Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: A3bwsDAJjjtL4CMEHRYmp+1PNI/fw8cgskqEbd1vxWo=
Subject key identifier: 58:A3:0D:10:F7:BA:02:B7:E6:2C:A7:80:8D:EE:74:08:21:4D:C3:ED
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1B4EAE540A1A56B2ED47243CCD108AACE168F7C4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
Signing time: Fri 10 Jul 2026 03:57:47 +0000
ROA not before: Fri 10 Jul 2026 03:52:47 +0000
ROA not after: Fri 09 Jul 2027 03:57:47 +0000
asID: 40676
IP address blocks: 143.20.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4e:ae:54:0a:1a:56:b2:ed:47:24:3c:cd:10:8a:ac:e1:68:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 10 03:52:47 2026 GMT
Not After : Jul 9 03:57:47 2027 GMT
Subject: CN=58A30D10F7BA02B7E62CA7808DEE7408214DC3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:1c:0e:b3:a7:c9:54:b2:d3:ef:9b:55:ae:
f4:8c:31:cf:9e:01:93:5d:da:9e:3c:d2:35:83:38:
59:0d:35:2d:e9:57:1f:fb:2a:d8:6b:cd:7b:0c:7b:
91:7a:da:7a:ad:b9:27:2c:48:06:3d:f3:01:33:da:
49:24:65:10:12:d5:45:e5:0b:80:6e:fa:df:a9:98:
f4:b4:d0:eb:a6:4f:d0:2d:c9:f9:b2:25:27:9b:6f:
49:a7:32:2f:b0:ac:f0:f0:47:63:92:07:29:d8:34:
7c:96:e3:0f:54:a4:a6:82:14:fe:12:25:32:8c:fd:
a7:f1:49:4a:49:a9:3a:d5:aa:3d:33:8a:c3:e4:b9:
a0:84:fe:91:b2:f8:ab:0e:92:a8:c9:38:ba:dc:22:
b3:84:d7:1b:7b:d0:9a:46:2f:04:05:84:48:78:34:
fa:61:74:70:35:70:bc:e2:1d:5d:ea:30:26:72:ed:
79:76:12:9a:92:4c:ae:2b:6e:4a:a4:88:15:5e:8d:
3a:d5:81:b3:9b:7a:84:c6:5a:59:dd:fb:80:51:f6:
a9:47:93:d0:d6:e4:36:5c:a7:3d:38:db:6c:7d:d0:
89:da:e1:96:f5:bd:89:1a:b7:9b:25:5c:ed:33:95:
0c:29:2c:ac:f8:07:93:9f:4e:b1:ec:95:97:81:0c:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:0D:10:F7:BA:02:B7:E6:2C:A7:80:8D:EE:74:08:21:4D:C3:ED
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5d:54:25:da:73:50:a3:1f:24:1b:3f:bd:d5:eb:3f:49:36:
18:06:aa:43:0f:e7:15:d3:15:32:5d:37:de:b9:4e:9e:a5:14:
81:ce:bc:ca:51:1c:75:ce:6c:74:aa:57:1a:4f:47:13:1a:9e:
2e:10:49:e2:30:d9:d3:f3:83:01:9b:59:d7:01:78:72:8a:61:
05:9e:83:c4:2f:15:7a:99:9e:ff:b1:c8:8b:76:60:0a:6e:87:
db:c0:38:a7:77:c5:81:10:e9:e0:0e:33:9e:52:cc:23:6d:bb:
91:58:6a:97:1e:0f:80:8b:ce:51:13:9e:b4:ad:da:4c:8d:87:
85:8a:90:2e:ce:52:c7:45:3b:19:ed:59:d1:97:54:ae:58:70:
37:31:02:a9:91:8c:b0:2a:f7:9e:0a:49:ec:b3:bc:ba:34:5c:
84:9a:e4:3b:3a:91:a0:db:32:d8:ed:2e:53:05:a2:65:da:93:
13:32:a9:42:4f:d2:11:f8:a7:d3:59:f9:c8:d9:84:5c:3a:1e:
be:af:16:6c:74:20:60:90:2f:e1:78:3f:51:32:81:43:54:34:
64:61:1e:50:bf:92:4a:70:72:b8:1c:2e:19:95:39:60:94:02:
94:78:0e:e8:d4:58:9f:3c:dc:cf:0b:cd:e7:2c:36:6d:c1:08:
89:de:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:18 2026 by rpki-client