Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140227.roa
File: AS140227.roa (raw, json)
Hash identifier: IM1wiH49127nRRCZ9SCKG8Hkvf/dP9nfa00Yy8qkeIs=
Subject key identifier: 2A:FB:5E:56:20:95:7F:3E:D5:6B:B4:79:CC:93:D0:DD:AC:17:18:58
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 442F002F6309B10F4F28DCD1F09BA186B210868B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140227.roa
Signing time: Wed 01 Jul 2026 04:26:09 +0000
ROA not before: Wed 01 Jul 2026 04:21:09 +0000
ROA not after: Wed 30 Jun 2027 04:26:09 +0000
asID: 140227
IP address blocks: 82.40.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2f:00:2f:63:09:b1:0f:4f:28:dc:d1:f0:9b:a1:86:b2:10:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 04:21:09 2026 GMT
Not After : Jun 30 04:26:09 2027 GMT
Subject: CN=2AFB5E5620957F3ED56BB479CC93D0DDAC171858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:7e:f6:9d:9f:15:42:34:02:26:13:f2:ff:
46:5d:47:0f:0f:74:ed:20:e3:29:d0:fa:df:3a:e1:
ef:58:ab:25:2c:55:88:3f:81:6e:ae:d2:c0:33:90:
31:43:dd:6a:e7:14:96:07:c9:c4:b3:39:c1:2c:a1:
24:0e:0c:74:96:0e:31:c0:6c:92:9d:a6:ca:ac:f8:
59:d8:9f:da:73:98:f0:0b:8a:75:71:68:63:46:0a:
1e:ff:ac:ec:9a:87:de:a6:ce:a6:04:26:18:24:94:
ef:34:f2:e8:9e:2b:da:37:2e:3e:43:29:76:89:6d:
9d:97:41:a9:d8:bf:65:9e:be:59:16:50:2d:2c:90:
ce:5e:08:92:55:82:dc:7f:55:03:01:d5:62:8e:2e:
3d:2a:e8:19:61:7b:ff:de:21:75:23:43:bc:0c:75:
4a:d7:87:fd:e9:f2:4a:b3:09:ca:8f:f5:8f:3f:55:
46:3d:24:b5:03:05:21:b5:ff:2b:70:18:40:26:aa:
d4:33:a4:24:dc:61:3a:1d:d1:d6:84:17:e8:97:14:
76:c6:6a:18:c0:35:c0:1d:c0:3f:b7:2e:e7:b6:f0:
9b:b5:51:f2:25:04:31:f5:f2:25:64:23:e7:20:f5:
5d:09:0b:49:60:37:3e:0f:3b:eb:86:fe:1a:03:36:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:5E:56:20:95:7F:3E:D5:6B:B4:79:CC:93:D0:DD:AC:17:18:58
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140227.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.32.0/22
Signature Algorithm: sha256WithRSAEncryption
54:83:74:96:20:75:d4:a5:e1:e3:03:9a:16:50:49:e9:10:70:
fb:f6:2c:0e:74:c7:57:10:fd:1f:97:d8:8e:4d:25:41:19:6a:
92:4c:88:c1:33:ed:9c:7b:4c:c7:54:b7:6a:01:3b:e4:35:bf:
89:ec:6d:bf:05:b2:32:e7:87:4f:cb:b1:02:9c:94:e4:6e:df:
3b:81:14:0f:79:27:44:ae:61:bc:54:8b:41:9f:81:91:54:2d:
d3:58:9a:2b:18:af:9c:c5:42:24:10:8d:7a:4a:86:d0:5d:d6:
11:00:dd:8c:6c:f9:ea:5d:a5:ee:1c:fa:28:a4:7c:49:11:f4:
95:cd:be:4c:9e:95:17:e2:85:07:9a:b9:12:00:c9:b7:ea:26:
8e:7d:2f:8f:20:eb:06:31:72:7e:f3:cf:07:14:5f:79:fb:f6:
e6:ea:85:0a:28:6d:0e:e0:eb:ef:fe:9b:c2:41:19:46:8f:c7:
ae:ff:b7:1a:2c:b4:47:15:a1:c9:3b:85:9e:7f:85:15:c5:5b:
01:4c:6f:a0:bc:b3:c2:bc:7a:94:ce:a1:df:12:95:da:69:b9:
c3:a8:bd:18:90:0e:10:0e:d2:b8:47:10:63:24:5f:04:dd:04:
d6:3f:9f:54:42:56:65:ce:6f:9f:95:7a:6a:5a:c6:c1:3e:8f:
90:8b:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client