Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: pTXWmsw4cCzE7aQDVhS+QG63R3LT2JxCIsbmL1K00gI=
Subject key identifier: 5E:DD:CF:F4:FD:C1:19:D0:2D:B6:02:08:B1:89:71:C0:8C:40:09:E9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2265FF448E389405E71EBAA4FCBB53C98A4D19AC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
Signing time: Sat 08 Aug 2026 00:02:06 +0000
ROA not before: Fri 07 Aug 2026 23:57:06 +0000
ROA not after: Sat 07 Aug 2027 00:02:06 +0000
asID: 4766
IP address blocks: 168.222.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:65:ff:44:8e:38:94:05:e7:1e:ba:a4:fc:bb:53:c9:8a:4d:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 23:57:06 2026 GMT
Not After : Aug 7 00:02:06 2027 GMT
Subject: CN=5EDDCFF4FDC119D02DB60208B18971C08C4009E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:ea:3e:b0:40:b1:91:bc:e2:5b:0f:c5:84:
24:85:39:67:ba:e1:8a:24:05:b5:1e:da:57:86:23:
82:e9:ee:1f:d7:c9:39:ae:27:38:8d:f5:82:b6:e4:
a9:41:38:60:5d:f0:10:93:09:c9:e7:19:ba:a3:bc:
d1:10:24:1c:0a:db:69:57:a7:fe:6a:fd:bd:4d:08:
25:75:24:a3:3e:5d:0f:22:72:2c:93:8a:39:a5:3f:
2e:bf:c2:0f:db:80:b3:c6:f7:e8:aa:18:91:ba:a4:
17:fc:b6:1a:f2:f9:2e:d7:aa:67:65:28:a1:16:cb:
35:5a:6f:97:76:c8:52:c5:65:4b:03:de:23:1b:13:
8e:20:35:aa:09:c8:0d:35:55:70:79:5e:3e:55:a5:
6c:55:04:35:ad:51:c3:47:81:16:7e:4c:d7:38:0d:
0d:fb:02:ac:65:09:e2:48:9e:b9:8f:e1:66:08:c1:
cd:49:0c:20:9c:ae:69:0a:ba:ad:d7:ca:d4:0b:90:
1d:5b:39:c4:31:57:8b:16:52:74:0b:01:c8:5a:87:
41:94:e8:1a:a9:b3:d0:2b:dd:ab:f2:ed:a4:6a:03:
22:a6:c4:42:f4:e0:7c:02:d6:e6:ea:98:4a:2b:7c:
bb:07:11:5e:71:05:6f:50:cf:50:ff:3f:88:c8:46:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:CF:F4:FD:C1:19:D0:2D:B6:02:08:B1:89:71:C0:8C:40:09:E9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.6.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c8:db:59:3e:e5:1d:2c:aa:f4:f4:84:ef:60:b9:aa:a9:f6:
f6:82:3e:d1:b5:8f:5f:5c:10:06:c5:02:f5:a8:b2:6a:e9:61:
fd:2d:2b:64:44:37:f1:f3:6b:7c:c8:8f:53:1c:18:40:b2:f6:
cd:8d:c0:d5:54:22:7c:c8:32:55:3c:33:d0:75:0d:c1:b4:de:
7e:05:fe:d6:a1:74:b7:c9:1d:7c:03:1f:49:dc:19:76:21:d6:
2e:dc:74:bc:62:11:da:d1:7e:24:44:07:cc:ce:d0:2e:23:d2:
fe:06:ba:d4:07:51:13:e1:49:b1:b1:45:b2:c5:ee:2e:f1:78:
05:0e:14:d3:d5:a1:70:b1:10:9a:87:bb:79:16:60:57:6d:bd:
c2:da:e7:4c:39:26:2b:a8:10:71:17:b8:e9:44:93:46:26:4f:
43:be:69:0b:aa:21:2e:88:c8:9c:e7:fc:e8:d8:9b:65:18:9a:
4e:7a:b6:1a:e9:23:33:4a:36:89:42:c4:36:88:c4:50:bc:1d:
dd:4c:b9:51:55:60:6a:a0:90:3e:65:66:ab:ef:fc:5d:01:ed:
28:65:18:6e:b9:28:74:19:d1:b2:b7:7b:01:e3:53:6c:80:cb:
d2:93:8c:96:c0:c5:a0:00:e8:96:d5:34:1f:df:be:b1:9b:7b:
11:d9:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:11 2026 by rpki-client