Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: bIyUQAiklCso4IxeuGCAQzkI1GulRM26ei4lNom16Ps=
Subject key identifier: 15:E3:A3:B7:68:D9:86:2D:11:24:B3:9A:04:88:43:D0:A0:1C:E5:A2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2940D861E28F9914EE5D19348858EF2EFC7296AE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
Signing time: Mon 05 Oct 2026 11:18:55 +0000
ROA not before: Mon 05 Oct 2026 11:13:55 +0000
ROA not after: Mon 04 Oct 2027 11:18:55 +0000
asID: 40676
IP address blocks: 143.20.7.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:40:d8:61:e2:8f:99:14:ee:5d:19:34:88:58:ef:2e:fc:72:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 5 11:13:55 2026 GMT
Not After : Oct 4 11:18:55 2027 GMT
Subject: CN=15E3A3B768D9862D1124B39A048843D0A01CE5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:c7:45:5d:f3:8f:86:2c:1f:6b:6e:4b:da:
2c:7c:f4:ed:e7:02:e9:4a:f5:e6:b9:5c:3f:97:cf:
6e:3d:94:f5:4c:fc:c2:4a:43:15:42:c4:f9:50:2c:
dc:54:f0:cc:ad:e1:0d:af:c1:87:7e:5e:82:a1:c3:
ff:86:51:e4:0a:19:f7:54:8b:f4:e0:da:56:16:84:
9b:4b:e6:fc:34:0d:f7:3c:71:d7:b7:df:e1:83:8b:
f9:85:03:29:21:b5:49:84:16:80:1d:12:f7:e5:35:
87:7f:68:c1:b1:61:41:6d:67:cd:2b:0c:11:a7:7f:
d8:e6:49:35:87:be:14:45:6e:93:02:ea:e8:b1:2a:
98:0e:95:ac:5b:6c:9f:9f:3c:75:f5:59:c0:49:f2:
d2:9f:07:7c:27:48:d3:cd:d9:f1:71:c7:be:37:95:
ec:3c:ff:16:49:81:4f:53:a6:89:f7:e3:da:3c:74:
96:7b:6b:94:19:01:9b:dd:0b:2e:45:3e:ff:a0:5d:
a6:8b:ce:61:82:00:f0:55:85:08:86:76:f1:4b:18:
4e:e2:59:e7:40:07:36:29:05:d6:e6:eb:59:c4:71:
87:84:1d:c6:e8:d6:80:00:18:cc:27:39:d3:b0:5f:
1e:b3:72:ec:72:8b:80:3c:af:7d:eb:b7:ee:a6:65:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:A3:B7:68:D9:86:2D:11:24:B3:9A:04:88:43:D0:A0:1C:E5:A2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.7.0/24
143.20.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:db:ce:38:05:5c:e1:be:61:4f:3f:24:50:65:a4:58:73:47:
56:0d:40:d4:11:ac:28:3f:8b:27:d4:f7:4c:76:ad:ff:45:11:
e5:22:b4:f6:42:35:2a:8d:bb:66:02:c5:52:cf:01:2a:e4:72:
41:7b:ee:93:3e:3a:31:b4:20:f0:7f:79:e5:3e:bb:84:d7:43:
05:3a:16:ee:6d:d8:15:e8:6e:e1:91:26:aa:dd:be:44:70:97:
d6:a0:6c:a0:c8:b6:76:7f:00:e7:d6:21:bc:d7:29:e4:62:a4:
4d:ab:bf:45:88:57:10:63:bb:c5:f9:73:b4:0a:d4:35:fd:4f:
e4:79:6a:97:54:c9:cb:ff:56:d2:37:25:db:f8:57:76:18:7a:
7d:19:e0:fc:a2:0a:6f:66:36:08:c0:26:bb:c1:4e:07:1c:4e:
9c:b0:31:c2:1e:d0:a7:0a:01:30:7b:a2:a5:57:94:76:f6:c0:
8b:db:ee:c1:43:2e:34:ef:76:f5:42:0e:f7:ae:35:df:13:d4:
b8:a8:50:dd:7c:02:26:fe:1d:cb:df:e2:0b:51:1e:38:d8:a9:
1b:a2:7e:29:78:b2:37:5f:1b:3e:a5:8b:57:4d:db:68:95:8d:
06:6a:dd:0b:be:9d:dc:72:98:2d:02:b9:c3:d3:ab:0d:70:8a:
fe:b3:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:28:49 2026 by rpki-client