Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: ndiSy8cNHASmMEjqZ/l6GY3W/jnFdWHWcWNzkJR7uUg=
Subject key identifier: 9A:74:03:23:04:AB:3E:FC:65:34:42:BB:24:D6:48:5A:F1:AB:AF:C1
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 2000FF6207C0B0DED1DD1747384BBCC94863D4CB
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS4766.roa
Signing time: Mon 05 Oct 2026 08:20:18 +0000
ROA not before: Mon 05 Oct 2026 08:15:18 +0000
ROA not after: Mon 04 Oct 2027 08:20:18 +0000
asID: 4766
IP address blocks: 79.176.184.0/21 maxlen: 21
109.66.90.0/23 maxlen: 24
109.66.168.0/21 maxlen: 21
109.66.234.0/23 maxlen: 24
109.66.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:00:ff:62:07:c0:b0:de:d1:dd:17:47:38:4b:bc:c9:48:63:d4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:15:18 2026 GMT
Not After : Oct 4 08:20:18 2027 GMT
Subject: CN=9A74032304AB3EFC653442BB24D6485AF1ABAFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:45:40:dc:fe:3f:74:2c:3d:3d:6d:fb:a7:
06:41:f8:5a:6b:ff:a5:bb:dc:e2:63:44:ec:ce:1b:
4c:bb:06:5e:43:ca:d8:66:28:e4:12:21:40:56:6f:
f3:0b:12:d4:7b:44:94:13:58:10:8f:e2:97:9a:d7:
39:94:5c:4c:69:7b:ee:fb:9d:74:8b:cc:40:3c:79:
91:f8:21:e4:9c:9d:69:1f:70:d6:25:a4:6b:73:07:
5a:e0:89:c3:21:21:6d:bb:df:a7:99:d6:23:74:de:
57:3c:42:96:88:67:0b:fd:39:90:df:cd:fb:28:c2:
6e:4b:0a:e2:d4:99:10:ce:4d:37:98:df:29:89:88:
30:b2:9d:cb:05:b8:bb:c5:ad:da:93:28:71:34:a4:
10:5f:b8:31:87:7d:2c:12:ef:4d:ef:a1:66:c7:1f:
71:f0:8a:ec:2e:7a:c8:59:9d:31:9d:79:77:99:a3:
e2:eb:56:5d:1b:4f:a9:66:5b:33:ba:ef:11:a4:eb:
51:bc:8b:eb:18:00:57:c0:03:f0:d7:2f:76:e1:58:
36:f1:8b:6f:f0:24:f3:0a:d7:36:4d:c9:bc:4f:61:
d9:55:81:74:5c:9b:bb:15:c9:b3:82:08:fe:2c:dd:
c9:d7:93:4e:81:74:91:57:f7:d4:84:62:e8:a0:3b:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:03:23:04:AB:3E:FC:65:34:42:BB:24:D6:48:5A:F1:AB:AF:C1
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.184.0/21
109.66.90.0/23
109.66.168.0/21
109.66.234.0/23
109.66.246.0/23
Signature Algorithm: sha256WithRSAEncryption
14:56:99:e7:cb:df:b7:8e:93:17:e6:fb:b0:0b:14:af:95:29:
e1:0a:b3:56:c2:45:64:a3:36:12:bc:e0:d7:58:da:d1:ed:7b:
e0:6c:c2:ff:98:41:12:f7:57:7e:72:8b:c9:af:f3:83:e8:f3:
8e:68:88:dd:a8:4f:a2:8b:ee:79:27:67:ee:f2:de:18:29:34:
9a:b5:2c:df:5c:a9:24:e0:bc:e3:99:5b:25:35:b9:f8:ab:74:
fd:00:30:fe:74:84:2f:61:68:38:0d:a5:20:e1:9c:89:6f:25:
31:07:b9:d7:d8:53:a0:8f:eb:67:8e:09:58:76:ff:32:54:2f:
ac:e4:5b:43:1d:00:5a:fe:96:71:56:b6:70:9c:96:cf:76:a6:
dc:04:e0:f8:e0:e8:59:72:9e:e2:80:00:3b:aa:b7:ec:fb:00:
a9:e5:cb:fb:5c:91:d0:42:5c:e8:40:37:29:99:93:01:73:14:
25:5a:c3:7d:46:d1:c3:12:50:d1:d2:c9:35:e8:b4:d0:b3:10:
67:a6:58:e4:6d:b8:0f:08:71:dd:7e:3b:b9:23:1a:ad:54:35:
01:06:75:65:70:bc:f8:6a:13:02:c8:e2:78:9e:8d:bf:8b:dd:
e0:9d:87:25:c4:d1:e4:cb:dd:54:85:4b:5d:0d:62:93:22:46:
53:8d:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:04 2026 by rpki-client