Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 4bb+fNzeowLu4bUXbp3dfGqxnAEiyQ47btgQ/H/x+dw=
Subject key identifier: 17:F2:B2:7C:03:B1:4C:B2:2E:7A:E3:B8:3B:F5:3D:87:6D:87:C7:A0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 03F7D6D7719144EABF85F77ABE9A5AF8218C9AB2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
Signing time: Wed 29 Apr 2026 07:37:36 +0000
ROA not before: Wed 29 Apr 2026 07:32:36 +0000
ROA not after: Wed 28 Apr 2027 07:37:36 +0000
asID: 40676
IP address blocks: 51.194.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f7:d6:d7:71:91:44:ea:bf:85:f7:7a:be:9a:5a:f8:21:8c:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 29 07:32:36 2026 GMT
Not After : Apr 28 07:37:36 2027 GMT
Subject: CN=17F2B27C03B14CB22E7AE3B83BF53D876D87C7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:ab:f4:35:23:8d:90:c0:ee:d2:67:8d:9b:
96:84:02:ab:51:88:c4:99:5e:86:84:b1:17:95:77:
20:fd:a7:be:0b:54:db:38:81:a5:bc:e9:85:f0:64:
17:f4:53:bf:22:ea:d4:65:83:0f:a1:d4:a6:8c:70:
c0:e0:78:b3:93:15:c7:f5:fc:29:d1:60:91:a9:31:
a9:d6:42:81:35:2e:48:d2:ed:ad:77:4f:5b:3d:da:
50:3c:84:eb:3d:3f:62:a7:f2:13:31:62:25:80:e7:
f1:6c:8f:ac:35:08:db:e3:16:f5:98:c7:1c:32:46:
f0:b3:83:96:cd:ff:f5:fb:ca:23:2d:20:6c:57:fd:
e3:39:b9:59:b9:ba:2f:20:1b:19:36:31:32:0f:43:
c8:36:cd:b2:37:15:0b:74:c9:21:b1:a5:21:7e:fa:
3f:86:d2:45:92:50:42:f6:ae:35:64:78:c1:7b:96:
58:08:af:b6:71:6a:be:b9:91:75:36:ed:fe:d7:bf:
10:c3:dd:80:5e:78:94:24:09:13:cf:6c:55:13:57:
b7:84:50:17:a9:d3:c3:95:ff:cd:ef:06:b5:d4:fd:
b3:6c:8e:53:90:c3:63:28:b2:df:9b:0b:ad:06:0b:
b1:2c:55:0a:23:91:d1:9a:26:52:a0:77:3c:e0:26:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F2:B2:7C:03:B1:4C:B2:2E:7A:E3:B8:3B:F5:3D:87:6D:87:C7:A0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.66.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9e:f4:f6:19:99:3e:f1:b5:eb:54:a6:33:19:74:32:ad:05:
2c:d9:28:6f:ac:33:1c:22:a4:3a:88:87:e6:e2:62:b4:32:da:
9a:ac:a9:4f:78:6c:05:cf:6f:fa:eb:76:79:ab:63:3e:1c:1b:
2b:32:07:dc:4b:60:c7:81:7b:c9:c1:ff:2a:e6:38:e3:76:bc:
4c:cd:33:04:94:fa:ff:d4:b8:b8:4d:1a:cd:de:55:eb:78:63:
15:e6:d5:bc:9d:7a:85:0f:c0:e4:e7:73:35:8e:19:39:72:eb:
57:1e:a2:a6:0b:58:5e:8d:b2:b4:27:75:10:74:93:ec:cb:e8:
c1:fd:f1:b1:5d:86:7f:62:3d:c0:95:d0:0e:3d:c7:66:a8:06:
71:cd:39:f2:50:66:a9:b9:58:dc:ae:2c:68:99:55:2a:a4:f1:
5c:0b:8c:21:a9:7a:2d:5d:89:56:da:3f:4b:56:4e:3f:54:41:
02:1e:aa:5d:47:88:94:ba:3e:e3:2d:f8:ba:9a:36:b0:13:e5:
f8:b6:7a:80:5d:44:89:32:33:8a:19:1a:ab:c3:a5:eb:7e:78:
33:a3:fc:8e:a6:3a:01:3b:91:9a:58:dc:24:ff:a9:41:e6:49:
fd:29:c2:9d:ba:e3:9e:8a:0f:61:a0:31:dd:10:50:43:6f:df:
0a:23:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:20 2026 by rpki-client