Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: SbNMCLeXl4A2SwzuRfIdNy02sPzvtKDWEwNXipX8PmI=
Subject key identifier: 7F:60:8B:29:93:00:62:19:78:1D:47:8E:CF:E6:26:CB:67:FA:B7:4F
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5C11F6AEB2CA37A822A729BC6C38A6866AC795CE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4766.roa
Signing time: Wed 04 Mar 2026 08:30:27 +0000
ROA not before: Wed 04 Mar 2026 08:25:27 +0000
ROA not after: Wed 03 Mar 2027 08:30:27 +0000
asID: 4766
IP address blocks: 147.125.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:11:f6:ae:b2:ca:37:a8:22:a7:29:bc:6c:38:a6:86:6a:c7:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:27 2026 GMT
Not After : Mar 3 08:30:27 2027 GMT
Subject: CN=7F608B2993006219781D478ECFE626CB67FAB74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:a5:e0:38:72:10:fc:4d:02:f9:d9:5a:64:
f2:93:21:47:c7:c7:29:71:8d:c2:41:47:a0:c0:c6:
e3:9b:a9:0b:e3:3b:ed:4e:4f:ca:7d:65:fb:f3:e5:
cd:40:91:ba:a2:09:4c:d6:94:b0:30:15:a0:a3:d8:
68:36:f7:06:76:9b:96:82:32:1e:f9:54:e0:35:d7:
1e:a8:6f:d4:3d:9c:4a:08:2c:c7:89:f3:30:d5:3d:
06:48:4f:ac:56:86:14:ca:a4:f4:cc:38:d4:4c:37:
5f:03:61:e5:47:99:a5:2c:01:a5:47:fd:a0:a4:1d:
75:bc:f0:74:20:14:25:a8:83:dd:1a:c8:66:f8:79:
5a:20:aa:00:4f:3f:99:91:75:60:a4:6f:a3:d4:78:
55:50:11:24:d9:d1:de:52:ff:08:b1:3a:bd:42:53:
92:a8:03:9a:53:0c:e4:72:7e:a5:52:ae:01:67:98:
09:78:63:7b:60:3c:8b:a1:f2:ca:31:4f:02:9d:f8:
fd:1a:21:11:ae:75:96:84:8a:48:88:ac:53:89:64:
9c:7d:e2:fd:72:cb:b0:cc:93:96:f1:03:5b:3b:a6:
e3:fb:91:1b:ee:1a:10:8b:58:90:71:3c:cb:04:0b:
8d:ae:b7:48:cd:40:27:4c:14:50:bc:d2:99:46:df:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:8B:29:93:00:62:19:78:1D:47:8E:CF:E6:26:CB:67:FA:B7:4F
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:fd:2c:3f:df:e4:9e:8c:b7:06:80:4e:86:63:8c:b1:12:8d:
d3:48:27:07:a1:8e:e6:e4:24:67:74:29:43:5b:d9:d3:1e:c1:
53:6b:35:da:6b:69:16:f8:6c:7b:b3:cb:65:e3:27:11:65:1e:
28:a3:56:65:f6:25:de:5b:23:9a:42:cd:79:be:c2:ac:dc:e1:
ee:e7:35:71:d6:be:75:11:d6:df:97:9a:e0:78:8c:dd:89:df:
2a:ee:97:99:1e:0f:8c:1e:a1:8f:b9:56:de:de:0e:ab:6e:51:
29:75:27:d7:96:88:33:8f:18:df:6f:dc:09:78:78:9b:92:57:
1d:0b:f4:fe:73:bf:b1:95:d5:03:a6:e3:59:83:18:87:bf:64:
2b:98:4f:f7:92:36:9b:02:53:8e:58:fd:4f:5d:b5:ae:49:ac:
17:0d:29:3b:04:56:99:3b:9b:db:ca:d1:18:18:90:f8:79:55:
66:6d:49:53:02:50:31:42:91:9f:89:ce:43:e8:ae:5e:af:82:
86:3d:8c:85:cc:23:e6:e7:6b:20:0d:3d:8e:a4:69:ad:fa:26:
52:f2:a9:af:a9:a3:73:cd:4e:1a:26:fb:af:f8:58:61:6f:55:
75:ee:d4:62:d8:da:ed:8f:7a:64:66:e5:39:af:c7:4c:87:0d:
59:56:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:01:46 2026 by rpki-client