Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: bcSxwPfkO7a+kDzQ9U/tdHfHhiYZh44qmiY1vmS/sfs=
Subject key identifier: 2B:C8:38:20:1C:B5:38:31:6A:43:82:CC:8D:AF:78:A3:EE:11:65:D2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1377B9C772B97DEBC3A48ADC9F285C23BC062613
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
Signing time: Wed 19 Aug 2026 20:41:47 +0000
ROA not before: Wed 19 Aug 2026 20:36:47 +0000
ROA not after: Wed 18 Aug 2027 20:41:47 +0000
asID: 40676
IP address blocks: 141.11.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:77:b9:c7:72:b9:7d:eb:c3:a4:8a:dc:9f:28:5c:23:bc:06:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 19 20:36:47 2026 GMT
Not After : Aug 18 20:41:47 2027 GMT
Subject: CN=2BC838201CB538316A4382CC8DAF78A3EE1165D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:34:20:f2:60:44:d7:aa:88:94:ba:93:58:
87:fa:b9:4d:2a:71:81:83:56:16:f8:47:04:71:67:
8a:03:84:3f:90:d8:9d:76:63:f8:5b:59:a2:76:fb:
bc:07:70:45:39:1f:a4:69:fc:f1:f5:33:00:5c:77:
41:22:32:a6:fd:77:12:60:c5:c4:91:21:92:b3:eb:
a7:cb:c4:1e:b4:d1:d6:8f:3a:6d:b2:41:2a:c7:a5:
c6:08:9c:40:df:00:50:fb:2d:1d:cd:65:39:5e:ef:
f9:30:8c:7f:6d:80:bb:f7:5e:2a:03:dd:5b:40:93:
a8:cb:1b:76:d7:78:e6:b6:00:e3:af:94:fe:8b:8e:
40:c4:cd:b3:93:de:69:4d:3d:3d:66:0b:92:7b:1f:
7c:0a:3b:26:9e:32:a1:af:c6:6c:f6:81:fb:76:f0:
a5:e9:61:b2:cb:2c:af:a1:af:20:06:38:af:00:8d:
ad:a9:1c:a9:db:6d:79:00:4d:25:72:8f:9e:76:49:
dd:50:4a:ca:c3:83:09:8e:62:81:61:dd:4b:35:29:
ad:87:2e:52:d7:a5:2e:e0:cf:c7:9b:27:63:51:7d:
da:0f:c6:d4:72:52:e6:6c:c2:31:16:57:fb:e7:34:
0c:71:0a:59:d7:88:d4:ba:ad:29:c7:a3:79:76:43:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:38:20:1C:B5:38:31:6A:43:82:CC:8D:AF:78:A3:EE:11:65:D2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:66:a8:1b:e0:87:c4:7a:d4:03:02:b8:b6:1b:3c:ad:9e:9c:
d0:f1:ad:75:66:22:66:a2:c1:f1:16:40:af:7b:b6:1f:17:17:
76:dc:9c:39:97:9d:7d:fb:7b:a4:4b:89:99:31:93:1c:dc:33:
0d:25:de:c7:92:0d:db:15:65:51:51:ad:62:a6:b2:c6:63:5c:
63:cb:ee:57:6f:58:22:d1:05:8c:dd:51:03:22:34:79:3f:a1:
5a:a3:54:30:21:60:0c:95:11:ab:45:9c:89:c4:a8:49:97:7b:
08:7a:6a:a9:2b:0a:20:c1:1d:71:00:7a:88:93:60:c7:b4:33:
52:5a:8b:18:d7:7c:e1:b9:c0:92:38:8a:92:7e:f2:e4:53:ff:
e8:b6:aa:d4:5f:f6:5a:ed:7f:70:a6:0e:3d:5d:ff:4d:34:b3:
98:c4:7c:de:84:96:62:6c:be:bb:93:05:7b:85:3d:d7:b1:ca:
31:01:d7:b0:b4:2b:e3:b6:88:b4:bd:df:37:7f:52:75:76:f2:
ac:52:15:7a:36:43:29:37:5b:41:7a:fb:2a:8e:3d:86:31:2e:
8c:b1:e6:e8:eb:be:c7:0c:5f:5f:62:69:00:39:1c:ec:1d:2a:
31:f7:51:d2:14:48:9f:1f:20:ce:cf:af:f4:63:4e:87:26:43:
ca:1f:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:07 2026 by rpki-client