Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: fF9fgbTE3C8GRGuQtW6+kr5qs7yTNQI7CftqaA+aNAQ=
Subject key identifier: 96:8E:BC:36:E6:D4:8C:08:89:0F:1B:F3:F6:BF:FA:15:3A:7A:F1:FF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 59F82415882F73497E9B2AD4FCB12628C7A61880
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
Signing time: Fri 05 Jun 2026 10:17:53 +0000
ROA not before: Fri 05 Jun 2026 10:12:53 +0000
ROA not after: Fri 04 Jun 2027 10:17:53 +0000
asID: 40676
IP address blocks: 143.20.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f8:24:15:88:2f:73:49:7e:9b:2a:d4:fc:b1:26:28:c7:a6:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 5 10:12:53 2026 GMT
Not After : Jun 4 10:17:53 2027 GMT
Subject: CN=968EBC36E6D48C08890F1BF3F6BFFA153A7AF1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:22:4f:18:52:fa:ed:95:f8:c8:c5:17:bb:
f6:0d:e0:09:4e:fb:56:ce:aa:a1:d8:3d:71:99:23:
c6:53:31:d1:20:0e:97:8d:1d:d3:32:fb:d8:e6:88:
b1:81:14:fb:43:ae:c7:0f:f8:9c:7d:ed:a4:bb:ae:
94:05:80:c9:7d:9a:0f:cd:37:9e:7f:36:ed:0c:0f:
5b:e8:ac:82:4c:6a:db:0f:ab:c2:0e:99:86:ae:95:
c0:b4:26:49:7e:24:a6:18:68:d2:4f:b8:2a:cf:fe:
fa:a6:70:8c:74:c2:1e:ca:f7:50:b4:d3:5f:01:ff:
3e:6b:6a:c8:cb:1b:68:fc:72:ab:82:df:85:56:c0:
b3:de:d4:46:10:57:0f:9d:7f:92:c7:a6:1b:1e:b7:
1e:c3:e0:16:69:7c:ee:26:c4:94:e4:29:b9:49:f6:
37:41:ab:64:5b:1f:14:bf:b1:29:fe:82:0a:75:af:
20:90:34:e5:cd:f7:25:c4:00:25:18:b6:a9:3c:19:
cc:2a:a0:cc:42:5d:d2:df:93:ec:0a:2c:b3:e5:a7:
70:68:53:1f:44:c6:b1:5d:ab:e0:fb:e2:79:f2:10:
b7:56:ea:83:86:f7:08:36:e1:e5:f4:71:8c:87:be:
5a:9e:b3:e4:cd:6e:23:c5:b7:30:d9:6a:27:6c:7f:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:BC:36:E6:D4:8C:08:89:0F:1B:F3:F6:BF:FA:15:3A:7A:F1:FF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7c:fe:cd:0c:6e:ad:d7:1c:34:7e:03:04:9f:74:93:68:b3:
41:7f:d6:a2:22:b1:96:51:9f:98:50:c0:8a:e4:97:d8:28:12:
d4:59:0c:9a:ec:d6:61:0d:bc:3d:71:6f:a0:c5:9f:22:cd:e3:
1f:c7:ec:b4:f7:a3:53:7f:87:ab:9c:a6:6e:12:32:44:bc:a0:
03:78:e3:97:40:10:8a:d9:c5:e2:04:02:76:b7:61:6e:d9:1d:
ea:d9:2e:26:77:76:75:b6:85:68:a7:98:c2:80:44:72:6c:26:
a8:b1:04:6a:83:11:de:56:18:29:50:80:7c:2b:a7:f1:99:85:
3a:96:01:e9:e5:75:7d:48:c7:19:9d:55:a6:b4:95:96:29:36:
a9:79:28:52:93:ef:87:8f:a2:f8:7b:73:fc:da:d1:fe:57:79:
a0:4f:9f:e6:29:10:0d:ce:e2:2b:fe:d1:d4:1f:09:e8:ff:2c:
55:4d:f1:ec:2b:e0:d3:44:ba:a7:9a:1b:93:69:cb:11:ab:6d:
b6:60:ad:84:c2:c9:73:20:10:e7:15:d7:35:93:01:16:bc:57:
df:97:21:11:b0:05:fb:dd:80:c3:8d:53:b5:a8:8c:c7:43:97:
a9:1a:9a:b0:9c:cb:b9:ab:53:c2:82:61:14:5c:76:de:f0:d1:
ba:a8:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:03 2026 by rpki-client