Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
File: AS40605.roa (raw, json)
Hash identifier: X3sht3yhsBrUYRrf+ZCeyhVHToFeD4Z9Ys2EiSpmnuI=
Subject key identifier: 08:B0:C0:76:5E:BF:DA:A7:68:51:09:9F:6A:29:F3:45:B6:C5:2B:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7BF365CD54573E7E91DD5F1EDBFCAF08BD073C59
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
Signing time: Fri 05 Jun 2026 00:47:29 +0000
ROA not before: Fri 05 Jun 2026 00:42:29 +0000
ROA not after: Fri 04 Jun 2027 00:47:29 +0000
asID: 40605
IP address blocks: 162.141.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f3:65:cd:54:57:3e:7e:91:dd:5f:1e:db:fc:af:08:bd:07:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 00:42:29 2026 GMT
Not After : Jun 4 00:47:29 2027 GMT
Subject: CN=08B0C0765EBFDAA76851099F6A29F345B6C52B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:d2:e3:8f:1e:ed:a9:f5:fd:5d:61:d2:48:
cd:1c:cc:a7:9d:eb:11:3e:7f:de:27:dd:ce:f1:cf:
93:da:e1:48:07:c8:19:01:6a:9d:9c:d5:2f:b9:d9:
29:18:c9:98:20:6c:83:29:3b:bf:8a:d4:8a:93:5b:
77:d6:41:03:c8:26:1b:59:d5:98:09:3d:fa:6c:09:
51:eb:85:b4:d5:9e:0f:7c:a7:5e:d5:47:c3:36:95:
2e:08:ae:8c:36:50:e5:35:7f:eb:83:2c:66:96:08:
f8:1d:a0:4a:12:c8:cb:6c:da:d7:45:b3:6d:af:7b:
e1:cd:a0:b8:ad:1d:ba:fb:21:f0:c1:69:f3:db:c4:
24:97:73:a3:ba:a1:b2:88:97:4c:f8:69:8c:6e:ae:
ad:2f:4b:df:51:96:bf:7a:71:d9:e2:36:8b:4c:b3:
aa:d7:27:1f:66:ea:7f:cf:c9:5b:22:d2:0f:53:54:
8a:1a:ff:5d:4f:4c:cf:02:93:dd:70:49:02:35:be:
6f:19:7a:83:43:88:46:3d:cb:76:85:ab:77:13:b2:
d6:e8:33:5e:44:ef:71:bb:c9:f2:49:42:53:8a:75:
22:c2:39:6e:87:40:39:25:8e:61:49:91:d2:88:fa:
ca:73:eb:2e:6d:a6:d3:d2:4f:43:8a:81:7a:cc:72:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:C0:76:5E:BF:DA:A7:68:51:09:9F:6A:29:F3:45:B6:C5:2B:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:5c:27:34:2a:37:b4:9c:c8:19:5f:fb:a0:d9:8f:0a:1a:
4c:8c:75:bf:96:77:92:d9:9e:67:ec:4f:4e:a3:b0:e7:51:fc:
52:86:1a:98:4c:43:22:e6:c9:30:60:b8:d9:11:77:58:49:00:
12:f2:d8:95:da:b3:1f:92:b3:ac:9d:09:b4:b2:5d:69:23:b6:
d9:3e:42:07:88:dc:00:05:5d:2e:84:27:73:b0:d8:11:80:ce:
f9:ed:40:ef:f7:21:c2:b1:0c:61:8f:7a:53:90:ec:40:62:24:
8d:c8:69:43:ef:7c:36:91:4a:83:61:4b:ab:a2:46:9c:f9:93:
4e:54:6f:a1:ef:e7:70:04:c8:0b:b6:c1:e5:74:4b:13:04:89:
70:e6:6a:46:60:eb:28:c1:7a:f9:82:8f:b4:dc:6e:53:c2:e2:
ec:55:81:9b:7e:51:cf:fe:ab:80:61:d0:de:eb:df:1a:87:f0:
4b:21:19:da:b8:cf:a8:51:fd:6a:27:68:e7:6d:5c:9d:65:b1:
7d:e6:18:23:ac:5b:ae:73:0b:8b:8a:0a:dd:b4:5b:c1:60:8c:
22:27:40:e2:58:1e:91:1c:4f:17:c6:86:26:ec:b9:95:d4:2b:
20:8f:c6:d5:90:54:a6:ad:92:b2:da:8c:ad:ef:ca:ac:89:28:
f3:e1:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:53:15 2026 by rpki-client