Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: KP9O1ul6izgjWUV2nu6cD0/is7Pbj/fNG8w4OIgp0kU=
Subject key identifier: 6A:BE:23:18:8B:82:5A:5D:3B:72:8A:1E:D5:CE:67:2F:56:F6:36:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 031E412AE183C86207683DA32E2E6B4BF00689DA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
Signing time: Thu 17 Sep 2026 09:40:46 +0000
ROA not before: Thu 17 Sep 2026 09:35:46 +0000
ROA not after: Thu 16 Sep 2027 09:40:46 +0000
asID: 40676
IP address blocks: 140.233.183.0/24 maxlen: 24
145.223.52.0/24 maxlen: 24
145.223.56.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
146.103.44.0/24 maxlen: 24
146.103.55.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
162.141.131.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
162.141.187.0/24 maxlen: 24
162.141.190.0/24 maxlen: 24
167.148.93.0/24 maxlen: 24
167.148.95.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
168.222.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1e:41:2a:e1:83:c8:62:07:68:3d:a3:2e:2e:6b:4b:f0:06:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 09:35:46 2026 GMT
Not After : Sep 16 09:40:46 2027 GMT
Subject: CN=6ABE23188B825A5D3B728A1ED5CE672F56F63619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:ed:72:29:3a:77:30:8a:ee:0e:5f:1b:c1:
97:72:be:7a:8e:a4:e0:af:58:7d:56:8c:f9:76:b2:
34:97:de:a4:12:f0:36:4a:e4:63:61:fc:82:c2:f0:
f8:5a:63:2a:f3:e3:93:3b:47:0c:cd:fc:a3:68:86:
88:49:5c:b6:cc:53:55:b8:be:08:ae:3e:9c:58:47:
da:07:54:0c:2d:90:56:d1:e1:7e:5c:f9:32:b9:6e:
b4:fe:dc:9b:07:54:ca:fb:ec:01:ad:12:73:80:38:
df:4f:0a:16:ca:82:63:53:b2:95:8e:75:b1:e2:01:
20:36:c7:9d:17:f0:c7:d0:c4:a3:31:56:e7:9d:a2:
67:7d:00:8a:c8:f1:7e:0b:c9:5b:a7:92:e6:79:18:
84:80:ca:7e:ee:d4:2a:17:7d:94:98:9e:39:17:14:
56:ad:7a:a9:10:15:37:87:1f:12:8d:75:de:c8:29:
93:8e:96:3a:7f:76:37:4e:c4:ec:03:61:cd:c8:32:
45:5a:a7:82:52:eb:21:25:43:21:d6:1f:fd:54:bd:
4b:ff:87:64:ed:7a:22:1f:46:05:8f:87:08:a5:60:
ad:f2:f0:4d:6d:0b:08:b6:d3:0f:dc:8c:f9:e5:7b:
fa:7f:f4:7b:5d:68:27:cf:c5:97:54:03:dd:50:da:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:23:18:8B:82:5A:5D:3B:72:8A:1E:D5:CE:67:2F:56:F6:36:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.183.0/24
145.223.52.0/24
145.223.56.0/24
146.103.31.0/24
146.103.44.0/24
146.103.55.0/24
150.241.208.0/24
162.141.131.0/24
162.141.178.0/24
162.141.187.0/24
162.141.190.0/24
167.148.93.0/24
167.148.95.0/24
167.148.200.0/24
168.222.19.0/24
168.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:90:c3:cc:94:8e:ea:a1:d2:40:fa:d0:b5:e0:49:47:41:22:
12:c7:a1:8e:96:1d:b7:22:17:b5:35:33:b4:90:c6:b8:d2:9c:
56:3b:3f:8e:71:c3:b1:65:14:29:24:19:8a:49:e0:1a:b1:36:
5a:2e:17:7e:24:a0:29:00:f0:c2:3d:a6:cf:61:1f:27:f1:57:
f9:65:d6:55:01:d3:cd:f5:9d:ec:af:62:4d:3c:07:9a:29:58:
c6:9e:d7:08:31:bb:70:99:ab:92:49:bd:ec:d6:41:a4:0b:90:
1b:b3:03:16:ed:8b:de:19:b2:23:33:28:dd:4a:8f:39:fb:23:
51:21:38:76:b6:d6:13:12:9e:b1:ae:33:33:c3:26:39:e8:be:
a1:eb:87:57:84:51:b6:74:49:19:c4:da:32:ec:0a:41:e1:f0:
f4:2f:4b:9e:57:15:15:ee:9c:ad:63:d4:b5:fb:e3:3a:cf:1f:
a8:8d:9d:2e:29:da:47:bb:7b:be:d3:fc:a1:74:e7:8b:b4:38:
b4:5d:f9:f8:b1:d4:c7:c5:c7:1e:cb:fa:cb:c3:5a:63:95:d1:
66:13:75:ec:ec:d9:d7:f6:7e:72:72:ed:50:a3:43:f3:ee:0d:
10:e6:95:3e:f3:86:44:0e:56:bf:30:63:c4:2e:19:a6:92:1a:
10:8f:3d:62
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUAx5BKuGDyGIHaD2jLi5rS/AGidowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MTcwOTM1NDZaFw0yNzA5MTYwOTQwNDZaMDMxMTAvBgNV
BAMTKDZBQkUyMzE4OEI4MjVBNUQzQjcyOEExRUQ1Q0U2NzJGNTZGNjM2MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvO1yKTp3MIruDl8bwZdyvnqO
pOCvWH1WjPl2sjSX3qQS8DZK5GNh/ILC8PhaYyrz45M7RwzN/KNohohJXLbMU1W4
vgiuPpxYR9oHVAwtkFbR4X5c+TK5brT+3JsHVMr77AGtEnOAON9PChbKgmNTspWO
dbHiASA2x50X8MfQxKMxVuedomd9AIrI8X4LyVunkuZ5GISAyn7u1CoXfZSYnjkX
FFateqkQFTeHHxKNdd7IKZOOljp/djdOxOwDYc3IMkVap4JS6yElQyHWH/1UvUv/
h2TteiIfRgWPhwilYK3y8E1tCwi20w/cjPnle/p/9HtdaCfPxZdUA91Q2jRFAgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQUar4jGIuCWl07cooe1c5nL1b2NhkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDA2NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIweQYIKwYBBQUHAQcBAf8EajBoMGYEAgABMGADBACM6bcD
BACR3zQDBACR3zgDBACSZx8DBACSZywDBACSZzcDBACW8dADBACijYMDBACijbID
BACijbsDBACijb4DBACnlF0DBACnlF8DBACnlMgDBACo3hMDBACo3jIwDQYJKoZI
hvcNAQELBQADggEBALKQw8yUjuqh0kD60LXgSUdBIhLHoY6WHbciF7U1M7SQxrjS
nFY7P45xw7FlFCkkGYpJ4BqxNlouF34koCkA8MI9ps9hHyfxV/ll1lUB0831neyv
Yk08B5opWMae1wgxu3CZq5JJvezWQaQLkBuzAxbti94ZsiMzKN1Kjzn7I1EhOHa2
1hMSnrGuMzPDJjnovqHrh1eEUbZ0SRnE2jLsCkHh8PQvS55XFRXunK1j1LX74zrP
H6iNnS4p2ke7e77T/KF054u0OLRd+fix1MfFxx7L+svDWmOV0WYTdezs2df2fnJy
7VCjQ/PuDRDmlT7zhkQOVr8wY8QuGaaSGhCPPWI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:08:11 2026 by rpki-client