Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: EvM1XL89MJD8vc/3QNF/elvfwMeqUHwr/OGGYPwph1w=
Subject key identifier: 67:2D:54:10:59:3B:34:18:A4:86:FF:DB:DE:89:DE:39:DC:D9:90:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 09F33C28C1FB4EA148AB72E7A6FA7F6B6FD13111
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
Signing time: Thu 19 Mar 2026 09:11:41 +0000
ROA not before: Thu 19 Mar 2026 09:06:41 +0000
ROA not after: Thu 18 Mar 2027 09:11:41 +0000
asID: 4766
IP address blocks: 168.222.1.0/24 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.63.0/24 maxlen: 24
168.222.123.0/24 maxlen: 24
168.222.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f3:3c:28:c1:fb:4e:a1:48:ab:72:e7:a6:fa:7f:6b:6f:d1:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 19 09:06:41 2026 GMT
Not After : Mar 18 09:11:41 2027 GMT
Subject: CN=672D5410593B3418A486FFDBDE89DE39DCD9903E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:40:73:18:9d:e2:9f:59:f7:2b:82:cc:08:
9e:70:94:0e:75:98:8f:a3:56:71:fa:4d:01:18:d2:
2c:3b:85:4d:9c:41:ae:2a:cb:ec:80:8f:89:8d:5a:
aa:95:53:14:b1:42:8c:e0:c3:fa:ba:4a:d2:78:00:
cb:7f:a0:8d:4c:95:c8:18:2a:ae:bc:c3:b8:9c:6d:
24:c2:00:d2:e1:84:69:10:c4:5f:18:f7:cf:da:96:
e0:a2:10:64:1e:59:43:97:f6:ca:de:f4:ed:f8:83:
fa:47:a5:1e:94:50:d4:05:22:4b:47:21:aa:ff:c4:
aa:29:a7:48:60:f5:9f:13:88:23:3f:ef:f4:f4:1d:
87:53:d4:8a:26:dd:37:14:ec:e5:a9:92:6e:89:4a:
3f:31:c2:58:c1:ed:cf:ab:30:ca:ee:e6:80:50:50:
98:05:2a:77:ef:ec:01:ff:75:72:61:5d:fc:12:af:
48:90:1c:24:0b:31:e6:65:45:b4:c3:31:1d:ac:d8:
e5:87:52:9f:3e:27:78:c6:1f:f5:d7:17:50:d0:15:
f4:3e:03:79:f5:7f:a9:07:d7:98:47:83:12:d3:b2:
53:c4:ff:fb:84:15:34:30:12:7b:10:ad:93:b5:21:
db:c7:3a:bb:b7:8b:55:23:ad:34:97:8c:7b:51:47:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:54:10:59:3B:34:18:A4:86:FF:DB:DE:89:DE:39:DC:D9:90:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.1.0/24
168.222.6.0/24
168.222.11.0/24
168.222.63.0/24
168.222.123.0-168.222.124.255
Signature Algorithm: sha256WithRSAEncryption
54:d8:e4:08:b2:c3:2e:f0:81:80:42:7a:8f:20:43:8a:6d:7c:
af:b4:a0:61:34:e0:eb:64:9c:a5:ac:19:af:cd:cc:90:f1:f2:
79:b5:30:d7:96:b0:e4:51:3f:dc:3f:db:fa:aa:a2:7a:fa:8c:
02:0f:0f:72:67:e1:2f:f7:3c:52:0c:b2:ca:fb:8e:31:97:2f:
ff:0d:1f:fc:e3:15:91:8d:d8:ec:b4:65:2b:7a:d5:f0:89:a5:
e4:00:b6:db:22:35:4e:df:63:42:ef:0d:0e:fa:6a:53:95:f2:
71:99:99:1e:c1:3b:8b:01:5b:12:3d:40:b4:34:5f:8d:b9:da:
6e:f9:c9:cf:f5:61:a7:c4:b3:cd:53:a8:71:b8:b5:c2:07:76:
60:ce:4e:75:b1:d1:8a:f5:1d:1c:5e:2f:ea:06:ab:4a:33:c9:
f2:35:55:a7:d1:7a:20:6d:6e:fd:44:62:cf:74:9d:a4:b8:a2:
74:5d:11:37:d9:aa:18:ac:06:4b:47:ab:b7:33:6e:4d:13:9a:
80:30:2d:56:eb:c7:24:9a:08:fa:61:0c:d1:ff:e6:56:bf:de:
f7:25:73:0b:c9:53:d8:ac:2e:68:e2:45:df:57:97:0f:20:a3:
71:f8:67:35:23:bf:98:4c:d8:66:a7:4e:72:8b:ab:15:e6:00:
e3:01:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:25 2026 by rpki-client