Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 7DDR//r0iFROtW6VQz3qCFTlR4kxBm0KSA1tDoJOcYk=
Subject key identifier: 21:FE:E6:E1:8F:3B:22:82:87:4C:A5:78:0F:1C:54:97:C1:77:0E:7F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 24E98C6312AF077BDC36BC143CDFF42661CBEFC9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
Signing time: Thu 15 Oct 2026 06:58:13 +0000
ROA not before: Thu 15 Oct 2026 06:53:13 +0000
ROA not after: Thu 14 Oct 2027 06:58:13 +0000
asID: 40676
IP address blocks: 46.202.224.0/24 maxlen: 24
91.124.135.0/24 maxlen: 24
91.124.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e9:8c:63:12:af:07:7b:dc:36:bc:14:3c:df:f4:26:61:cb:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 15 06:53:13 2026 GMT
Not After : Oct 14 06:58:13 2027 GMT
Subject: CN=21FEE6E18F3B2282874CA5780F1C5497C1770E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:8f:78:e3:fc:7d:65:0b:c5:94:76:29:94:
e8:5b:fc:cf:0c:fb:01:74:1c:20:67:c2:67:b5:e6:
4f:83:f9:80:48:78:46:fe:88:4a:89:c0:6c:47:37:
dc:16:32:fa:91:df:d2:ad:48:e9:b8:45:a3:94:b0:
c3:a6:60:9d:49:1a:4e:1b:0b:c1:de:4c:8b:c6:f5:
f8:e4:bf:d5:00:c6:cb:d7:78:73:57:16:ab:2b:a3:
3b:46:64:3b:d4:22:07:6d:33:df:8d:6e:c4:5e:05:
ec:15:00:fa:e1:89:3c:61:26:ae:1f:d9:05:eb:c4:
cd:8f:c5:18:41:71:2f:90:86:1b:b3:f7:8c:23:9e:
3c:ac:84:17:cd:72:e9:68:53:0b:24:77:54:cf:da:
3b:fa:a2:6f:85:df:02:39:cf:0c:aa:c7:16:7f:07:
7a:99:04:e1:f4:c7:8a:76:81:b8:6b:c6:a5:38:fb:
04:61:e8:2e:a8:96:16:b4:3a:32:95:d6:cd:1e:f2:
7a:24:ea:29:68:ed:96:d9:b4:8b:54:1c:a6:df:46:
24:6a:96:4a:a8:cd:60:1a:90:05:6d:36:f0:2c:ef:
0f:f7:bb:de:f5:b1:ff:da:7d:91:b7:15:3b:4e:75:
67:6c:d7:61:94:cf:c1:57:8c:48:d4:5d:c6:f2:ba:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:E6:E1:8F:3B:22:82:87:4C:A5:78:0F:1C:54:97:C1:77:0E:7F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.224.0/24
91.124.135.0-91.124.136.255
Signature Algorithm: sha256WithRSAEncryption
a6:fc:b7:05:16:45:24:15:ab:4b:a2:c6:21:cb:d3:8a:ac:a5:
18:e8:de:b7:42:9e:ce:1c:27:ba:8c:8f:f1:b4:a2:b7:7b:0a:
a6:07:a8:0b:03:ab:93:d7:43:83:b7:d4:64:58:e4:0e:72:20:
77:c7:84:28:44:d0:bd:9b:92:8e:fb:79:e9:db:59:7a:97:37:
7d:a3:5b:c1:a6:aa:fd:a2:37:ba:65:0c:a9:c6:a3:f5:d0:f0:
73:6a:de:8e:5c:4e:f9:ec:a5:5f:22:34:a7:13:ac:b3:8a:52:
7b:42:1b:f7:a9:48:6f:3f:91:c0:01:3a:bf:e4:c4:d0:ca:8c:
b8:14:78:b9:72:98:55:11:b6:77:26:ca:88:fd:a4:17:71:7c:
cc:c9:52:a9:d8:44:49:fc:cc:b4:52:4b:05:f6:59:9d:e6:12:
27:57:68:d9:40:87:1b:9d:89:98:84:39:ac:f3:4c:20:ad:0b:
cf:d0:ee:52:1c:96:31:dd:ee:bd:8c:b0:69:9c:f8:d8:b5:f9:
2e:24:2e:7e:87:04:3a:06:f3:9a:c6:d2:5e:71:cf:2d:43:59:
cd:1b:35:53:c8:4b:02:10:b6:ad:3b:3b:e6:40:ee:cc:8c:9e:
5d:d3:3b:4b:1a:13:64:70:1f:0c:70:88:3f:00:5b:b2:17:c5:
d2:7b:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:11:21 2026 by rpki-client