Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: T0hDsdmIoBD/n7Zjvw4wWKDzRvqE5fXVUA1y9yP/kps=
Subject key identifier: 15:D9:2C:C5:BA:47:C2:E8:71:30:A9:47:BF:B9:57:25:F5:FB:84:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47D1908ACE2C3C5796B62F32C3F0A272EDA8DEC5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
Signing time: Fri 18 Sep 2026 13:04:05 +0000
ROA not before: Fri 18 Sep 2026 12:59:05 +0000
ROA not after: Fri 17 Sep 2027 13:04:05 +0000
asID: 40676
IP address blocks: 82.27.72.0/24 maxlen: 24
82.27.73.0/24 maxlen: 24
82.27.74.0/24 maxlen: 24
82.27.119.0/24 maxlen: 24
82.38.24.0/22 maxlen: 24
82.38.52.0/22 maxlen: 24
82.38.72.0/22 maxlen: 24
82.38.88.0/22 maxlen: 24
84.75.240.0/24 maxlen: 24
178.83.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d1:90:8a:ce:2c:3c:57:96:b6:2f:32:c3:f0:a2:72:ed:a8:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 12:59:05 2026 GMT
Not After : Sep 17 13:04:05 2027 GMT
Subject: CN=15D92CC5BA47C2E87130A947BFB95725F5FB84B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:d1:c1:bf:f3:5e:43:15:7d:4c:96:c9:d2:
05:35:d1:fd:fe:ea:1d:84:e7:43:d4:0e:e1:c0:26:
b7:cb:9e:15:43:e2:de:2c:0d:11:75:97:43:30:fd:
a7:04:f3:13:2e:3b:4d:f1:a7:f6:2e:bb:ce:d4:48:
10:8a:4f:ba:63:c8:7a:f7:c5:9d:fc:e6:bb:20:cc:
13:b1:25:96:70:5a:44:18:ae:fe:cc:db:d8:b3:8a:
3b:a3:0e:74:6e:f2:23:ec:41:51:f0:eb:3c:ab:aa:
32:8d:0a:3d:2f:e5:c3:5e:69:9d:3c:fb:56:0c:43:
3f:8c:38:f1:87:39:db:79:e1:5a:c8:1c:29:0c:bd:
d1:55:de:80:5a:34:23:97:d8:dd:f7:29:62:56:88:
6e:9d:26:fc:7d:bb:f7:be:a8:c8:30:47:fb:4c:21:
70:54:71:c7:7d:f9:ea:cb:c1:fd:72:80:57:24:8b:
05:d0:8a:1a:81:a2:94:62:ff:0a:9b:b6:de:ec:80:
5c:06:af:1c:99:55:d5:df:28:16:f3:04:a5:b6:42:
45:ce:3e:0a:03:b2:72:b8:7a:c8:66:f7:62:29:93:
16:69:24:fc:7b:ea:fa:36:45:f5:78:38:98:ea:ac:
25:a9:35:59:82:a1:84:de:6c:f6:4e:db:08:7b:76:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:2C:C5:BA:47:C2:E8:71:30:A9:47:BF:B9:57:25:F5:FB:84:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.72.0-82.27.74.255
82.27.119.0/24
82.38.24.0/22
82.38.52.0/22
82.38.72.0/22
82.38.88.0/22
84.75.240.0/24
178.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:bb:d5:80:5d:84:78:18:34:0f:b5:22:41:78:4e:ad:9a:
92:92:9d:f7:41:5f:bf:51:64:41:2d:dc:62:b6:9d:01:0d:d3:
ba:56:2d:2e:e4:dc:ed:0c:0c:55:06:d9:dd:29:a5:3a:7a:d9:
b2:8a:ad:6c:7a:d6:69:4b:54:7d:46:93:ee:04:aa:db:b1:75:
ac:8c:83:c4:74:b5:ac:d3:44:dd:0b:bd:9f:f1:23:85:a1:ea:
74:93:fd:5a:00:3a:89:18:6a:aa:a5:69:9a:52:d0:26:01:b7:
4d:37:94:ef:5b:9a:57:41:ae:13:88:78:83:0a:10:9c:3c:36:
07:23:cd:fb:e6:d1:ef:9c:c4:63:a3:c0:9c:71:f8:da:29:4b:
e2:e0:8e:14:ab:87:a5:b1:63:cd:87:75:2a:8a:24:78:15:66:
19:27:f4:03:fc:15:dd:c5:69:b7:54:63:89:f4:e0:6d:af:e5:
5b:7e:7e:a4:af:a1:70:6e:fe:8d:0d:2a:ca:3b:15:c5:00:52:
e1:d8:ff:00:34:7a:f9:ca:48:76:88:17:56:5b:61:64:a3:d1:
04:f8:04:79:7b:87:07:c5:d6:b2:92:b0:b3:01:74:7d:25:d3:
0e:2f:e2:f2:2f:7d:7d:26:4e:75:b5:ca:d0:c9:95:f6:bc:09:
8e:ce:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:06:30 2026 by rpki-client