Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: FWEA12VVbNZ+2V3KEv86WMFcmu5uc+AR3OgzvbANPk4=
Subject key identifier: 32:7D:10:A7:1C:E2:7D:BE:09:64:68:D5:FC:03:A1:31:6E:7A:04:02
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0903AA2B6D7E5BBD7E99C86AC8849227A2C756C3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
Signing time: Fri 14 Aug 2026 21:48:30 +0000
ROA not before: Fri 14 Aug 2026 21:43:30 +0000
ROA not after: Fri 13 Aug 2027 21:48:30 +0000
asID: 40676
IP address blocks: 51.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:03:aa:2b:6d:7e:5b:bd:7e:99:c8:6a:c8:84:92:27:a2:c7:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 21:43:30 2026 GMT
Not After : Aug 13 21:48:30 2027 GMT
Subject: CN=327D10A71CE27DBE096468D5FC03A1316E7A0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:b7:24:c1:48:d4:a7:c7:d9:41:6b:dc:49:
f5:df:1f:7f:ec:e6:da:59:c2:55:9c:75:45:f8:17:
df:3b:bf:e5:0c:cc:00:8e:cb:af:0b:6c:26:67:85:
12:7c:56:6e:45:82:b0:34:e8:a1:78:c8:51:45:4d:
ca:2b:73:da:97:46:be:0d:65:d2:28:e6:91:8f:65:
9b:56:3c:7c:06:d8:10:dd:b7:01:dd:9b:b5:23:6b:
0f:14:d9:86:1f:8a:e2:e7:be:a6:31:d6:7e:e6:b1:
87:92:16:86:ce:30:88:9a:ae:40:36:4d:18:61:e7:
a4:f5:9f:55:57:67:da:6b:3a:b2:ed:11:35:42:32:
23:7e:b7:40:49:8b:c9:39:67:3c:91:a5:7e:a7:6b:
ac:41:86:9e:06:75:7f:99:49:a1:71:45:30:ee:a2:
e6:0b:8a:80:ca:3f:0f:b8:44:79:30:34:e6:83:16:
d3:7a:6d:93:8c:d8:ab:0b:5c:74:96:5f:58:88:9c:
1e:c6:db:2a:53:07:f5:bd:0e:9d:10:8f:d0:4f:a8:
1b:39:7b:a8:a9:9c:6f:0c:62:e1:55:c6:4f:02:44:
7c:85:b2:4a:7a:69:14:fe:f4:bc:1b:02:b6:c6:b5:
ce:0c:71:51:e1:04:5d:b0:67:35:0a:a2:7f:5a:31:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:10:A7:1C:E2:7D:BE:09:64:68:D5:FC:03:A1:31:6E:7A:04:02
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
25:01:b0:5d:af:5c:ad:1b:f2:68:f4:9e:e2:b2:8b:26:26:eb:
67:49:a7:11:c6:fe:6d:c8:34:72:c3:31:a9:c9:7c:56:69:ff:
23:f6:f4:12:74:b4:e7:b0:d1:93:7b:b9:2f:97:a3:80:85:95:
cc:a1:47:fc:f0:29:ee:0a:b1:d1:77:98:ea:cc:6a:3a:ca:51:
f5:74:63:c1:40:0e:ac:46:63:9f:d1:29:c8:b9:71:b5:cd:d7:
ce:cd:92:7b:6f:96:06:3c:38:63:d6:fe:59:2f:82:0b:f8:1b:
fc:5b:36:1d:01:13:3d:6d:9b:ef:80:1f:cb:81:d1:5e:0f:1d:
10:ee:74:26:00:21:4b:fa:fe:54:d4:fa:b1:2b:eb:03:72:7b:
c4:6b:c9:82:12:48:4e:00:00:88:96:44:cd:69:c8:cc:b9:5d:
cf:a1:8d:a6:a6:8c:ae:ee:3c:9e:52:0d:b6:cf:62:4f:3c:8e:
42:13:83:9a:bc:9b:45:14:c6:14:c9:92:1e:3c:36:0a:67:15:
a4:25:0b:f5:01:49:7b:a9:7d:d6:b0:44:88:e4:56:39:30:7d:
26:63:23:4c:7f:1b:79:dd:26:6b:66:d2:4f:7e:c5:dd:64:71:
d4:0a:ed:53:97:93:bf:5c:1f:75:da:07:29:55:56:92:a3:b2:
e1:bc:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:16 2026 by rpki-client