Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40792.roa
File: AS40792.roa (raw, json)
Hash identifier: M+c7Fb/ov/f49NtIp9TGhCk4RXyr3U+2/fovg2syoIk=
Subject key identifier: C2:5D:1B:C0:A0:F9:C9:78:40:71:D9:3E:A6:7E:72:F6:95:1F:FD:E9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1F51D233E16F400FDC34CF4CC3BA92F3B0BC3CAC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40792.roa
Signing time: Sat 20 Jun 2026 05:52:19 +0000
ROA not before: Sat 20 Jun 2026 05:47:19 +0000
ROA not after: Sat 19 Jun 2027 05:52:19 +0000
asID: 40792
IP address blocks: 82.40.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:51:d2:33:e1:6f:40:0f:dc:34:cf:4c:c3:ba:92:f3:b0:bc:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 20 05:47:19 2026 GMT
Not After : Jun 19 05:52:19 2027 GMT
Subject: CN=C25D1BC0A0F9C9784071D93EA67E72F6951FFDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:18:42:8f:75:b9:c3:1b:5a:e5:71:7d:a6:
49:c8:bf:79:53:6b:e6:de:8e:2d:8e:43:f4:c4:c4:
5c:47:18:2c:11:ed:50:ce:88:28:15:91:f7:ab:40:
7f:82:e5:ce:69:9e:ef:8c:92:b1:0f:00:39:3f:79:
e6:81:0b:19:37:b1:e4:2a:59:d8:c6:c4:6a:52:e9:
9a:82:81:db:23:2f:ca:ef:3f:b7:2b:c2:ba:fb:08:
b7:aa:ac:ca:e3:28:fb:20:ce:bc:88:43:9b:33:75:
96:c3:c5:c3:4f:6f:31:cc:30:ff:b6:f5:d2:39:fa:
af:41:3e:4d:94:20:c6:29:26:10:95:57:17:b3:2c:
43:4b:a8:70:fb:3a:f5:27:cc:c9:c3:fb:62:d0:56:
2c:e7:01:b3:ce:ce:a7:fc:00:20:b8:e8:b8:e7:ac:
c4:8a:b1:f9:3a:76:bd:b7:92:c3:d9:ea:86:2a:be:
4a:14:19:02:5b:4c:75:9a:7e:39:fe:74:7f:bd:97:
8f:0d:e8:4e:2d:cb:3a:70:b1:55:1e:ee:de:cf:b7:
a7:e3:f7:21:d1:19:af:61:3c:e0:1c:3e:3e:d4:f5:
57:ff:be:7f:6d:ca:8f:b9:cc:ac:4d:23:c9:84:d5:
9f:4d:c0:f7:ee:47:c9:10:b5:54:a3:df:64:f0:a9:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:1B:C0:A0:F9:C9:78:40:71:D9:3E:A6:7E:72:F6:95:1F:FD:E9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40792.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.40.0/21
Signature Algorithm: sha256WithRSAEncryption
81:23:c1:1a:34:60:9d:0a:b0:5f:e3:2d:2c:f5:26:1d:c7:20:
ef:21:eb:f9:6f:d1:b0:f5:0a:cb:2f:87:cc:66:6b:4a:58:ca:
9f:84:4d:2c:70:22:a4:32:5a:54:00:f4:9f:fc:f1:85:6f:7a:
6c:eb:5e:6c:19:f7:1c:bc:5e:99:ec:fc:6e:6d:85:c9:39:18:
e7:ed:0a:6e:e2:43:33:34:5f:85:9a:92:9f:ec:b6:f6:f0:de:
3d:0d:ac:48:12:c0:ed:83:89:b4:04:3e:45:7e:42:ef:42:31:
fc:44:9a:2f:ef:87:cf:ef:a5:54:bd:ce:42:4d:43:54:31:20:
4d:75:9a:76:b0:7d:97:e3:db:7d:6f:48:62:a0:ff:59:e1:b0:
ca:f7:7e:9f:db:c1:e2:90:7b:50:3e:6f:ba:e5:ce:e3:f3:87:
cc:86:21:8c:6d:9c:46:32:12:d2:ba:38:9d:9f:b9:5f:27:30:
91:1f:0d:1e:a2:c8:2b:97:22:51:74:64:1d:9d:43:51:8d:4b:
53:0d:af:9f:e3:6e:e6:70:54:ed:89:41:5e:24:9f:aa:98:99:
76:bc:f6:18:63:db:af:22:7d:ad:03:ff:c4:f6:1e:45:14:8a:
96:78:e7:67:42:9d:18:38:2c:bb:0c:2b:1d:ab:a6:cb:e7:94:
72:92:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:15:07 2026 by rpki-client