Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 3d+6713lVd+kssKHRJhzETNm+dcsSuZmHmDU3cL8so8=
Subject key identifier: 62:68:1D:DF:62:20:56:6B:C7:69:37:A9:23:B1:C3:9A:1C:34:F4:0F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A8CF7779B579BBC38DFF0838578BED4620DBF87
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
Signing time: Sat 14 Mar 2026 11:18:12 +0000
ROA not before: Sat 14 Mar 2026 11:13:12 +0000
ROA not after: Sat 13 Mar 2027 11:18:12 +0000
asID: 40676
IP address blocks: 82.38.24.0/22 maxlen: 24
82.38.52.0/22 maxlen: 24
82.38.72.0/22 maxlen: 24
82.38.88.0/22 maxlen: 24
82.38.103.0/24 maxlen: 24
178.83.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8c:f7:77:9b:57:9b:bc:38:df:f0:83:85:78:be:d4:62:0d:bf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 14 11:13:12 2026 GMT
Not After : Mar 13 11:18:12 2027 GMT
Subject: CN=62681DDF6220566BC76937A923B1C39A1C34F40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:28:c6:eb:b7:04:53:76:a0:32:34:8a:85:
9d:0b:18:f9:e6:2a:58:66:ae:6e:4e:a3:e2:2b:87:
f7:e6:9c:84:0d:18:e5:0a:ed:9a:e1:42:32:f1:f0:
ce:de:26:d9:26:29:6e:0a:73:b5:7d:34:2f:a2:90:
1f:de:58:0b:5e:f0:aa:e8:5d:26:f4:27:eb:f0:63:
de:6c:80:3b:10:ab:fe:f4:e5:66:1c:65:16:89:bf:
35:a1:5a:0c:1d:6f:96:53:b6:b1:c4:21:4e:44:e9:
8d:22:5c:d3:e8:9f:4d:2a:7d:cf:45:4b:40:02:2b:
17:91:b9:00:39:1b:66:8d:59:62:79:ba:44:3f:59:
c7:41:30:ba:47:7f:37:eb:52:bb:8b:56:35:fa:4b:
d3:12:6e:b8:e6:06:fb:8b:08:69:ee:71:c1:b4:c8:
64:6e:32:33:8b:00:7f:6d:c7:c0:60:c8:6f:ba:32:
65:59:c0:b0:60:f0:64:ae:f6:23:5e:0b:e4:4a:f3:
f6:03:5d:f7:87:de:9a:05:41:54:d9:c8:9a:07:bb:
29:f0:03:36:f2:29:63:0b:f9:38:78:17:44:89:16:
0e:23:87:44:40:19:8e:d5:85:e6:7a:83:3f:46:c0:
a4:62:93:0c:e3:d7:db:16:31:b7:22:57:0b:69:18:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:1D:DF:62:20:56:6B:C7:69:37:A9:23:B1:C3:9A:1C:34:F4:0F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.24.0/22
82.38.52.0/22
82.38.72.0/22
82.38.88.0/22
82.38.103.0/24
178.83.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4a:3b:a5:21:db:5f:e2:7a:6f:c5:8d:d0:3d:16:5e:7f:c4:
3c:a4:2b:03:a5:6a:99:7d:59:e2:64:4d:5d:45:0f:a3:4c:cf:
5e:4d:d5:31:0e:da:44:b5:a4:9b:05:7b:1e:71:54:3a:e9:f6:
fc:18:41:93:4e:c2:6b:10:69:42:7f:5b:7d:62:e7:5f:26:51:
2d:31:96:8c:a8:01:e2:c9:5b:c2:58:be:fb:85:71:a8:69:fe:
4b:2a:06:5d:60:8e:9e:2b:53:ac:e5:f1:4b:dd:ef:54:86:20:
20:0e:f4:fa:b9:96:d9:e2:cb:36:36:02:fe:9b:75:cb:f2:7d:
7b:d9:5e:a7:67:33:43:58:5d:50:76:49:f4:70:fb:31:3c:b9:
96:86:e6:df:34:6d:b1:04:5d:41:ee:52:e7:bb:67:c8:58:be:
d2:5f:ca:a4:61:dd:cc:0a:ad:8b:70:6c:7e:9f:69:1e:d6:79:
d9:69:72:98:d0:42:8e:63:02:c2:09:03:da:80:13:87:7c:f1:
d5:c7:5a:a7:02:fc:6b:98:e1:c7:4c:8d:0a:ca:b2:3d:88:a5:
a3:96:6d:44:53:c1:83:3c:34:f7:ec:82:4e:78:27:5a:91:5e:
ef:1b:84:86:5c:8c:39:eb:73:59:b4:5d:5c:3e:88:ad:85:3c:
a8:c2:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:09:45 2026 by rpki-client