Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40244.roa
File: AS40244.roa (raw, json)
Hash identifier: 6uvJ+/Ln4LvTTTGDq7FwArgu57SEBKtH9gl7L8waMwc=
Subject key identifier: FF:9C:83:10:30:28:FB:BC:DA:C1:61:5B:4F:B6:78:27:AD:E6:44:2A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 02DF877FC9B35E491DF860AA6B00E18890B8D5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40244.roa
Signing time: Mon 13 Jul 2026 09:08:02 +0000
ROA not before: Mon 13 Jul 2026 09:03:02 +0000
ROA not after: Mon 12 Jul 2027 09:08:02 +0000
asID: 40244
IP address blocks: 84.75.141.0/24 maxlen: 24
84.75.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:df:87:7f:c9:b3:5e:49:1d:f8:60:aa:6b:00:e1:88:90:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 13 09:03:02 2026 GMT
Not After : Jul 12 09:08:02 2027 GMT
Subject: CN=FF9C83103028FBBCDAC1615B4FB67827ADE6442A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:d1:fc:7f:32:17:35:e7:b1:c5:88:df:2e:
32:f2:27:a9:86:6e:17:32:a8:4d:cb:77:62:47:62:
b0:11:2d:9d:fc:fa:52:94:4e:c1:8f:49:f7:17:27:
b6:c2:26:97:1f:d2:e8:e3:05:64:ce:51:15:88:d2:
ca:5a:9a:32:73:f2:79:72:09:a8:df:94:c9:e3:58:
ee:a6:42:43:58:5b:0d:db:c4:8c:3a:d2:1d:84:0e:
82:d2:8b:02:fd:1f:2c:38:2f:9f:e6:7b:29:a5:6c:
03:b4:0b:ac:fc:b8:84:9b:65:2e:8b:b8:f6:ed:b8:
2d:0e:28:43:d9:5d:02:ae:e5:99:48:9d:53:a6:24:
63:fb:6e:50:93:23:92:92:87:1b:d7:c8:a0:9e:ec:
7c:16:fa:b9:71:c7:6e:5a:c6:19:9b:d5:0a:54:2b:
bc:f5:9c:0f:a5:3f:6f:db:65:84:6a:e7:3f:34:fa:
c4:e6:c5:04:8e:c8:7a:c4:0a:1c:75:df:60:3c:28:
60:a9:3f:22:a2:53:04:6b:2d:5b:b5:75:28:25:e0:
0a:27:a8:82:71:62:c0:33:17:c0:7d:3a:73:ee:56:
51:2b:e1:36:ed:60:41:b0:09:94:cd:13:9b:cb:1b:
50:b8:f6:de:78:2a:2e:02:ff:31:87:df:98:48:bf:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:83:10:30:28:FB:BC:DA:C1:61:5B:4F:B6:78:27:AD:E6:44:2A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.141.0/24
84.75.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:93:a7:69:ed:4a:cf:be:84:a1:b4:31:b2:27:36:ce:57:f6:
65:21:db:dc:7f:6c:96:34:a1:9f:eb:14:c1:bf:78:08:06:d3:
ba:a2:f9:8d:29:4f:40:59:f9:c9:8f:9c:5e:b6:7b:c1:82:63:
74:36:a8:f3:2f:b3:f7:83:39:b1:3f:66:98:6e:2f:7d:41:86:
28:42:03:d7:db:3f:2f:8f:e7:fb:27:a9:f2:d7:89:1c:58:a5:
fd:1d:36:f3:14:70:e1:95:e2:c1:14:90:4e:61:4e:51:11:3e:
02:76:00:bc:70:98:78:5c:65:5a:fb:c9:bf:02:68:65:af:5b:
4e:13:d1:5d:01:7d:b7:23:fb:42:e4:1b:6f:8d:a2:b7:9f:ee:
52:41:16:c8:ad:ee:ce:f4:90:12:61:9e:6e:d2:dc:a1:e3:03:
54:a1:88:cb:a3:8b:3d:cd:b9:6e:b7:93:28:3f:4e:db:38:9f:
20:f2:17:03:5a:cc:22:25:8a:b3:21:1b:9f:de:7b:ea:d7:06:
e0:00:0a:df:89:3f:1a:03:ac:89:7c:15:4b:b2:73:24:7c:b4:
3c:d7:7f:6f:4f:9c:da:08:4a:3d:0d:38:2d:b4:70:de:a9:af:
6f:6e:cd:ff:01:9d:36:c8:3d:54:b8:92:d4:f1:6c:d6:9d:e6:
f7:13:65:04
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgITAt+Hf8mzXkkd+GCqawDhiJC41TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyMThjYzZlMjQxMDVkZTZjNWM5MDAzZDY1MjQzODkzY2Iz
Y2ZkZDAxMB4XDTI2MDcxMzA5MDMwMloXDTI3MDcxMjA5MDgwMlowMzExMC8GA1UE
AxMoRkY5QzgzMTAzMDI4RkJCQ0RBQzE2MTVCNEZCNjc4MjdBREU2NDQyQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRh0fx/Mhc157HFiN8uMvInqYZu
FzKoTct3YkdisBEtnfz6UpROwY9J9xcntsImlx/S6OMFZM5RFYjSylqaMnPyeXIJ
qN+UyeNY7qZCQ1hbDdvEjDrSHYQOgtKLAv0fLDgvn+Z7KaVsA7QLrPy4hJtlLou4
9u24LQ4oQ9ldAq7lmUidU6YkY/tuUJMjkpKHG9fIoJ7sfBb6uXHHblrGGZvVClQr
vPWcD6U/b9tlhGrnPzT6xObFBI7IesQKHHXfYDwoYKk/IqJTBGstW7V1KCXgCieo
gnFiwDMXwH06c+5WUSvhNu1gQbAJlM0Tm8sbULj23ngqLgL/MYffmEi/2p0CAwEA
AaOCAg8wggILMB0GA1UdDgQWBBT/nIMQMCj7vNrBYVtPtngnreZEKjAfBgNVHSME
GDAWgBQhjMbiQQXebFyQA9ZSQ4k8s8/dATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS83MThhMWI0Zi1iNjRjLTQwMmMtYmUxNS1kZDgyYTQxYTFh
ZjYvMC8yMThDQzZFMjQxMDVERTZDNUM5MDAzRDY1MjQzODkzQ0IzQ0ZERDAxLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvSVl6RzRrRUYzbXhja0FQV1VrT0pQTFBQ
M1FFLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00
MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvQVM0MDI0NC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFRLjQME
AFRLyTANBgkqhkiG9w0BAQsFAAOCAQEATpOnae1Kz76EobQxsic2zlf2ZSHb3H9s
ljShn+sUwb94CAbTuqL5jSlPQFn5yY+cXrZ7wYJjdDao8y+z94M5sT9mmG4vfUGG
KEID19s/L4/n+yep8teJHFil/R028xRw4ZXiwRSQTmFOURE+AnYAvHCYeFxlWvvJ
vwJoZa9bThPRXQF9tyP7QuQbb42it5/uUkEWyK3uzvSQEmGebtLcoeMDVKGIy6OL
Pc25breTKD9O2zifIPIXA1rMIiWKsyEbn9576tcG4AAK34k/GgOsiXwVS7JzJHy0
PNd/b0+c2ghKPQ04LbRw3qmvb27N/wGdNsg9VLiS1PFs1p3m9xNlBA==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client