Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: JPd2Xl0UOjc3qlH2lRnzKYsFrQXAXRYeQNYqUCGudzw=
Subject key identifier: D0:C3:17:4B:CE:98:48:3B:32:2E:BF:EB:47:B1:16:7A:6F:89:2A:2D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04B5DFB05B7BBD827C235302085CC3749622A2EF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
Signing time: Sun 01 Nov 2026 09:50:33 +0000
ROA not before: Sun 01 Nov 2026 09:45:33 +0000
ROA not after: Sun 31 Oct 2027 09:50:33 +0000
asID: 40676
IP address blocks: 46.202.224.0/24 maxlen: 24
91.124.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b5:df:b0:5b:7b:bd:82:7c:23:53:02:08:5c:c3:74:96:22:a2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 09:45:33 2026 GMT
Not After : Oct 31 09:50:33 2027 GMT
Subject: CN=D0C3174BCE98483B322EBFEB47B1167A6F892A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:77:9f:bb:59:ce:d5:0c:12:fb:47:e3:a3:
60:d2:8e:b1:40:ae:c1:ee:9b:db:63:f3:7f:29:ef:
e8:3c:89:81:df:84:4e:11:e5:ff:fa:e3:c5:ff:a9:
aa:73:d2:55:71:26:cb:82:29:3f:2a:60:91:c4:72:
ea:f9:81:5a:14:15:08:ee:ba:d0:83:44:d2:19:33:
83:cb:af:b3:e9:ca:17:08:38:b7:99:44:c6:0f:c3:
1a:5a:9f:ad:8d:83:5f:e0:b6:04:9c:1e:83:f9:20:
d8:47:2f:1c:8e:ab:92:08:9f:1e:41:2f:43:a7:a9:
10:aa:95:60:ca:6d:55:c0:78:0f:f2:d0:e9:65:b9:
f9:ee:95:3e:d3:5b:d7:c1:8b:c0:5b:a8:7f:4a:42:
71:a3:a3:9a:63:b7:53:02:2f:80:92:e7:56:81:17:
48:35:95:df:8c:ae:2c:c2:98:05:91:49:2c:b0:4d:
7c:a5:d7:92:22:ce:27:7b:42:a4:42:60:4d:69:d4:
e6:9c:33:e7:af:d7:d9:8f:8c:fc:f1:73:b9:3e:b4:
e2:6e:09:ef:dd:e9:92:ea:91:82:38:cb:79:b2:5c:
ad:4d:54:8c:f3:0a:62:67:f0:b7:01:c2:40:c8:99:
79:b6:bb:b3:4c:2f:22:69:31:70:97:94:fd:02:37:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:17:4B:CE:98:48:3B:32:2E:BF:EB:47:B1:16:7A:6F:89:2A:2D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.224.0/24
91.124.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:34:81:bf:1a:85:d5:07:76:1d:90:97:e7:5e:04:26:75:d3:
d0:15:2f:52:54:b2:54:20:7e:42:28:4a:aa:ed:f7:43:78:b1:
b7:12:ab:b0:30:f5:05:4a:1b:e6:21:5d:0a:db:c0:cc:d1:24:
a8:1e:64:5f:71:c1:b9:77:10:5d:c9:e9:f0:2e:00:dd:d5:7e:
f7:ee:b4:a3:a3:2d:de:15:e6:44:3e:10:a2:31:84:15:4f:64:
38:ab:c1:c6:34:24:83:30:82:f8:88:cc:2f:7e:cf:23:0f:2b:
d0:a2:87:a3:f4:a7:64:b2:b3:a5:f8:84:e7:65:4c:16:53:c1:
57:13:29:6a:b3:02:94:a4:b3:fa:e8:4b:04:26:fc:2f:e6:0b:
b8:dd:4a:1f:4d:4a:aa:50:65:73:c7:11:c3:1f:1d:0b:54:b6:
76:8e:3b:36:79:14:be:80:1e:06:5b:c4:fd:3c:9f:9f:4b:33:
a4:02:71:1c:a5:68:eb:20:5d:93:26:8e:95:83:08:4f:8c:5b:
70:d1:31:4a:e2:f5:b4:55:da:ba:2c:0b:ba:e6:f8:ca:7a:56:
43:07:6c:c2:6e:29:8b:b0:1b:e0:59:19:3d:13:13:01:1c:13:
b8:b9:68:dc:ad:ca:64:4e:8a:ba:76:c8:68:b3:5d:2f:f5:24:
be:5e:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:19:30 2026 by rpki-client