Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: qA7Yt7uTZe23MDzwSfjood+7rbKmPEZZLW2vJYkF7lo=
Subject key identifier: 0B:29:A8:27:5B:0E:64:40:EC:68:6D:EA:88:B3:25:78:B5:17:B0:FC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6146746333F4C449E3538AC680E3FF1CE8C3CDA5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4766.roa
Signing time: Sun 22 Mar 2026 15:35:42 +0000
ROA not before: Sun 22 Mar 2026 15:30:42 +0000
ROA not after: Sun 21 Mar 2027 15:35:42 +0000
asID: 4766
IP address blocks: 185.137.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:46:74:63:33:f4:c4:49:e3:53:8a:c6:80:e3:ff:1c:e8:c3:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 22 15:30:42 2026 GMT
Not After : Mar 21 15:35:42 2027 GMT
Subject: CN=0B29A8275B0E6440EC686DEA88B32578B517B0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:a2:03:53:e2:cd:37:c4:ff:18:03:03:b2:
28:69:03:3c:5b:61:71:1e:00:3c:4a:11:5e:67:db:
ed:bf:44:9e:55:ae:ef:5c:3d:d9:dc:03:fc:34:df:
9e:5c:93:99:48:21:17:8b:9a:d3:56:ef:79:39:e8:
55:21:fa:de:e1:6a:18:71:0f:4d:94:a8:32:97:8c:
c6:25:48:75:b2:c7:18:f7:57:cd:36:63:1d:ce:b2:
1e:eb:88:45:b6:4b:ce:49:42:ed:b8:f0:64:72:25:
66:e6:83:ac:29:26:0f:17:1a:49:04:37:ee:1e:45:
62:4e:81:d5:d1:16:1c:3c:c1:96:bb:a0:02:6b:38:
cf:0f:4f:1d:45:f5:bd:a6:76:c8:06:5f:e6:ed:a9:
c7:57:f7:00:8f:cd:4e:e1:c1:46:c5:01:1f:57:67:
16:7d:59:aa:9d:ab:87:be:95:b7:5a:f9:40:46:1e:
57:41:8c:a4:1d:6a:08:2b:f1:25:8f:47:69:f5:a6:
f8:6d:89:f8:f2:24:a0:ed:9e:3d:07:48:86:1b:52:
ba:fc:46:d8:33:bd:0a:24:12:00:09:da:8b:0c:7f:
d9:27:f1:1a:0f:93:3d:43:d4:33:03:ff:76:5d:0b:
a3:01:96:e4:c0:88:e2:50:1d:66:cd:58:7d:8d:3e:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:A8:27:5B:0E:64:40:EC:68:6D:EA:88:B3:25:78:B5:17:B0:FC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.14.0/23
Signature Algorithm: sha256WithRSAEncryption
54:10:88:95:ce:01:fd:0a:d6:39:f4:ea:9a:b6:c7:94:bb:a7:
b8:f9:a7:f8:cb:b0:9e:39:25:2f:9e:6f:30:c1:26:92:06:02:
7b:19:46:45:71:e3:f3:72:a5:6d:7b:ee:41:d8:b1:3d:c3:ff:
56:5a:55:07:38:a0:54:14:54:fd:9d:bf:14:db:f2:a4:15:5e:
fd:6d:9b:2c:eb:41:39:40:0d:8a:04:21:6d:c6:5a:78:5c:b0:
78:63:e8:03:f9:a5:70:c2:1c:b5:8d:ed:cc:29:28:63:cb:40:
10:93:ca:fc:97:c3:a6:c8:87:a3:e6:38:1c:a8:44:8c:81:32:
fb:cb:28:e2:17:69:87:df:6a:bc:d7:91:7f:77:43:d5:1f:fc:
ea:d2:7e:da:88:02:bb:d2:0d:17:75:07:63:29:0a:fd:7c:db:
f8:70:39:ba:f8:39:45:ff:9c:90:8b:4d:14:a1:0d:27:f1:d5:
4d:aa:c2:44:0b:52:59:5e:75:5b:06:e2:c1:b0:eb:28:56:cb:
49:3d:b3:dd:35:52:f9:3a:76:0b:6a:48:18:fd:bd:1f:99:f6:
87:23:4e:a7:f7:5d:ce:d5:70:27:1c:15:c2:0f:80:ed:bd:f0:
bd:98:36:b8:09:66:1f:27:cd:55:28:2d:0b:ec:84:5f:2a:07:
1b:d0:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:29 2026 by rpki-client