Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: ZTeYCCOG5JFCkz+IOmTyvlsZQBzLKOYbTJHxMrY61Vw=
Subject key identifier: 97:13:7F:88:D9:0F:20:E1:EC:6A:DE:1C:2F:3E:F5:C9:BB:E8:8D:02
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6E228A54563C26060F184EED3F21F0B56216D201
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
Signing time: Tue 28 Jul 2026 00:05:46 +0000
ROA not before: Tue 28 Jul 2026 00:00:46 +0000
ROA not after: Tue 27 Jul 2027 00:05:46 +0000
asID: 40676
IP address blocks: 82.29.51.0/24 maxlen: 24
82.38.24.0/22 maxlen: 24
82.38.52.0/22 maxlen: 24
82.38.72.0/22 maxlen: 24
82.38.88.0/22 maxlen: 24
84.75.187.0/24 maxlen: 24
178.83.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:22:8a:54:56:3c:26:06:0f:18:4e:ed:3f:21:f0:b5:62:16:d2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 00:00:46 2026 GMT
Not After : Jul 27 00:05:46 2027 GMT
Subject: CN=97137F88D90F20E1EC6ADE1C2F3EF5C9BBE88D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:eb:e0:14:18:19:3d:ea:44:83:73:a3:34:
4a:fc:4d:6b:99:a1:9f:9b:d1:6c:79:54:8d:c0:b6:
05:be:07:e4:68:1d:9d:06:a7:e6:a9:0f:ed:be:17:
4c:c4:de:db:c9:32:4f:8d:d4:1c:56:71:a9:71:47:
9a:9b:c2:26:45:ec:7b:4a:c8:29:76:83:f4:14:82:
fd:e1:75:fa:6a:c7:cc:f8:99:5d:e5:67:18:89:0e:
0d:9d:b2:94:e8:43:14:de:2e:da:64:58:e3:66:66:
b1:5f:c3:0f:29:5e:f5:cf:b9:fb:6f:ea:36:66:b1:
6b:32:5d:10:60:9d:46:7c:ef:3a:88:7d:4b:23:f5:
69:ee:20:1e:03:fe:7b:b2:28:cf:7f:22:c6:2e:0c:
a4:bb:f3:89:ce:b0:e8:1a:5c:40:26:f1:88:ad:e0:
7b:b2:d4:f8:c5:b4:18:b7:8f:df:48:23:45:32:3a:
d9:29:bc:85:b8:05:be:15:45:ed:11:0b:fe:d3:3f:
0c:5d:4c:36:96:68:72:8e:11:de:ea:61:5e:03:09:
25:10:a1:57:a7:cd:a5:b2:df:1d:2f:fa:ff:6f:b3:
53:88:d4:d3:57:aa:85:3c:b6:f2:f5:34:e7:53:bb:
4c:83:c8:a1:50:0f:0f:65:8a:33:76:da:4e:af:23:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:7F:88:D9:0F:20:E1:EC:6A:DE:1C:2F:3E:F5:C9:BB:E8:8D:02
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.51.0/24
82.38.24.0/22
82.38.52.0/22
82.38.72.0/22
82.38.88.0/22
84.75.187.0/24
178.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
17:41:cd:e4:a7:d6:a9:b0:df:c1:e0:15:0c:86:0b:90:4f:bb:
91:76:61:f0:54:df:89:51:0a:9e:bd:5a:b3:b3:62:80:46:4f:
8c:df:2b:dc:60:4a:c1:00:9c:24:7b:af:80:20:f1:c9:91:11:
ee:45:37:a1:dc:dc:dc:62:b0:c8:fe:0b:60:c5:1e:b7:ad:6b:
d4:97:12:d2:dc:f5:10:89:90:6f:27:2d:48:14:47:89:40:d6:
8a:b9:94:de:9c:c9:40:c6:65:4a:cb:17:08:95:14:04:ca:0f:
6c:7d:3e:d3:bc:b2:a4:66:5e:08:5d:fb:89:3c:39:1e:2b:37:
a4:18:00:95:96:f1:cc:e0:66:bc:bd:9a:28:ea:ce:6d:e0:56:
49:b6:ae:d1:fd:86:f2:4e:5c:f1:cc:aa:61:23:11:7c:33:9e:
7f:fa:5c:3b:68:1a:4d:f5:a9:90:4c:ea:92:da:3f:d6:d9:d8:
22:6d:9d:f3:fb:8d:3c:be:c8:8e:a8:a2:b8:eb:5d:a5:73:2e:
47:6f:73:97:1c:29:53:4c:42:f9:44:70:81:d5:00:44:91:e1:
b0:f7:6d:1b:f7:16:2b:bb:f2:be:1f:f0:38:25:89:d2:af:7c:
a2:22:d5:af:06:35:52:ec:91:f5:91:79:a6:b4:43:bf:1e:01:
03:a8:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:16:45 2026 by rpki-client