Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: BcTFb1msZM1XkedC6nCLXbB3wfUvl64XjlArLRCp/rI=
Subject key identifier: 18:3D:F0:45:59:57:ED:AE:D0:BE:26:AC:D4:5E:43:78:29:3A:DF:72
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 023A7A65DE7E3A1A93AC442FA9419CBAA4D93239
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS4766.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 4766
IP address blocks: 212.74.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:3a:7a:65:de:7e:3a:1a:93:ac:44:2f:a9:41:9c:ba:a4:d9:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=183DF0455957EDAED0BE26ACD45E4378293ADF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:8e:f0:5e:d1:d8:99:57:9c:10:f8:69:04:
e6:0e:a1:b2:23:fb:57:ee:fb:8d:ce:02:90:8c:92:
29:ad:36:fd:bd:e2:2f:45:a2:9e:c0:50:e0:53:eb:
92:af:b1:bc:7e:2e:3b:fb:63:7e:2b:61:51:e4:89:
f0:3a:da:fc:6d:19:fd:af:59:6d:be:5b:12:4b:89:
f7:a9:e2:27:d7:48:d6:40:e5:88:64:cd:9e:11:64:
28:c3:d0:9d:b5:90:27:41:4f:e9:49:3b:3b:22:9e:
0c:e9:b1:13:04:34:94:96:7d:73:f6:db:7b:f0:36:
1f:eb:33:9b:fb:0f:d9:f1:6d:b9:57:6f:79:40:11:
67:ef:d9:0e:5e:2f:b3:8d:e0:b6:dd:b3:fa:bf:dd:
20:87:2c:08:f2:a8:9c:b9:8e:33:e6:e0:00:91:93:
94:51:7e:27:1b:e7:e2:f4:58:0a:57:71:9e:ce:9f:
a7:87:6b:c6:ce:6a:82:ad:88:67:03:94:de:fc:2b:
c6:50:d4:ad:0c:fc:d2:98:14:a4:20:58:b2:90:79:
ab:b2:aa:ea:da:38:a0:6c:ec:62:4f:d6:d2:bc:16:
ae:8a:49:48:fd:26:3f:1b:ef:b9:28:11:40:32:a9:
9f:3a:b2:94:fd:8e:27:6f:ef:6e:aa:5d:6b:b9:36:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:F0:45:59:57:ED:AE:D0:BE:26:AC:D4:5E:43:78:29:3A:DF:72
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:a9:7b:1b:61:df:75:1e:4f:d1:2f:88:c1:21:cb:fd:c1:49:
93:16:f3:61:63:55:96:28:d5:fd:91:47:ea:3a:63:56:1e:1e:
68:9d:49:99:bf:9e:f0:e1:80:50:c4:88:73:39:04:e6:d8:4c:
c6:13:87:28:aa:b3:a0:83:39:e6:7e:9e:16:47:c6:9b:7c:16:
d1:5b:08:78:7f:d5:c2:03:5e:12:08:6c:e8:58:c1:fa:a6:a9:
ee:e1:25:54:d3:0d:38:07:c3:9c:3b:61:0f:24:db:12:77:94:
8e:74:f5:45:31:40:ea:b0:f7:a0:5c:8f:b3:6b:3f:a6:d4:1f:
d1:9a:09:b8:1e:65:1d:d6:47:40:0d:e3:e4:7d:ec:95:91:91:
f0:6f:d7:5d:8c:99:e6:ed:77:b8:77:8c:7e:02:1e:8a:36:57:
e2:f4:94:40:28:0c:e9:83:89:b5:e1:19:72:a7:ea:f1:51:7f:
20:f5:3c:88:82:b5:21:1d:15:2b:ec:28:03:57:aa:26:d4:8c:
84:29:d7:48:67:bf:e4:20:35:b5:40:94:51:3d:69:cb:32:ff:
16:f7:2e:80:e4:b6:46:20:26:d7:b6:d2:df:eb:09:c5:73:b1:
ae:40:bb:45:87:b7:94:38:e6:62:7c:36:86:0a:89:d4:d6:53:
c0:66:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:38 2026 by rpki-client