Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40605.roa
File: AS40605.roa (raw, json)
Hash identifier: Am7EKy5KWSNawPr2SC6WTw3gt5O87YDYZbBBti9OXXg=
Subject key identifier: 05:FD:A6:A9:B9:D5:C6:20:82:2F:A0:D4:84:74:1F:71:63:AF:44:35
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4E5DD1E4693D4E5443BA904284A32ED23611959F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40605.roa
Signing time: Thu 17 Sep 2026 10:18:32 +0000
ROA not before: Thu 17 Sep 2026 10:13:32 +0000
ROA not after: Thu 16 Sep 2027 10:18:32 +0000
asID: 40605
IP address blocks: 82.39.150.0/24 maxlen: 24
82.39.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5d:d1:e4:69:3d:4e:54:43:ba:90:42:84:a3:2e:d2:36:11:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 10:13:32 2026 GMT
Not After : Sep 16 10:18:32 2027 GMT
Subject: CN=05FDA6A9B9D5C620822FA0D484741F7163AF4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:0a:3e:a5:25:40:a8:56:4e:b8:2c:4a:e2:
87:90:40:1d:2f:85:50:cf:b5:43:1b:47:d5:22:51:
25:61:cf:d8:36:51:17:45:a6:4b:00:98:86:b0:8c:
1e:62:03:ef:ba:cb:b4:bc:75:eb:8d:e5:20:f6:fe:
57:8e:70:21:1b:f7:f8:22:75:13:64:11:dc:25:e6:
e2:62:51:a6:12:99:17:b2:1c:6d:a2:6e:0a:2f:d4:
8b:13:8f:bd:28:e5:71:58:14:17:11:dc:4c:8b:1a:
88:cd:23:0d:9f:de:73:00:40:c0:16:bb:35:b2:59:
7d:ae:79:de:bb:37:59:4e:7a:97:46:55:2d:df:13:
83:a3:bd:bd:ec:fd:98:7c:f2:cd:4c:04:e5:73:7d:
c9:85:47:f6:1e:aa:7d:1a:a0:bd:8b:fe:9e:b8:e9:
c8:b2:ea:34:a0:a2:dd:7a:79:4e:13:80:53:a6:eb:
4a:aa:29:2e:6b:c3:7c:9b:b4:3b:c5:57:0b:e5:d5:
04:f9:67:52:3d:a4:10:b0:bf:0e:f1:81:82:3b:b6:
34:97:2b:31:74:56:35:e3:39:ca:96:1e:7a:c1:40:
b4:21:c8:60:3a:4e:33:11:7d:6c:5d:86:01:62:5c:
e2:da:43:ac:90:ee:35:a3:0d:ef:37:a4:ba:37:fb:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:A6:A9:B9:D5:C6:20:82:2F:A0:D4:84:74:1F:71:63:AF:44:35
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.150.0/24
82.39.195.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1f:59:17:9c:09:9d:f1:bd:42:9e:85:8b:60:b8:60:e8:f1:
31:09:ff:b5:79:29:20:75:71:2d:dd:9c:bc:01:1b:75:96:6e:
0f:83:b2:a7:63:8d:11:3d:39:39:3f:aa:fd:01:f4:96:32:ec:
f7:99:5a:fe:04:44:0a:99:b1:a9:91:08:40:ec:48:d7:4a:62:
6b:6d:69:3f:34:39:30:b9:7a:c7:1d:a0:8d:04:3b:69:b8:06:
3d:6a:09:be:95:80:7b:61:2d:93:8b:61:0f:78:24:5b:6a:11:
2c:2c:08:60:5a:0b:6d:ad:ec:b4:fe:0e:d6:0e:49:a5:f2:30:
35:cd:ba:c5:e9:66:c7:36:d0:18:13:37:1e:8d:a5:8a:91:61:
3b:a5:b7:60:1f:5b:a1:00:28:ff:d2:79:a0:65:8a:fa:c5:ff:
fe:1a:0b:6c:0b:77:16:b8:70:69:b4:a0:2d:d0:93:4f:d1:2e:
b7:b3:4e:da:20:98:f8:9d:95:8b:6e:76:30:65:d4:e0:13:42:
b0:ea:ff:fe:f0:be:97:59:ad:55:99:4b:c3:de:da:f8:b3:0c:
d2:27:24:49:6d:40:64:0d:6d:a8:16:e9:68:9b:dd:86:21:c6:
df:49:61:0a:ad:3d:b8:c8:68:05:2f:91:50:59:9e:0e:5b:e0:
34:51:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:04:42 2026 by rpki-client