Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS40115.roa
File: AS40115.roa (raw, json)
Hash identifier: AwPzQh7AtrM+oR8Ad38GmXNNkP3VEpxQYi8MeuK/gK0=
Subject key identifier: C2:A3:12:D1:9F:B5:FE:6A:E8:4C:D8:81:34:55:0E:7C:D7:D0:65:F1
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 2B60D7A2E730B1B393D4BFDC22F3E0CE83A4BE70
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS40115.roa
Signing time: Thu 12 Nov 2026 08:25:13 +0000
ROA not before: Thu 12 Nov 2026 08:20:13 +0000
ROA not after: Thu 11 Nov 2027 08:25:13 +0000
asID: 40115
IP address blocks: 2a0f:1cc5:4500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:60:d7:a2:e7:30:b1:b3:93:d4:bf:dc:22:f3:e0:ce:83:a4:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:13 2026 GMT
Not After : Nov 11 08:25:13 2027 GMT
Subject: CN=C2A312D19FB5FE6AE84CD88134550E7CD7D065F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:40:43:6e:f2:15:66:04:9e:f2:07:92:25:
fa:c3:82:6b:ad:0a:0f:55:92:12:be:a7:86:98:76:
c9:d8:bb:e7:1a:e7:09:f1:89:48:a4:7e:5e:e0:ed:
4f:95:98:be:af:b4:e4:2c:93:be:2d:13:56:ec:2c:
b9:96:d6:f9:5a:80:6e:2b:f6:b2:19:11:8f:39:d5:
23:00:0d:34:fb:98:a2:e0:e8:88:14:93:9a:ff:e3:
d4:ea:9a:e1:6a:f1:01:f1:53:ef:b5:ea:11:10:a8:
2d:aa:a7:e6:f9:67:02:84:be:a4:2d:f6:37:e0:4e:
49:8c:78:cb:11:67:25:76:1a:a5:3c:c4:d0:b9:12:
95:32:c6:d0:cd:a0:bd:89:df:62:f2:df:9f:f5:fe:
b7:2a:1c:f1:d2:97:93:3d:10:37:02:2a:60:f2:06:
60:79:26:9e:6e:84:7b:60:94:9b:23:81:f5:aa:ed:
c4:9a:75:9a:54:e7:d0:0e:e9:7b:a9:26:50:34:67:
db:de:14:3a:3b:be:a0:9f:4f:64:ce:70:84:74:b2:
ad:7e:f5:db:d5:a6:5b:0d:b4:c4:3e:53:63:1d:22:
96:96:50:03:03:66:f3:d5:05:4e:c9:5a:47:e7:1b:
37:65:af:b8:b0:dc:e4:f1:a4:93:1d:6f:0b:4b:d4:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:12:D1:9F:B5:FE:6A:E8:4C:D8:81:34:55:0E:7C:D7:D0:65:F1
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS40115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4500::/40
Signature Algorithm: sha256WithRSAEncryption
26:b1:2a:21:a6:4d:15:70:c1:5a:45:51:45:03:75:17:5b:37:
6a:f3:4b:a1:de:df:b0:32:2d:6b:28:73:bd:e1:6d:2e:a6:4d:
44:62:ed:57:df:74:97:4b:e5:1d:f5:99:46:9a:26:6c:2f:1d:
d2:64:0d:33:92:44:41:d1:f8:fc:f2:18:d2:b7:aa:b3:20:7f:
e1:8e:34:8d:b9:01:08:67:31:69:a7:73:1d:a0:e5:e7:71:50:
80:05:f7:5a:81:1f:8c:0d:1d:b8:a1:bd:b4:9c:e9:5d:4c:66:
8d:bf:d8:da:61:77:be:dd:04:2c:3a:ad:9b:77:6f:f7:fc:51:
70:4f:d0:99:92:cd:1d:cc:6c:09:2a:b8:ad:3c:5d:70:d5:6a:
47:49:9b:32:aa:38:b1:45:03:a3:18:ce:e4:ff:87:d4:fd:da:
a4:1d:c4:ef:90:38:50:a9:6c:4b:f3:a8:a1:64:af:56:11:3d:
a3:8e:79:35:b6:37:34:83:f7:c9:30:05:86:7f:e6:56:64:f7:
04:b8:7c:6f:42:57:7c:82:99:5e:73:cf:04:e9:dc:fc:ee:82:
e7:7d:50:2f:62:c6:61:1b:29:a8:07:8b:f1:25:c8:1c:ae:80:
54:69:ab:cc:18:ea:13:e1:8e:97:10:73:7c:f2:a9:3b:25:72:
bb:27:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:18:07 2026 by rpki-client