:02:e3:1c:dd:b0:88:d2:39:04:0b:60:27:8a:32:97:
35:6c:6b:59:c0:33:93:1d:c6:8f:ff:e5:26:43:c0:78:0a:ef:
ff:93:d9:85:d5:58:72:cc:aa:69:9c:5b:03:7f:4e:80:20:94:
55:97:c1:90:03:d0:f2:26:34:f5:38:a5:58:8f:c3:b2:d0:e2:
aa:82:32:7f:47:f0:c1:64:11:07:7d:83:b1:0b:f9:cf:59:b4:
40:31:68:f6:c0:d2:64:0b:71:a2:46:e5:b6:39:5a:61:b9:3a:
49:83:81:01:cc:f7:ec:bd:8e:22:a9:b0:04:c3:d4:ca:3e:92:
19:42:32:85:a1:d5:41:21:9d:65:50:04:6e:1e:5a:69:7c:b2:
d5:6a:fb:55:a6:38:1d:cb:ed:88:54:c2:67:53:ce:05:02:48:
2f:82:52:22:63:3e:33:8e:21:8b:bd:76:63:0c:cd:9e:8f:4e:
b0:f7:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:10:31 2026 by rpki-client