Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 0l+pTshLtTfeYuDfINRaImGYHyNoWDl7gpOL8QPzMNc=
Subject key identifier: A5:84:2C:34:3B:B8:2A:2E:ED:90:D7:13:CC:3D:51:F3:16:9B:37:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50FD845D8130F26C44172427541225932DE6F55B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
Signing time: Fri 06 Nov 2026 13:23:11 +0000
ROA not before: Fri 06 Nov 2026 13:18:11 +0000
ROA not after: Fri 05 Nov 2027 13:23:11 +0000
asID: 40676
IP address blocks: 140.233.183.0/24 maxlen: 24
145.223.52.0/24 maxlen: 24
145.223.56.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
146.103.44.0/24 maxlen: 24
146.103.55.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
168.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fd:84:5d:81:30:f2:6c:44:17:24:27:54:12:25:93:2d:e6:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 6 13:18:11 2026 GMT
Not After : Nov 5 13:23:11 2027 GMT
Subject: CN=A5842C343BB82A2EED90D713CC3D51F3169B3770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:cd:e1:63:b7:5d:44:57:08:1f:3e:9c:a2:
17:54:d0:1b:0e:7c:5d:23:02:59:42:ec:b2:d5:9d:
1a:39:78:75:3d:22:cd:6c:48:dd:c4:22:b7:95:8a:
3d:2f:76:cc:10:65:e0:b0:55:b6:7f:94:a6:85:ac:
50:8d:2c:72:24:d4:10:cf:58:91:8f:87:95:97:16:
a9:59:64:e7:8b:7f:a8:79:a7:1d:7e:4b:26:5e:36:
32:b7:6b:4b:fb:8f:cd:41:4b:59:46:13:94:41:16:
96:92:54:7a:06:d3:55:c4:cc:ab:db:51:9d:43:2e:
4b:4e:68:bd:57:1e:bb:97:bc:f9:ec:b5:2a:c5:91:
eb:02:3c:42:a0:b4:2f:fc:9f:26:31:8b:7d:a2:8e:
56:50:2d:3e:eb:60:b7:b5:1f:0b:30:f3:cf:3d:95:
c8:21:2b:5e:42:4e:72:ee:68:35:3c:f4:96:2a:a5:
16:17:c6:96:97:66:47:bd:29:12:92:73:85:e9:0d:
10:85:d8:86:0d:54:80:a7:c0:57:e8:4d:13:99:6f:
d4:19:fe:1a:74:87:42:df:65:c1:27:f0:10:e3:bc:
42:73:44:11:a0:3c:9c:5f:6c:80:75:84:42:4a:5f:
62:bb:6a:40:e0:1f:6f:e2:7e:21:ee:77:02:65:bd:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:2C:34:3B:B8:2A:2E:ED:90:D7:13:CC:3D:51:F3:16:9B:37:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.183.0/24
145.223.52.0/24
145.223.56.0/24
146.103.31.0/24
146.103.44.0/24
146.103.55.0/24
150.241.208.0/24
155.117.184.0/24
162.141.178.0/24
167.148.200.0/24
168.222.19.0/24
168.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7d:f1:a6:67:97:57:ce:dd:29:1a:86:68:41:1f:d5:16:7a:
de:45:0b:83:b2:74:8c:e5:99:1a:4a:ca:a3:47:df:15:ef:c3:
c4:a5:cd:4d:a0:45:6e:60:50:d0:4e:df:4b:d0:15:b9:66:5c:
87:d6:84:a1:02:9b:ce:71:7b:19:9c:d9:db:fe:5b:0e:ab:9b:
3a:33:84:8e:01:f2:65:c2:70:3a:9f:c8:d6:e6:0e:9a:c2:fd:
4e:df:34:d1:c8:6d:b3:d6:81:34:ad:b5:5c:b4:56:0c:2a:0b:
c5:31:58:e9:99:f0:0c:83:2e:d8:2d:20:a1:f5:83:62:82:1a:
88:4b:e8:94:7a:49:75:7a:4e:c1:57:eb:4e:ee:a7:9b:27:d8:
9d:bf:3c:bd:31:55:79:25:92:fa:c3:f9:10:a8:9c:d4:42:9a:
e4:87:56:89:e4:bd:94:10:04:f9:dc:c9:f4:99:17:07:0c:fc:
ac:83:24:52:92:f0:d6:e0:ef:24:f4:e2:4d:8a:63:65:c1:96:
5a:ed:44:19:a7:2c:05:5f:67:3c:a5:7b:67:2e:9c:7a:37:30:
0b:6c:6c:6c:ff:48:fd:ec:f5:92:e7:a0:36:a8:74:b3:fe:c6:
c3:b7:bd:8a:94:01:ea:6e:d8:a2:5e:b2:8c:d7:c0:cd:56:8f:
fd:9b:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:21:22 2026 by rpki-client