Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: Cl9h/IP+LwvZJWM2oAgWMU8/IjMooqFsAc10/2Z8kRw=
Subject key identifier: E5:72:E8:41:75:49:99:0F:84:AF:DD:67:3F:55:2C:B3:3E:07:C4:A7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 65BAF7B57FC673B7DB92C33D48B30A2CCAE20E63
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
Signing time: Thu 17 Sep 2026 13:39:08 +0000
ROA not before: Thu 17 Sep 2026 13:34:08 +0000
ROA not after: Thu 16 Sep 2027 13:39:08 +0000
asID: 40676
IP address blocks: 109.106.3.0/24 maxlen: 24
181.215.74.0/24 maxlen: 24
181.215.75.0/24 maxlen: 24
181.215.76.0/24 maxlen: 24
181.215.77.0/24 maxlen: 24
181.215.121.0/24 maxlen: 24
181.215.122.0/24 maxlen: 24
181.215.123.0/24 maxlen: 24
191.101.7.0/24 maxlen: 24
191.101.44.0/22 maxlen: 24
191.101.64.0/24 maxlen: 24
191.101.68.0/24 maxlen: 24
191.101.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ba:f7:b5:7f:c6:73:b7:db:92:c3:3d:48:b3:0a:2c:ca:e2:0e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 17 13:34:08 2026 GMT
Not After : Sep 16 13:39:08 2027 GMT
Subject: CN=E572E8417549990F84AFDD673F552CB33E07C4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:49:14:58:5c:c7:82:1a:56:e1:26:75:ea:
d5:69:0f:32:d4:01:d0:a7:62:ee:83:26:bf:f9:18:
20:16:0c:ec:34:2b:47:67:4d:8a:b3:74:28:b0:13:
08:ad:ed:4a:da:77:bd:98:e2:00:7b:4d:f2:16:35:
04:ba:b5:6a:6b:59:13:69:1a:d2:8a:6b:5e:54:f0:
10:cc:c0:12:fc:07:1d:69:88:34:0d:0f:ab:c3:98:
13:7d:3b:21:72:dc:9f:a6:bc:1a:19:39:65:f9:64:
71:c1:73:0d:ad:d4:31:3a:42:98:73:b2:21:47:85:
90:23:e3:9d:ad:03:2c:8e:32:c0:0f:14:9a:d4:88:
51:3d:77:4f:66:07:79:a2:25:fa:ba:b8:9c:33:86:
14:cc:27:77:46:65:51:0c:cf:2a:0d:53:f5:2b:e7:
eb:98:9a:24:fc:06:70:ed:c1:2b:43:98:d1:a7:41:
b0:44:6c:b6:f9:94:ba:81:fa:c2:56:08:7c:67:11:
ba:82:0e:41:a0:e2:90:49:4f:e3:c8:43:5d:a2:60:
85:d0:94:e5:d6:68:21:9e:0e:ad:07:48:78:ce:93:
d4:c7:eb:a5:c4:a3:31:d5:e8:17:08:89:b2:fa:0d:
3e:65:46:16:a9:61:72:87:4b:3f:c4:68:68:9f:d1:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:E8:41:75:49:99:0F:84:AF:DD:67:3F:55:2C:B3:3E:07:C4:A7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.3.0/24
181.215.74.0-181.215.77.255
181.215.121.0-181.215.123.255
191.101.7.0/24
191.101.44.0/22
191.101.64.0/24
191.101.68.0/24
191.101.137.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d2:63:24:5a:e9:8c:60:4d:f1:5d:8d:41:4e:49:d7:82:cb:
74:92:cd:3a:68:b6:e9:fb:a2:e8:26:f7:65:3f:5a:1f:f2:bc:
c0:3d:07:0d:ca:17:5b:9e:cb:76:30:a5:8f:6b:2c:2a:1c:cd:
40:95:d3:25:a3:8b:b6:d6:e3:7e:a1:a1:b6:0c:a3:3b:ee:76:
be:e7:9b:1f:4c:e3:19:ce:e4:33:43:31:15:e8:e3:ce:9e:13:
b5:d5:13:ee:7d:5c:ef:44:f4:4f:0e:f7:af:19:b1:9c:0f:8a:
46:e4:dc:ae:59:03:31:ca:13:fb:55:dd:5b:1b:46:15:43:f2:
9b:16:92:65:9a:6e:db:4a:45:72:b1:f5:a0:34:fc:60:96:b4:
44:18:ce:da:6d:bc:9f:93:62:d0:28:fe:61:ae:0b:32:9d:82:
47:44:69:49:60:1c:bb:09:5a:dc:33:77:7a:12:52:f5:a8:a6:
32:42:0c:f3:21:a8:69:b0:30:e9:f0:af:bf:b5:40:50:4a:39:
02:57:44:7a:41:93:f2:7e:d6:bf:63:fc:9f:92:2b:7f:4d:fe:
8f:b0:6a:24:92:bd:80:c2:d1:55:39:8c:b5:2a:2b:9e:c0:7d:
82:4a:35:7b:45:49:05:7c:1c:bc:a0:6e:d0:69:50:f1:7e:50:
07:d5:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:45:37 2026 by rpki-client