Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: qC9Lp3sw1H9AsagkM+gXZVSwrDMNQFzmeMCSX7Wp+0I=
Subject key identifier: 92:C3:D9:34:38:3C:40:90:02:28:60:81:CB:A6:11:DA:D9:C8:FB:F7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3299C6BEE844976673BA83C406A6940D12E98635
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
Signing time: Sun 19 Jul 2026 08:22:00 +0000
ROA not before: Sun 19 Jul 2026 08:17:00 +0000
ROA not after: Sun 18 Jul 2027 08:22:00 +0000
asID: 40676
IP address blocks: 141.11.51.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:c6:be:e8:44:97:66:73:ba:83:c4:06:a6:94:0d:12:e9:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 19 08:17:00 2026 GMT
Not After : Jul 18 08:22:00 2027 GMT
Subject: CN=92C3D934383C409002286081CBA611DAD9C8FBF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:46:92:38:7c:5a:7f:13:e8:91:fd:7a:fb:
eb:af:c5:6d:be:9f:9d:9d:2e:a2:29:d3:11:ac:23:
38:59:a4:d2:18:d9:88:2b:b1:db:05:94:97:a2:fb:
82:c1:cc:66:9c:20:37:90:c1:fd:a8:f7:27:e1:43:
12:34:13:a0:7a:28:66:dc:22:68:5e:d3:74:84:14:
a4:5e:34:e2:94:c4:ce:6a:4e:18:ca:63:7f:28:50:
23:35:67:a0:9c:85:b3:1c:ad:5a:e9:18:a7:1e:1d:
11:85:ba:84:15:ab:78:58:a0:8f:ec:8e:55:e3:a8:
8f:d7:eb:21:2d:25:47:78:a5:ab:55:ec:75:ad:39:
6d:8b:bf:2e:22:f0:78:59:2a:7e:d6:75:8e:29:84:
af:bd:16:fd:d2:4e:67:0b:81:29:14:00:12:44:97:
e9:4e:ae:77:da:75:41:d8:34:5d:06:30:94:1d:ae:
be:27:25:94:f5:9a:c8:67:7a:f9:1a:3f:e0:9e:22:
40:17:4c:c7:08:19:87:cf:b2:db:ed:e9:0b:c7:5b:
49:1b:34:c1:ca:e9:c7:c4:f0:8f:10:b3:1f:05:cd:
9e:c2:66:05:0a:b3:ae:ff:70:12:55:94:3e:ed:a5:
8a:4a:c4:75:d3:f4:45:a1:94:54:78:e0:80:18:9b:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:D9:34:38:3C:40:90:02:28:60:81:CB:A6:11:DA:D9:C8:FB:F7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.51.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
65:91:54:9e:9f:f1:62:83:0e:b5:b8:39:bb:a7:20:66:e2:74:
27:08:55:66:36:d2:41:ab:67:9c:5d:16:e2:05:a3:e6:d9:1d:
a6:be:47:11:0f:ab:2d:25:ef:ca:a0:86:f0:ff:bc:1f:aa:ea:
cb:bd:8f:28:1f:43:3f:5c:a6:dc:d4:ae:c7:e1:83:6e:e4:a6:
57:b2:9c:91:fd:9d:a1:df:62:37:b3:db:2b:7f:a2:34:bf:f1:
2b:94:28:04:e1:49:f9:b8:e0:f9:47:27:4f:28:4c:ed:1d:73:
51:bb:fc:b1:08:e6:ea:d8:d4:ea:55:62:6d:89:b6:ea:fc:76:
f0:13:ca:e1:8c:df:a2:8f:79:1b:4b:50:fc:08:e6:cf:ca:03:
f1:63:29:6e:0c:88:8c:4e:4d:45:fc:74:d7:50:0a:1f:f8:e6:
b1:59:f6:51:84:43:30:a7:a6:76:c0:ff:f5:58:79:c9:d6:d0:
1c:83:05:9d:e3:38:21:3d:92:8d:58:cb:7e:d4:de:7e:71:e2:
45:b2:dd:0b:4b:11:3b:3b:82:65:76:0f:b0:a3:d1:c9:e1:9c:
a3:95:de:01:44:ec:c3:bb:d5:60:e2:9c:fd:fc:10:59:42:bd:
a9:34:d2:9e:c3:df:2f:c5:de:9b:e2:b4:3c:de:a0:d8:c2:1f:
68:3f:1e:d7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUMpnGvuhEl2ZzuoPEBqaUDRLphjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA3MTkwODE3MDBaFw0yNzA3MTgwODIyMDBaMDMxMTAvBgNV
BAMTKDkyQzNEOTM0MzgzQzQwOTAwMjI4NjA4MUNCQTYxMURBRDlDOEZCRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRkaSOHxafxPokf16++uvxW2+
n52dLqIp0xGsIzhZpNIY2YgrsdsFlJei+4LBzGacIDeQwf2o9yfhQxI0E6B6KGbc
Imhe03SEFKReNOKUxM5qThjKY38oUCM1Z6CchbMcrVrpGKceHRGFuoQVq3hYoI/s
jlXjqI/X6yEtJUd4patV7HWtOW2Lvy4i8HhZKn7WdY4phK+9Fv3STmcLgSkUABJE
l+lOrnfadUHYNF0GMJQdrr4nJZT1mshnevkaP+CeIkAXTMcIGYfPstvt6QvHW0kb
NMHK6cfE8I8Qsx8FzZ7CZgUKs67/cBJVlD7tpYpKxHXT9EWhlFR44IAYm4PVAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUksPZNDg8QJACKGCBy6YR2tnI+/cwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDA2NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNCzMD
BACNC/AwDQYJKoZIhvcNAQELBQADggEBAGWRVJ6f8WKDDrW4ObunIGbidCcIVWY2
0kGrZ5xdFuIFo+bZHaa+RxEPqy0l78qghvD/vB+q6su9jygfQz9cptzUrsfhg27k
pleynJH9naHfYjez2yt/ojS/8SuUKAThSfm44PlHJ08oTO0dc1G7/LEI5urY1OpV
Ym2Jtur8dvATyuGM36KPeRtLUPwI5s/KA/FjKW4MiIxOTUX8dNdQCh/45rFZ9lGE
QzCnpnbA//VYecnW0ByDBZ3jOCE9ko1Yy37U3n5x4kWy3QtLETs7gmV2D7Cj0cnh
nKOV3gFE7MO71WDinP38EFlCvak00p7D3y/F3pvitDzeoNjCH2g/Htc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:30 2026 by rpki-client