
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: CB8zUhQJCjz6zqF8+/f5vT/OSHiQ/ZZSWjec2eKoU2M=
Subject key identifier: 35:DC:80:8D:39:8B:D4:81:9B:2F:4B:24:41:9D:52:B5:91:C9:0F:A2
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 4694D5B69A186BDA0B1A9E44E323DA5D1B92B501
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa
Signing time: Mon 05 Oct 2026 06:13:49 +0000
ROA not before: Mon 05 Oct 2026 06:08:49 +0000
ROA not after: Mon 04 Oct 2027 06:13:49 +0000
asID: 4766
IP address blocks: 79.176.184.0/21 maxlen: 21
79.180.2.0/23 maxlen: 24
79.180.34.0/23 maxlen: 24
79.180.64.0/23 maxlen: 24
79.180.254.0/23 maxlen: 24
109.66.90.0/23 maxlen: 24
109.66.168.0/21 maxlen: 21
109.66.234.0/23 maxlen: 24
109.66.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:94:d5:b6:9a:18:6b:da:0b:1a:9e:44:e3:23:da:5d:1b:92:b5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:08:49 2026 GMT
Not After : Oct 4 06:13:49 2027 GMT
Subject: CN=35DC808D398BD4819B2F4B24419D52B591C90FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:4e:1e:a0:9b:0f:10:7b:70:32:e3:2f:b7:
e4:3c:96:37:9d:d1:e2:60:79:71:f0:7f:8a:4d:36:
b7:53:e4:0d:a5:ad:ed:ce:3e:d3:a3:6d:ad:99:c8:
d6:98:46:2e:87:5e:4d:39:ba:cf:56:e2:a3:8b:33:
17:47:82:11:5b:05:55:3a:b3:83:ac:d9:64:d8:5b:
04:23:c9:12:17:87:f8:ce:72:d2:23:80:3a:e6:d8:
00:90:78:77:fe:3e:d0:4f:68:3c:9c:7d:ed:2f:05:
3c:d5:b8:ec:08:2f:46:70:70:67:30:bb:f9:a1:da:
10:f4:dd:59:74:53:0b:e9:ba:78:73:7f:53:dd:ef:
53:78:84:f1:7a:04:4b:76:e2:33:96:35:6e:8b:2e:
2c:c8:07:ce:bb:36:c6:04:36:a9:af:92:46:1e:ca:
33:3b:f2:48:2d:a8:9b:8b:b8:a2:ac:b4:ee:dc:84:
be:42:da:56:48:0e:eb:cd:be:aa:28:47:0f:c0:c2:
0c:45:6d:03:77:1f:25:75:47:9d:fd:89:65:6d:d1:
d2:70:3d:f2:35:9f:54:53:ce:3a:12:5a:bd:fa:b3:
cd:e9:4c:74:29:a4:ff:35:39:ac:fd:f8:b4:85:95:
ef:ca:21:2b:ec:c7:08:28:8a:59:f3:9a:04:bc:ba:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:80:8D:39:8B:D4:81:9B:2F:4B:24:41:9D:52:B5:91:C9:0F:A2
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.184.0/21
79.180.2.0/23
79.180.34.0/23
79.180.64.0/23
79.180.254.0/23
109.66.90.0/23
109.66.168.0/21
109.66.234.0/23
109.66.246.0/23
Signature Algorithm: sha256WithRSAEncryption
18:30:11:96:1b:53:b6:19:2d:68:4a:ad:02:da:80:81:d7:b4:
59:60:6f:98:10:1c:af:1a:c5:b8:20:f6:8f:37:dd:0a:fc:05:
da:d8:be:43:00:e0:7e:d6:7c:34:e9:0e:c7:47:e2:dc:88:86:
0d:27:b8:13:10:ef:02:14:a3:35:56:cd:17:a7:36:fa:70:80:
4e:54:d4:76:b1:bd:73:a7:cb:48:9d:d6:b5:11:d8:e4:f5:45:
15:4f:06:1f:5d:a9:65:87:3b:d1:4c:b3:ee:61:9f:65:5c:00:
20:60:76:67:76:35:1c:99:31:ad:99:9f:ac:6d:17:af:27:84:
a3:f1:09:90:a6:81:7c:20:e3:cd:fd:62:4a:65:dc:0b:ff:86:
60:1c:42:ce:22:52:b9:bb:df:01:2d:00:7a:2f:53:a0:d5:02:
81:9c:f0:95:24:0f:ff:a7:0f:3d:dd:10:d4:ff:ee:12:7a:30:
47:e0:ca:8c:4c:b2:4f:8f:3f:a6:10:2d:68:8f:3b:42:42:b5:
fd:2a:a9:cf:96:a6:08:0d:9c:22:0e:74:e1:40:f6:42:e5:0a:
c1:6c:08:17:24:9c:c2:89:96:27:6e:c3:fd:34:3c:a0:21:38:
3c:37:ce:62:c9:a2:8d:b6:df:90:09:a5:9c:04:a3:4c:b1:d3:
7a:ab:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:51 2026 by rpki-client