Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: Nblrc0f0MGDfSlZENFGgPcZSes8KQw1II9u/y8jPJ/8=
Subject key identifier: 69:B8:64:FA:EA:53:B2:48:38:E0:D7:8E:45:73:2B:7D:66:A5:01:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 40F13B8CB8A94FF2C21C66E209E505B576040749
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
Signing time: Tue 12 May 2026 02:11:45 +0000
ROA not before: Tue 12 May 2026 02:06:45 +0000
ROA not after: Tue 11 May 2027 02:11:45 +0000
asID: 40676
IP address blocks: 82.26.147.0/24 maxlen: 24
82.29.36.0/24 maxlen: 24
82.29.39.0/24 maxlen: 24
82.29.49.0/24 maxlen: 24
82.29.51.0/24 maxlen: 24
82.29.70.0/24 maxlen: 24
82.29.73.0/24 maxlen: 24
82.29.79.0/24 maxlen: 24
82.38.24.0/22 maxlen: 24
82.38.52.0/22 maxlen: 24
82.38.72.0/22 maxlen: 24
82.38.88.0/22 maxlen: 24
82.47.17.0/24 maxlen: 24
84.75.156.0/24 maxlen: 24
178.83.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f1:3b:8c:b8:a9:4f:f2:c2:1c:66:e2:09:e5:05:b5:76:04:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 02:06:45 2026 GMT
Not After : May 11 02:11:45 2027 GMT
Subject: CN=69B864FAEA53B24838E0D78E45732B7D66A5015B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:f7:e3:4b:5f:5d:e5:0e:ec:c2:f1:bc:1e:
62:e3:82:dd:f8:f9:df:63:d1:44:46:91:5d:fd:d6:
e1:b2:ca:4b:70:42:b6:8c:c4:4d:24:18:1b:88:cd:
63:9c:37:96:80:9a:67:ac:40:48:67:2f:0f:a0:9f:
bc:2b:40:a0:49:7e:aa:f0:0f:c5:67:19:aa:43:ae:
fb:45:dd:ca:fa:67:f6:ca:59:c2:cb:04:89:5c:f9:
36:16:d0:5b:50:73:d6:dc:8c:07:a0:9b:cb:e3:f4:
ca:12:7d:c8:50:be:db:17:a3:ae:95:4d:9f:22:9f:
2c:bd:95:b0:0e:68:78:c5:05:87:27:8d:3b:c1:9a:
6a:5f:78:dc:78:0b:69:21:e5:05:5a:95:d8:c3:38:
09:69:7f:5f:79:dc:99:4a:25:18:f3:1d:a9:a4:d4:
a8:11:dc:64:fe:3c:e6:56:e6:3d:16:92:39:38:19:
ea:c3:c4:a4:03:58:cd:a2:6b:80:e1:40:50:ec:37:
47:b9:a0:29:fd:1e:41:c3:da:45:55:1a:9b:52:dc:
12:cd:0c:0d:ff:6e:ab:97:fc:74:a3:6f:83:88:b8:
43:5a:0d:79:16:79:09:58:2f:1d:0e:97:75:9c:0a:
a3:d4:a5:a0:50:29:05:43:5d:f0:93:8e:d5:86:63:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:64:FA:EA:53:B2:48:38:E0:D7:8E:45:73:2B:7D:66:A5:01:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.147.0/24
82.29.36.0/24
82.29.39.0/24
82.29.49.0/24
82.29.51.0/24
82.29.70.0/24
82.29.73.0/24
82.29.79.0/24
82.38.24.0/22
82.38.52.0/22
82.38.72.0/22
82.38.88.0/22
82.47.17.0/24
84.75.156.0/24
178.83.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:ba:19:c5:3e:03:ca:fc:4c:52:93:69:8c:1e:38:8d:0b:78:
82:64:ad:d2:5f:3a:ea:5f:c3:63:09:cb:ce:2e:b3:2f:21:d6:
3d:76:ac:10:b7:00:8d:61:70:f4:ca:1d:3c:c4:9e:06:a4:ec:
f7:0b:94:ed:2a:0a:5e:41:8b:8f:83:dd:45:5b:cd:7f:fc:7b:
3f:ea:6c:45:c5:7f:64:a3:9f:0c:a8:f4:0c:8f:fa:fb:f6:c4:
af:67:87:9f:94:57:10:8e:6f:d0:75:ee:ac:d1:2e:91:8e:61:
2f:52:94:e0:fb:22:e5:2c:9b:05:29:b0:cd:b6:59:f6:c1:f6:
74:22:ef:9d:25:32:67:93:59:ee:00:b3:ec:df:3a:89:b8:9a:
b7:d1:b1:e1:00:6d:69:6b:45:f1:57:a1:07:44:8a:fd:24:48:
e1:aa:90:60:5a:d3:7b:51:57:89:4c:95:17:d0:00:3e:2b:f5:
ae:b3:45:2f:f2:71:0a:a1:cb:03:db:75:06:f9:eb:29:d1:f4:
77:bc:fe:98:6a:5f:ec:f4:1b:b7:7a:21:08:8b:c0:b2:8e:8c:
92:e0:13:e3:e6:fd:c1:2e:59:14:17:e2:19:7f:80:f6:9b:d3:
01:1a:6d:f4:58:32:8d:d6:8e:60:55:8c:b5:66:53:e3:8d:6a:
6f:2c:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:39 2026 by rpki-client