Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: tLYbcAfLZzZ7HYutjzjb8sfoAveVaV4bQt3AQb3Uqec=
Subject key identifier: 77:95:B7:84:D8:ED:48:67:B3:3E:5D:56:FA:9D:D2:18:9C:6A:34:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3161BDAFD0EB90DDB16925E9A60E9DAC804A55F2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
Signing time: Fri 28 Aug 2026 00:05:43 +0000
ROA not before: Fri 28 Aug 2026 00:00:43 +0000
ROA not after: Fri 27 Aug 2027 00:05:43 +0000
asID: 40676
IP address blocks: 82.38.24.0/22 maxlen: 24
82.38.52.0/22 maxlen: 24
82.38.72.0/22 maxlen: 24
82.38.88.0/22 maxlen: 24
178.83.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:61:bd:af:d0:eb:90:dd:b1:69:25:e9:a6:0e:9d:ac:80:4a:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:00:43 2026 GMT
Not After : Aug 27 00:05:43 2027 GMT
Subject: CN=7795B784D8ED4867B33E5D56FA9DD2189C6A3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:af:4f:17:62:f9:0d:fd:32:a5:38:b5:28:
cb:6f:00:92:31:e3:ac:59:f8:9e:89:01:8d:16:68:
e3:97:a9:72:91:85:fe:5a:28:ac:7a:09:56:77:36:
6a:8a:69:c9:bf:ab:96:1b:e6:5f:52:a0:c1:97:96:
16:a9:5c:3b:3e:6a:8b:1a:37:d3:33:96:39:9a:f3:
e7:58:7c:26:6e:c3:0a:a7:ae:de:7b:9d:9e:e2:06:
d4:8b:51:3a:35:7f:53:b5:9c:98:5a:d2:3d:71:7c:
d3:4d:0a:82:fe:a2:e6:b1:12:ae:d5:57:61:5e:fd:
cc:d5:ca:b6:98:43:79:57:f7:d1:2b:c2:23:bc:24:
6a:5b:7a:57:ac:8b:40:82:c3:76:b1:32:8d:4c:c1:
30:78:c1:51:98:88:2b:83:96:ae:5f:da:04:a5:c7:
e6:92:bd:ca:68:3e:a3:48:30:a6:d3:0c:26:d2:2a:
f9:d1:1a:9a:87:ae:12:6d:a1:62:5d:9a:f9:5c:22:
0d:cc:cc:65:df:5c:b9:3c:79:7c:cb:bc:80:71:a2:
58:20:61:7a:0e:b4:8b:ac:b0:6c:3d:02:bf:a2:5a:
dc:cb:88:a9:ae:b7:91:ae:40:49:98:10:08:ef:19:
75:ce:cc:e9:4c:54:52:16:6c:06:22:e6:30:50:ba:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:B7:84:D8:ED:48:67:B3:3E:5D:56:FA:9D:D2:18:9C:6A:34:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.24.0/22
82.38.52.0/22
82.38.72.0/22
82.38.88.0/22
178.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b3:30:05:69:a6:1f:fa:0b:73:c6:a7:bc:25:81:d3:b2:1e:
a5:27:5a:6d:4d:50:3f:3a:25:e8:36:58:f8:a2:b1:83:65:c4:
d6:42:19:6d:25:58:9d:e5:49:0f:ab:18:f4:37:b4:1a:6f:d0:
f6:cd:82:3f:15:45:83:69:d6:93:66:53:42:2b:e8:93:e5:98:
b5:f3:6f:17:94:f9:84:66:20:16:27:9d:d7:9f:bc:ed:14:35:
9b:e6:5b:5b:43:0e:15:99:37:3e:06:c9:e9:7f:d1:9b:7d:b6:
93:a9:51:9c:c3:03:46:f3:09:ab:e0:2a:d9:29:9b:75:52:f8:
94:a8:bc:8d:87:a9:78:fa:67:3d:56:62:36:99:e0:3c:aa:f3:
35:75:ff:18:9d:e4:8d:cf:03:6f:0b:dd:dc:9a:49:ca:15:1a:
4a:5d:c3:d7:c4:e9:d3:72:85:29:ea:27:a9:0a:c5:36:43:d3:
54:0a:1a:73:cc:be:0d:a3:3f:bc:20:41:a4:8a:8d:8e:f1:07:
3c:5f:8a:09:55:a3:1e:a5:64:bb:3e:7a:24:36:63:73:47:55:
34:7b:47:29:33:63:45:d6:1b:81:ba:e7:98:50:55:1f:11:67:
be:64:c4:17:59:90:fb:51:da:8d:bf:0f:91:79:57:f2:7d:88:
34:d4:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:29 2026 by rpki-client