Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40403.roa
File: AS40403.roa (raw, json)
Hash identifier: hldxzP9pzO44XRCquHYVVbwSGTWHjDKujpX4Q4NOuR8=
Subject key identifier: C3:51:4C:4D:AC:19:81:BC:2C:22:51:A0:35:E9:F4:8D:8D:55:05:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 088DB66339076F6548F1305BB6870C1F3025BC1A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40403.roa
Signing time: Tue 12 May 2026 10:47:15 +0000
ROA not before: Tue 12 May 2026 10:42:15 +0000
ROA not after: Tue 11 May 2027 10:47:15 +0000
asID: 40403
IP address blocks: 82.40.64.0/20 maxlen: 24
82.40.80.0/20 maxlen: 24
82.40.96.0/20 maxlen: 24
82.40.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8d:b6:63:39:07:6f:65:48:f1:30:5b:b6:87:0c:1f:30:25:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 10:42:15 2026 GMT
Not After : May 11 10:47:15 2027 GMT
Subject: CN=C3514C4DAC1981BC2C2251A035E9F48D8D55056D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:bf:8d:f7:2e:0a:88:b0:2e:93:cd:a7:e2:
95:b1:7e:39:94:8b:43:b2:19:ee:c5:bc:4b:aa:0f:
d4:17:4e:c8:8d:4e:b9:b2:52:eb:f8:da:29:28:9c:
41:3c:fb:8b:36:45:bd:ef:ce:8e:79:6e:a3:d7:21:
8d:31:c0:8a:54:28:89:d1:5d:b3:4d:72:0f:61:81:
fa:22:4d:34:43:f7:ca:72:b3:8a:36:95:30:df:15:
7d:7c:a6:be:46:af:82:90:6d:99:23:71:81:37:01:
ad:b5:cb:3b:d7:bf:1b:e7:12:72:7f:f9:d4:dd:aa:
ec:ce:4d:99:1f:f7:46:07:4a:a6:0a:9f:d0:f8:9e:
30:fa:b3:af:0a:da:b2:62:f8:2c:e1:4b:8a:4e:91:
31:84:8a:78:b4:f4:06:86:d8:4c:59:54:3c:41:45:
14:80:d6:de:5c:d2:0b:3d:73:b2:82:23:77:92:b7:
62:89:27:7d:be:60:b6:22:3a:51:30:1e:a7:fe:c8:
96:a3:e0:5a:f1:e8:42:ca:cb:cf:5d:65:43:a6:1f:
b7:65:ad:4d:23:b3:8c:ca:33:9e:02:d9:01:91:2c:
e0:51:b1:a9:41:66:d0:94:6c:60:74:d1:13:93:56:
0d:33:e8:a7:b5:17:8f:4e:dd:e3:03:2d:46:82:ed:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:4C:4D:AC:19:81:BC:2C:22:51:A0:35:E9:F4:8D:8D:55:05:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40403.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:0e:e8:86:0d:4d:bd:b0:cd:a4:4e:ab:70:d6:b2:3e:e3:70:
4c:10:9b:aa:84:0d:65:88:d6:63:e2:88:82:64:99:6a:99:f7:
6d:d1:c7:35:41:75:e5:2c:48:94:90:0e:3f:c6:ca:e7:ea:2b:
52:ff:72:e1:26:3c:e3:92:4c:81:a8:c0:17:93:65:7e:2b:a1:
9b:da:88:5d:db:2f:9a:7c:51:e0:e5:74:7f:45:99:a4:1b:9a:
c0:07:17:1e:2d:86:90:12:60:8d:79:37:b4:f2:e4:df:01:e0:
ac:56:c8:ae:81:87:34:d1:bf:9e:9e:c2:c9:48:5a:9f:2f:ca:
f1:c2:af:ff:b5:fa:be:05:56:e2:1b:c2:18:f0:67:a2:18:e3:
e9:05:2f:32:05:09:a8:f7:aa:8c:f7:ce:59:52:d8:0a:69:f0:
9a:a0:b8:81:25:33:7d:09:ac:df:0a:47:2a:5c:d1:fc:4a:ec:
29:2e:30:05:49:3e:87:9a:42:c9:4c:1e:eb:04:71:f3:f6:23:
aa:a2:95:b6:4d:9f:91:01:1d:ee:7a:b9:76:b9:a5:b7:66:46:
33:83:e4:f8:c7:95:a3:65:7c:78:ad:ab:ef:af:32:a6:07:c7:
6e:e5:1b:d2:8f:36:df:3b:e5:61:a7:4a:bd:0a:d2:64:4e:5e:
45:bb:47:7f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUCI22YzkHb2VI8TBbtocMHzAlvBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTIxMDQyMTVaFw0yNzA1MTExMDQ3MTVaMDMxMTAvBgNV
BAMTKEMzNTE0QzREQUMxOTgxQkMyQzIyNTFBMDM1RTlGNDhEOEQ1NTA1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW7+N9y4KiLAuk82n4pWxfjmU
i0OyGe7FvEuqD9QXTsiNTrmyUuv42ikonEE8+4s2Rb3vzo55bqPXIY0xwIpUKInR
XbNNcg9hgfoiTTRD98pys4o2lTDfFX18pr5Gr4KQbZkjcYE3Aa21yzvXvxvnEnJ/
+dTdquzOTZkf90YHSqYKn9D4njD6s68K2rJi+CzhS4pOkTGEini09AaG2ExZVDxB
RRSA1t5c0gs9c7KCI3eSt2KJJ32+YLYiOlEwHqf+yJaj4Frx6ELKy89dZUOmH7dl
rU0js4zKM54C2QGRLOBRsalBZtCUbGB00ROTVg0z6Ke1F49O3eMDLUaC7TZLAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUw1FMTawZgbwsIlGgNen0jY1VBW0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDA0MDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZSKEAw
DQYJKoZIhvcNAQELBQADggEBAI0O6IYNTb2wzaROq3DWsj7jcEwQm6qEDWWI1mPi
iIJkmWqZ923RxzVBdeUsSJSQDj/GyufqK1L/cuEmPOOSTIGowBeTZX4roZvaiF3b
L5p8UeDldH9FmaQbmsAHFx4thpASYI15N7Ty5N8B4KxWyK6BhzTRv56ewslIWp8v
yvHCr/+1+r4FVuIbwhjwZ6IY4+kFLzIFCaj3qoz3zllS2App8JqguIElM30JrN8K
Rypc0fxK7CkuMAVJPoeaQslMHusEcfP2I6qilbZNn5EBHe56uXa5pbdmRjOD5PjH
laNlfHitq++vMqYHx27lG9KPNt875WGnSr0K0mROXkW7R38=
-----END CERTIFICATE-----
Generated at Wed May 13 08:42:32 2026 by rpki-client