Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40929.roa
File: AS40929.roa (raw, json)
Hash identifier: pbSAl1z3nWg71Vwc4QQzDXla/zMWDj6aoVuBJm70P7s=
Subject key identifier: 39:66:3C:86:2A:88:2B:6C:6F:28:E3:D8:44:4E:0A:62:95:BD:18:9B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26837D9222D37FDBB95091F3A38AE19D997BD25C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40929.roa
Signing time: Tue 23 Jun 2026 11:06:36 +0000
ROA not before: Tue 23 Jun 2026 11:01:36 +0000
ROA not after: Tue 22 Jun 2027 11:06:36 +0000
asID: 40929
IP address blocks: 82.47.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:83:7d:92:22:d3:7f:db:b9:50:91:f3:a3:8a:e1:9d:99:7b:d2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 23 11:01:36 2026 GMT
Not After : Jun 22 11:06:36 2027 GMT
Subject: CN=39663C862A882B6C6F28E3D8444E0A6295BD189B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:13:c8:19:8f:15:57:57:68:3c:31:eb:b5:
0e:23:a9:05:7b:e7:90:c4:ff:7e:dd:2a:dc:a8:80:
52:fa:97:0a:78:0a:19:61:3c:66:40:53:d8:23:7e:
6c:e8:7b:1f:d1:a1:a3:29:65:e2:95:01:6c:9b:30:
59:03:61:f2:58:27:de:2a:f9:bc:b9:e5:ea:24:33:
b1:32:57:35:d8:0c:95:51:c4:b1:f3:e2:19:15:65:
76:55:98:3c:6b:ff:01:c1:b1:ff:d3:01:80:30:52:
ab:13:2f:07:a9:10:75:31:66:cf:72:d6:74:c7:a8:
8b:1d:47:a1:fb:a3:6b:2e:81:8e:c7:57:98:3b:0c:
bd:27:49:68:c0:d0:e2:84:c5:bb:fa:88:43:30:97:
77:c1:03:cf:55:44:01:77:1e:8b:d2:78:10:71:73:
49:0f:46:bb:4b:bd:a3:86:e5:6f:3d:2e:b0:35:3a:
35:a0:f0:5e:54:08:ce:75:c2:98:70:96:e6:8c:c9:
d5:a4:b8:a9:37:d4:8b:b4:96:8a:c8:3c:f4:a3:a0:
e3:3b:87:e8:63:3d:f8:24:3f:6c:03:78:e9:83:3d:
97:6a:a5:00:05:39:11:51:0e:40:c3:a2:09:59:67:
af:11:2f:a4:8f:d4:2d:66:93:94:7c:81:55:73:d5:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:3C:86:2A:88:2B:6C:6F:28:E3:D8:44:4E:0A:62:95:BD:18:9B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
60:47:af:19:95:c0:f7:34:d3:a0:7b:e6:95:61:27:d2:6b:bc:
06:db:08:b1:ac:1a:83:b0:8a:3f:68:13:cf:48:c5:92:6d:b2:
0b:e0:d1:bd:9b:d5:1e:50:f5:af:9b:f6:3c:ab:99:fc:95:42:
58:9e:a4:50:d8:cd:64:fd:40:74:c9:b5:6a:35:68:bd:1e:cd:
ae:2f:53:f4:1c:8b:38:3f:e0:53:10:1e:72:92:15:a0:59:19:
d1:ea:f3:05:e6:df:39:4f:74:1b:24:97:e3:7e:d2:dd:6b:c2:
da:a7:1c:46:6b:ab:33:34:61:79:eb:15:24:33:f4:d4:eb:30:
33:6a:fc:31:ea:27:15:f0:f1:9b:ea:39:1f:ce:45:c8:86:c3:
72:f2:a7:8f:3d:30:07:63:67:53:9f:43:e3:d8:76:86:1a:69:
55:b9:22:5a:b3:b6:c6:c6:68:b9:83:d3:4b:f7:c1:f0:0c:60:
5e:57:c0:b6:c7:26:bf:4f:4a:00:f5:98:39:14:24:4c:22:6f:
3f:ef:04:06:b3:2e:e6:02:5b:eb:2c:e5:82:cc:e0:ac:b4:22:
ff:2e:ed:9b:fb:e8:12:cb:d7:5a:0f:05:de:27:3d:6e:8a:5a:
d1:d2:2b:15:1f:cb:12:cd:cb:bd:05:d2:99:f6:3d:36:1e:ff:
29:28:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:57 2026 by rpki-client