Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: nPnDe4rMG9xydb6bHpNdHMfcdEqqAVHsXN2KMe8dz8s=
Subject key identifier: 41:5F:DA:36:C8:71:2E:5E:70:F5:BD:32:CD:76:57:A0:6F:F2:93:A3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2FC2E3392731F4A2D795FEE6BDBD2F5270D8B300
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
Signing time: Fri 02 Oct 2026 12:00:07 +0000
ROA not before: Fri 02 Oct 2026 11:55:07 +0000
ROA not after: Fri 01 Oct 2027 12:00:07 +0000
asID: 4766
IP address blocks: 51.194.152.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.241.138.0/23 maxlen: 24
51.241.199.0/24 maxlen: 24
94.194.52.0/22 maxlen: 24
94.194.140.0/22 maxlen: 24
94.194.160.0/22 maxlen: 24
94.194.180.0/22 maxlen: 24
94.194.248.0/22 maxlen: 24
188.220.134.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c2:e3:39:27:31:f4:a2:d7:95:fe:e6:bd:bd:2f:52:70:d8:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 2 11:55:07 2026 GMT
Not After : Oct 1 12:00:07 2027 GMT
Subject: CN=415FDA36C8712E5E70F5BD32CD7657A06FF293A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:da:0e:1b:15:c0:50:dc:b9:9e:29:56:58:
b6:59:d6:95:38:9b:c4:06:b8:80:e8:be:bb:59:19:
41:52:f5:8f:65:57:24:5b:87:be:ff:91:ab:75:8c:
62:9c:b3:8d:40:5e:7d:55:db:33:93:90:23:3d:78:
f1:d8:8f:04:e4:f2:1e:03:57:41:66:c6:2e:af:8c:
5c:83:f5:7a:52:fd:2e:4a:76:13:6a:de:48:26:b4:
88:c0:6b:84:d0:72:de:1a:ef:6a:5e:3b:69:4e:5f:
83:bb:98:48:6b:95:ca:3a:52:17:6d:80:f5:79:87:
b5:16:31:14:9b:1c:eb:81:65:12:7e:ca:0f:21:73:
7c:cd:97:63:93:bc:1c:19:47:f3:1a:af:79:02:b3:
ba:ef:65:f1:d7:96:19:68:58:3f:1a:b3:27:d9:d3:
4b:a7:bb:a5:29:94:56:a1:e0:06:ce:9a:42:5d:16:
9b:b1:0c:ce:e8:f4:b9:ca:ff:34:e6:e0:a6:d7:b4:
74:d5:21:97:92:d7:fd:08:68:7b:2b:91:b1:42:ba:
44:8b:ef:6f:50:09:16:c0:89:d7:61:cf:ef:82:6d:
f8:69:79:8d:5f:36:f6:28:63:a4:ee:31:a7:66:f4:
62:20:83:53:9d:39:8f:cd:18:ae:c2:41:90:83:74:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:DA:36:C8:71:2E:5E:70:F5:BD:32:CD:76:57:A0:6F:F2:93:A3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.152.0/24
51.194.160.0/23
51.241.138.0/23
51.241.199.0/24
94.194.52.0/22
94.194.140.0/22
94.194.160.0/22
94.194.180.0/22
94.194.248.0/22
188.220.134.0/23
188.221.88.0/22
188.221.154.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b3:b9:8e:f6:2e:b6:58:b9:54:40:3d:06:f4:49:da:a3:8e:
cb:50:9b:91:0e:63:37:38:8f:77:4a:92:76:7c:d4:47:04:fe:
43:27:3f:a4:19:e6:a5:eb:3a:54:ea:03:17:cb:cb:1c:d1:2a:
8d:3d:ea:f2:cd:b6:75:d6:72:6c:9a:68:19:b6:f8:67:45:20:
70:75:1f:f2:7d:7f:de:ad:91:fb:63:dc:a8:55:8f:0f:4d:79:
81:88:16:38:2c:8c:d7:cc:c4:6f:7c:68:24:c3:a5:d0:be:54:
d2:5d:d0:23:00:16:96:17:83:df:93:0f:4b:f6:b6:f8:2b:6d:
1f:75:c9:33:8b:64:43:89:57:43:3e:8d:c0:5e:d7:36:06:1e:
36:03:f3:2b:2e:48:3b:6a:11:18:19:6b:3a:c5:93:50:01:7a:
4d:6b:4f:48:cc:18:a4:fd:8a:f4:a3:52:df:e4:67:84:cb:5c:
46:c3:e4:41:ed:3a:74:b3:fe:c2:32:40:e0:35:52:2d:c8:c7:
b6:8c:3f:2d:51:cb:05:78:05:f7:c9:eb:e2:e9:42:ea:f3:09:
df:43:00:6a:9b:ea:3b:0d:5e:13:e6:4c:9f:4a:fd:d4:6f:07:
06:73:35:fd:c5:0f:44:2d:c5:2b:0d:aa:82:94:d1:dd:ee:68:
36:61:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:10 2026 by rpki-client