Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: FLkSwNFp4VZBnbcpSxnTv4brvoBZSVbiI7g+j8HeHfg=
Subject key identifier: D5:F4:55:0C:DB:92:A1:8E:CB:12:38:FF:83:E3:1B:6E:FB:9F:D3:5E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5B79D07004A1A6F0440B9E6959BCE9666235C217
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
Signing time: Wed 04 Nov 2026 19:31:01 +0000
ROA not before: Wed 04 Nov 2026 19:26:01 +0000
ROA not after: Wed 03 Nov 2027 19:31:01 +0000
asID: 40676
IP address blocks: 143.20.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:79:d0:70:04:a1:a6:f0:44:0b:9e:69:59:bc:e9:66:62:35:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 4 19:26:01 2026 GMT
Not After : Nov 3 19:31:01 2027 GMT
Subject: CN=D5F4550CDB92A18ECB1238FF83E31B6EFB9FD35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:5a:31:d3:3d:e3:60:70:28:92:c2:f6:0b:
4f:c3:03:65:91:76:a8:b4:08:f0:21:42:cb:ac:e6:
41:80:18:55:b3:6a:d6:22:20:46:e9:33:83:60:ce:
05:78:dc:d8:1a:dc:de:b2:a0:a3:22:7f:c6:4e:07:
45:9a:a3:bf:f0:11:65:c9:9a:ac:26:2c:e7:0c:d5:
a3:59:c9:08:85:45:30:dd:ac:95:e7:ce:9e:c3:33:
03:0f:f1:f1:21:b9:7f:a4:c0:3e:51:3e:03:c1:58:
fc:ce:91:64:17:ce:b7:84:bd:91:45:f4:4e:17:d5:
df:39:2b:22:43:ae:2d:3d:a4:d3:bf:43:0e:b9:d5:
37:00:41:c4:3e:0e:ac:4f:ff:f8:af:fb:4a:ed:25:
98:6a:88:8c:32:b8:39:a5:2e:0c:7c:63:dc:67:1f:
b1:d7:b5:88:84:f5:df:1a:b4:a1:53:e9:ac:cd:30:
ed:ec:b8:ac:b3:ff:17:52:00:3c:d1:10:78:0c:22:
a3:5b:58:41:80:75:6c:eb:02:17:7f:9c:7e:b5:92:
71:5e:ad:a0:25:2d:22:73:d9:3e:0e:f9:34:d1:33:
25:4d:0f:9e:b3:41:57:24:e3:ea:93:4a:ec:5a:5b:
b8:6f:5c:db:7c:39:11:b0:58:a7:a1:35:4b:5c:d2:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:55:0C:DB:92:A1:8E:CB:12:38:FF:83:E3:1B:6E:FB:9F:D3:5E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:83:05:c8:85:60:91:ab:02:6a:5d:3f:65:98:3a:28:9e:02:
f8:b9:1e:c7:fb:e8:49:2e:c8:f2:e5:37:17:d1:ca:45:6a:cd:
bb:f6:03:14:b7:d1:74:39:3b:70:53:d7:7a:67:5a:a8:03:8e:
67:e0:19:84:ba:af:28:75:28:3a:fb:73:0c:3e:b8:83:7f:c0:
5b:5a:cc:b5:ad:ca:71:5d:19:0b:54:ae:12:7f:92:f0:f7:ab:
fa:26:14:72:f9:0a:f7:da:75:c3:b2:12:61:19:8f:ad:75:0a:
fe:9b:d4:d6:13:6b:91:68:a1:54:f0:c1:f8:45:5b:50:61:47:
cc:8d:2f:59:dc:8f:ac:51:75:49:80:b3:75:ee:83:87:8c:b6:
14:5c:bc:18:74:86:15:a8:26:0a:ba:c2:06:39:e7:dc:d5:a3:
90:56:5c:ed:7b:82:88:a2:c4:97:49:61:f5:3f:dc:30:73:0c:
89:cc:f5:9c:54:c9:38:81:ba:61:c4:59:dc:ea:3e:e2:4b:03:
ca:aa:97:86:47:d2:ce:13:74:f9:f4:1b:65:b2:2d:53:bd:84:
4a:df:ac:bb:8d:77:bf:6c:5d:de:ec:d6:37:d3:9d:7d:ae:39:
c1:81:c9:58:d1:f1:bb:16:44:39:fe:36:78:d0:81:85:4b:2a:
b8:cd:cf:ae
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUW3nQcAShpvBEC55pWbzpZmI1whcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjExMDQxOTI2MDFaFw0yNzExMDMxOTMxMDFaMDMxMTAvBgNV
BAMTKEQ1RjQ1NTBDREI5MkExOEVDQjEyMzhGRjgzRTMxQjZFRkI5RkQzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqFox0z3jYHAoksL2C0/DA2WR
dqi0CPAhQsus5kGAGFWzatYiIEbpM4NgzgV43Nga3N6yoKMif8ZOB0Wao7/wEWXJ
mqwmLOcM1aNZyQiFRTDdrJXnzp7DMwMP8fEhuX+kwD5RPgPBWPzOkWQXzreEvZFF
9E4X1d85KyJDri09pNO/Qw651TcAQcQ+DqxP//iv+0rtJZhqiIwyuDmlLgx8Y9xn
H7HXtYiE9d8atKFT6azNMO3suKyz/xdSADzREHgMIqNbWEGAdWzrAhd/nH61knFe
raAlLSJz2T4O+TTRMyVND56zQVck4+qTSuxaW7hvXNt8ORGwWKehNUtc0oupAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU1fRVDNuSoY7LEjj/g+Mbbvuf014wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDA2NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFA4w
DQYJKoZIhvcNAQELBQADggEBAEqDBciFYJGrAmpdP2WYOiieAvi5Hsf76EkuyPLl
NxfRykVqzbv2AxS30XQ5O3BT13pnWqgDjmfgGYS6ryh1KDr7cww+uIN/wFtazLWt
ynFdGQtUrhJ/kvD3q/omFHL5CvfadcOyEmEZj611Cv6b1NYTa5FooVTwwfhFW1Bh
R8yNL1ncj6xRdUmAs3Xug4eMthRcvBh0hhWoJgq6wgY559zVo5BWXO17goiixJdJ
YfU/3DBzDInM9ZxUyTiBumHEWdzqPuJLA8qql4ZH0s4TdPn0G2WyLVO9hErfrLuN
d79sXd7s1jfTnX2uOcGByVjR8bsWRDn+NnjQgYVLKrjNz64=
-----END CERTIFICATE-----
Generated at Thu Nov 5 20:04:59 2026 by rpki-client