Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: k3w17CTerfnsg2gSplxGk8dgAJdhEsSXDZq7aetlmL4=
Subject key identifier: F1:B4:E2:29:77:87:5C:89:3B:50:DC:28:5E:E3:E7:19:DC:6C:15:2A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 665C6E18D352CF39BAA4C9924E2FBB8A5AC4BBF4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
Signing time: Fri 16 Oct 2026 00:35:02 +0000
ROA not before: Fri 16 Oct 2026 00:30:02 +0000
ROA not after: Fri 15 Oct 2027 00:35:02 +0000
asID: 40676
IP address blocks: 181.215.9.0/24 maxlen: 24
181.215.74.0/24 maxlen: 24
181.215.75.0/24 maxlen: 24
181.215.76.0/24 maxlen: 24
181.215.77.0/24 maxlen: 24
181.215.121.0/24 maxlen: 24
181.215.122.0/24 maxlen: 24
181.215.123.0/24 maxlen: 24
191.101.7.0/24 maxlen: 24
191.101.44.0/22 maxlen: 24
191.101.64.0/24 maxlen: 24
191.101.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 16:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5c:6e:18:d3:52:cf:39:ba:a4:c9:92:4e:2f:bb:8a:5a:c4:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 16 00:30:02 2026 GMT
Not After : Oct 15 00:35:02 2027 GMT
Subject: CN=F1B4E22977875C893B50DC285EE3E719DC6C152A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:24:34:62:29:68:c4:df:aa:72:f5:57:57:
36:a2:c9:08:14:9d:2f:86:46:66:e9:8d:27:58:68:
b0:4f:eb:98:49:f7:f1:b8:e1:aa:c5:ae:3a:40:e0:
71:95:4f:9b:f8:fc:6f:22:dd:79:6c:88:92:68:51:
25:3b:10:d4:01:c6:a5:de:56:1f:46:7f:e5:20:df:
0b:d2:c7:a6:e6:dd:d3:3d:cf:16:67:23:58:24:20:
52:61:59:49:29:d8:f6:87:c6:f9:0c:c1:6b:67:c8:
ae:be:3e:28:9e:45:11:a2:46:a4:60:9a:bc:ff:0e:
53:24:6e:e8:ed:fa:d7:f1:5d:27:a4:6a:db:58:b8:
53:5e:f8:67:8c:c3:77:37:b9:9e:01:f8:73:b2:aa:
a6:b5:76:7d:e4:6f:6a:2a:98:f0:dd:64:8f:e3:62:
b5:cb:53:54:0a:d3:ac:8e:81:74:fa:28:32:51:bf:
ca:29:f1:81:73:5f:8a:6a:70:d9:f5:38:db:cd:88:
41:48:46:c6:49:f8:c7:68:ed:00:91:f6:85:0e:6b:
b6:75:ee:ad:ef:fd:c6:1d:e7:2c:ee:b9:20:d9:ff:
b6:57:77:e3:5c:60:ad:29:ee:d1:77:ea:97:9a:91:
ed:00:f9:1f:fe:9f:ce:36:e2:24:af:41:b3:77:15:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:E2:29:77:87:5C:89:3B:50:DC:28:5E:E3:E7:19:DC:6C:15:2A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.9.0/24
181.215.74.0-181.215.77.255
181.215.121.0-181.215.123.255
191.101.7.0/24
191.101.44.0/22
191.101.64.0/24
191.101.68.0/24
Signature Algorithm: sha256WithRSAEncryption
34:93:a7:38:54:55:1f:00:cb:ba:b1:06:6f:10:c5:5f:d5:fd:
47:57:28:13:30:5f:e6:15:f8:fa:50:ef:63:cb:b6:8d:7b:32:
1c:16:ef:c2:59:24:ac:9f:92:9d:7c:17:15:aa:aa:8b:a2:e3:
c7:c0:06:20:68:dd:f0:85:cd:08:f4:56:aa:86:22:90:7e:06:
8e:e6:66:00:43:fe:5c:91:bb:a2:92:6b:ea:0b:fb:af:90:bf:
fc:c9:de:b3:1a:24:57:d9:52:a1:83:b8:4b:10:35:d0:59:91:
f4:a8:53:bd:33:4e:2e:2f:ea:af:79:8d:f1:d5:7c:07:04:5f:
0d:07:2c:4b:d8:88:36:2d:e2:ee:26:c7:0e:8e:2d:6f:73:7f:
94:7d:fb:23:07:be:25:8a:c0:18:28:d5:ad:2c:68:17:6a:aa:
77:54:ca:63:1b:00:f8:28:78:b7:57:02:59:ff:e3:02:d5:df:
c7:c7:45:a6:d5:7e:ad:0f:cd:47:6e:f9:9e:51:16:e0:ad:f1:
9f:e5:ec:7e:24:ea:91:96:46:07:61:43:6e:b4:a8:77:e8:81:
80:69:dd:79:2f:d9:47:d4:cb:bc:11:10:f7:4d:59:8a:2d:54:
59:a0:29:2e:fb:d0:37:ca:d7:b4:50:fc:0a:ac:3b:e5:ce:5e:
a2:76:fe:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:36:20 2026 by rpki-client