Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS40662.roa
File: AS40662.roa (raw, json)
Hash identifier: x4HpRFJa4MvyPepFhD2CVMTyz8etcr6+Pa7m4Kijkdg=
Subject key identifier: 4F:A1:D0:58:45:3D:36:30:C5:6D:D5:C3:12:94:A1:AE:AE:C7:5B:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7EE78CB16222026AD1EE3381211F40F9D9A0D95A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS40662.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 40662
IP address blocks: 2a0f:85c1:89d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e7:8c:b1:62:22:02:6a:d1:ee:33:81:21:1f:40:f9:d9:a0:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=4FA1D058453D3630C56DD5C31294A1AEAEC75B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:09:5a:9f:66:c6:19:f6:f1:d8:8f:17:c4:
80:8e:e6:a7:6a:52:10:d0:79:0e:26:0b:88:67:95:
df:06:e0:e7:56:9a:33:4e:92:e2:18:db:12:52:f1:
72:46:bd:81:e6:7e:6d:4b:e0:de:97:50:b7:0a:fb:
ee:01:2a:95:ec:e8:a0:f9:ad:23:8f:8b:ec:77:bf:
8d:dc:b3:77:72:52:6e:c8:1e:46:b0:97:8b:74:c5:
27:b9:81:3e:23:76:65:a4:6c:29:c5:7d:21:09:33:
59:77:85:43:2b:c9:97:6c:19:d5:49:41:8a:19:b8:
70:dc:49:e4:61:88:3d:e1:4e:83:1b:09:7e:a3:90:
c7:b2:87:05:7f:77:a7:29:86:99:09:9b:1f:48:97:
ca:6c:5d:4d:b8:ee:83:ad:b1:92:55:8f:f3:55:5e:
95:ac:5e:7f:66:eb:1e:f3:33:25:02:24:f0:15:94:
2a:3a:1a:41:26:d2:9c:44:d8:1d:72:8c:a1:56:af:
a0:fd:ba:bc:88:b3:a1:cd:be:d5:60:1e:54:34:c6:
38:d7:b7:ea:6f:a1:40:a4:14:52:d9:2a:ad:56:5a:
f6:0a:b8:f3:18:5e:85:8d:c2:d3:0a:cb:b4:37:09:
7c:d0:69:b9:b4:d3:92:70:b7:cb:2c:31:91:b9:ac:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:D0:58:45:3D:36:30:C5:6D:D5:C3:12:94:A1:AE:AE:C7:5B:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS40662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:89d::/48
Signature Algorithm: sha256WithRSAEncryption
3e:02:ff:10:5f:8a:8c:a7:67:c4:68:9a:68:1b:75:89:be:61:
94:4e:cf:b7:ac:d4:c1:6d:75:0b:bd:1a:60:59:be:08:94:0a:
0f:94:19:4e:f1:f6:91:92:29:72:ac:cc:25:b7:a6:a5:1b:c7:
eb:e5:7c:18:96:18:d3:4d:16:bb:40:9c:0f:a2:e3:08:4d:1d:
3f:6b:89:63:2b:39:6c:ba:3d:92:90:49:a8:7a:de:36:d8:6e:
f6:e1:ed:54:b8:eb:89:39:15:a8:a4:31:fa:10:b5:d9:24:3f:
e8:b6:11:ce:91:f0:31:2f:89:a3:31:16:bd:44:3d:ad:3b:78:
d1:52:79:ee:2e:de:86:26:fb:09:f8:0b:c3:ed:9a:55:27:1e:
c0:c7:ba:1b:91:2f:ef:58:1d:22:71:50:df:3d:9e:5d:d8:b5:
a5:17:64:d9:23:c6:0b:a1:0f:0d:80:2f:83:ee:ba:6b:e7:03:
c6:fd:95:02:97:e4:34:e5:9e:73:c1:02:cb:aa:20:d8:db:b6:
c1:91:07:63:34:a4:53:97:a7:7b:c1:2e:58:a6:c5:c4:d6:dc:
a2:6c:e0:f5:c9:55:f1:a3:55:4b:ff:cd:cc:19:44:b5:95:14:
c5:2c:2d:c2:c0:e5:65:38:7a:bd:72:d3:0e:36:75:e5:79:f9:
97:fb:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:27:06 2026 by rpki-client