Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 7jOLaeR58BvMWQfZnPPIydrmmD/vhGOxuQfPMhR7loA=
Subject key identifier: B0:00:79:57:1D:97:55:CD:39:CF:91:92:46:E3:53:C0:51:D3:24:F3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5B68ADE04D7D11E5C303C03FF4A8AE03FEB869AF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
Signing time: Mon 17 Aug 2026 13:45:00 +0000
ROA not before: Mon 17 Aug 2026 13:40:00 +0000
ROA not after: Mon 16 Aug 2027 13:45:00 +0000
asID: 40676
IP address blocks: 181.214.238.0/24 maxlen: 24
181.215.74.0/24 maxlen: 24
181.215.75.0/24 maxlen: 24
181.215.76.0/24 maxlen: 24
181.215.77.0/24 maxlen: 24
181.215.121.0/24 maxlen: 24
181.215.122.0/24 maxlen: 24
181.215.123.0/24 maxlen: 24
191.101.7.0/24 maxlen: 24
191.101.44.0/22 maxlen: 24
191.101.64.0/24 maxlen: 24
191.101.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:68:ad:e0:4d:7d:11:e5:c3:03:c0:3f:f4:a8:ae:03:fe:b8:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 13:40:00 2026 GMT
Not After : Aug 16 13:45:00 2027 GMT
Subject: CN=B00079571D9755CD39CF919246E353C051D324F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:04:85:54:11:42:42:74:1a:ac:6d:5c:fb:
ba:fd:f0:41:76:35:af:0b:70:06:58:24:9d:ed:bc:
5c:86:56:cc:1a:4e:d2:2e:ff:23:08:ef:c4:bc:c2:
77:5f:ff:d6:c2:de:81:ad:16:f7:e2:02:df:c8:ea:
0d:28:d6:38:19:d1:f3:5e:55:db:68:72:ef:a5:fb:
59:50:69:39:a5:90:46:51:24:7a:bf:2a:9c:5a:5a:
ba:0e:24:82:60:5e:a0:85:8f:34:2e:5d:02:14:48:
ed:ac:9b:60:9f:61:85:23:d9:6b:08:32:c6:a8:d5:
8d:33:05:f5:0e:45:31:ae:a7:ee:91:bb:87:4d:29:
10:95:92:7c:47:ef:d9:66:6b:0e:80:d9:01:c9:b8:
17:31:e7:48:90:ec:03:d4:93:d8:91:6c:3e:69:89:
6a:a2:9c:58:99:0d:86:cf:5b:ac:f6:75:9a:78:64:
66:6c:fa:a5:0b:ce:cc:fa:bc:4c:69:75:4f:c4:e2:
20:53:1e:8d:a2:f0:0a:21:e7:f9:52:33:89:54:51:
bf:a8:ef:e1:24:a8:6c:4f:12:78:f0:37:29:4e:78:
45:45:37:12:5a:4c:b8:e1:26:d0:5a:0e:51:71:25:
c1:60:05:ef:3b:cd:ef:68:0f:96:74:33:90:5f:9d:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:79:57:1D:97:55:CD:39:CF:91:92:46:E3:53:C0:51:D3:24:F3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.238.0/24
181.215.74.0-181.215.77.255
181.215.121.0-181.215.123.255
191.101.7.0/24
191.101.44.0/22
191.101.64.0/24
191.101.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:43:4b:bd:45:eb:d4:0d:9a:79:11:61:d5:e3:df:a9:dc:7f:
36:2c:56:f5:d8:ac:81:10:67:30:72:f8:91:96:d5:fb:ee:67:
f4:91:29:6c:2e:45:35:00:9b:0e:39:58:fd:ea:05:ff:2c:50:
f8:a7:36:b0:d5:c5:10:9b:46:1e:42:26:63:71:62:91:67:f2:
06:8e:e8:81:16:46:4d:77:0c:77:7e:14:cb:9a:40:36:c5:d1:
c5:5c:8f:c7:fe:8a:aa:e6:04:41:61:0c:aa:6c:43:b5:4b:d9:
17:37:82:69:82:f3:9b:fb:f0:fb:e0:bf:6b:8d:f2:12:7c:94:
51:fe:b8:30:6e:21:02:89:2c:7d:14:76:79:82:97:56:ee:97:
d3:c7:ff:a2:bd:4f:94:a8:0a:8c:d9:6a:5e:e8:19:89:b1:53:
ad:6a:2d:6a:25:af:16:eb:d2:a9:69:d3:64:1f:0a:42:6e:0e:
3d:4e:5c:5b:a9:e0:4b:a0:e4:56:a3:5d:97:c3:f8:8a:46:13:
ef:fc:93:4e:14:dd:a6:ec:fd:1f:6c:06:b1:4d:0c:ed:21:68:
90:8e:09:dc:e0:a8:92:82:32:95:b9:64:07:65:fb:51:a1:64:
7e:f6:cb:8b:3a:32:64:e7:1b:eb:67:24:8a:b6:f4:ac:b2:85:
76:86:c4:28
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUW2it4E19EeXDA8A/9KiuA/64aa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MTcxMzQwMDBaFw0yNzA4MTYxMzQ1MDBaMDMxMTAvBgNV
BAMTKEIwMDA3OTU3MUQ5NzU1Q0QzOUNGOTE5MjQ2RTM1M0MwNTFEMzI0RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkASFVBFCQnQarG1c+7r98EF2
Na8LcAZYJJ3tvFyGVswaTtIu/yMI78S8wndf/9bC3oGtFvfiAt/I6g0o1jgZ0fNe
Vdtocu+l+1lQaTmlkEZRJHq/KpxaWroOJIJgXqCFjzQuXQIUSO2sm2CfYYUj2WsI
Msao1Y0zBfUORTGup+6Ru4dNKRCVknxH79lmaw6A2QHJuBcx50iQ7APUk9iRbD5p
iWqinFiZDYbPW6z2dZp4ZGZs+qULzsz6vExpdU/E4iBTHo2i8Aoh5/lSM4lUUb+o
7+EkqGxPEnjwNylOeEVFNxJaTLjhJtBaDlFxJcFgBe87ze9oD5Z0M5BfndAnAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsAB5Vx2XVc05z5GSRuNTwFHTJPMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDA2NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBAC11u4w
DAMEAbXXSgMEAbXXTDAMAwQAtdd5AwQCtdd4AwQAv2UHAwQCv2UsAwQAv2VAAwQA
v2VEMA0GCSqGSIb3DQEBCwUAA4IBAQBaQ0u9RevUDZp5EWHV49+p3H82LFb12KyB
EGcwcviRltX77mf0kSlsLkU1AJsOOVj96gX/LFD4pzaw1cUQm0YeQiZjcWKRZ/IG
juiBFkZNdwx3fhTLmkA2xdHFXI/H/oqq5gRBYQyqbEO1S9kXN4JpgvOb+/D74L9r
jfISfJRR/rgwbiECiSx9FHZ5gpdW7pfTx/+ivU+UqAqM2Wpe6BmJsVOtai1qJa8W
69KpadNkHwpCbg49TlxbqeBLoORWo12Xw/iKRhPv/JNOFN2m7P0fbAaxTQztIWiQ
jgnc4KiSgjKVuWQHZftRoWR+9suLOjJk5xvrZySKtvSssoV2hsQo
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:06:03 2026 by rpki-client