Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: YCL53Cgk61DLkmvnwiplwoA+ZviBvBcp6lBfctFha3g=
Subject key identifier: B4:AC:C9:4A:9B:6C:5F:75:CA:FA:6E:25:D0:83:0D:53:4F:BD:4A:0F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0581AF3847325472FFBABDEC8F6AB1DDEE6CF159
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
Signing time: Tue 10 Nov 2026 16:15:02 +0000
ROA not before: Tue 10 Nov 2026 16:10:02 +0000
ROA not after: Tue 09 Nov 2027 16:15:02 +0000
asID: 4766
IP address blocks: 51.146.250.0/23 maxlen: 24
51.194.120.0/23 maxlen: 24
51.194.152.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.194.255.0/24 maxlen: 24
51.241.10.0/23 maxlen: 24
51.241.138.0/23 maxlen: 24
51.241.199.0/24 maxlen: 24
78.105.236.0/23 maxlen: 24
94.116.60.0/22 maxlen: 24
94.116.156.0/22 maxlen: 24
94.116.200.0/22 maxlen: 24
94.116.228.0/22 maxlen: 24
94.118.142.0/23 maxlen: 24
94.118.154.0/23 maxlen: 24
94.118.166.0/23 maxlen: 24
94.118.168.0/23 maxlen: 24
94.118.186.0/23 maxlen: 24
94.118.194.0/23 maxlen: 24
94.118.196.0/23 maxlen: 24
94.118.202.0/23 maxlen: 24
94.118.214.0/23 maxlen: 24
94.118.222.0/23 maxlen: 24
94.118.234.0/23 maxlen: 24
94.118.236.0/23 maxlen: 24
94.192.156.0/22 maxlen: 24
94.193.104.0/22 maxlen: 24
94.193.156.0/22 maxlen: 24
94.193.204.0/22 maxlen: 24
94.194.52.0/22 maxlen: 24
94.194.140.0/22 maxlen: 24
94.194.156.0/22 maxlen: 24
94.194.160.0/22 maxlen: 24
94.194.180.0/22 maxlen: 24
94.194.212.0/22 maxlen: 24
94.194.248.0/22 maxlen: 24
176.25.132.0/22 maxlen: 24
176.25.136.0/22 maxlen: 24
176.25.164.0/22 maxlen: 24
176.25.196.0/22 maxlen: 24
176.25.208.0/22 maxlen: 24
176.25.220.0/22 maxlen: 24
176.25.240.0/22 maxlen: 24
176.25.248.0/22 maxlen: 24
188.220.0.0/23 maxlen: 24
188.220.134.0/23 maxlen: 24
188.220.140.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:81:af:38:47:32:54:72:ff:ba:bd:ec:8f:6a:b1:dd:ee:6c:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 10 16:10:02 2026 GMT
Not After : Nov 9 16:15:02 2027 GMT
Subject: CN=B4ACC94A9B6C5F75CAFA6E25D0830D534FBD4A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:63:8f:9f:d9:bf:0b:f8:48:c6:77:d3:a3:
b4:06:99:cd:45:37:af:99:e2:cf:95:61:d8:de:c0:
b8:d5:88:22:d7:c7:85:e2:22:1a:f0:58:77:7d:04:
91:24:a9:08:97:df:e6:aa:bb:d6:87:1e:a1:6b:e0:
b8:c2:64:a8:eb:02:1f:84:90:da:56:41:bf:c1:18:
81:1f:4f:52:7b:ba:7a:75:fc:5e:29:73:3b:b6:07:
9d:cf:22:43:1d:50:55:43:ca:2d:36:f4:17:1a:fa:
54:1d:1d:92:c9:d8:4c:4e:1b:4e:12:4c:67:3c:55:
95:c7:d3:92:c4:df:7f:f3:6e:97:fa:63:95:d7:9a:
cb:04:f4:56:a2:b8:b1:95:f7:a3:51:be:d3:12:15:
43:28:69:4d:c7:3c:24:87:f1:72:1c:09:28:a0:c5:
47:64:97:c1:cc:64:2b:93:79:f5:f5:47:00:c8:8f:
07:96:5c:60:0a:8b:40:c5:f4:1e:94:b9:c7:66:4e:
52:75:43:b1:63:46:47:c7:70:3d:bc:7c:17:dc:88:
6e:21:cd:20:0d:87:b2:5f:5d:54:ad:e1:48:b4:e0:
52:df:64:b9:1d:8c:68:07:0e:b7:57:d0:b3:92:d9:
65:ee:27:90:c3:57:01:63:89:cd:2a:20:6c:c6:47:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:C9:4A:9B:6C:5F:75:CA:FA:6E:25:D0:83:0D:53:4F:BD:4A:0F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.250.0/23
51.194.120.0/23
51.194.152.0/24
51.194.160.0/23
51.194.255.0/24
51.241.10.0/23
51.241.138.0/23
51.241.199.0/24
78.105.236.0/23
94.116.60.0/22
94.116.156.0/22
94.116.200.0/22
94.116.228.0/22
94.118.142.0/23
94.118.154.0/23
94.118.166.0-94.118.169.255
94.118.186.0/23
94.118.194.0-94.118.197.255
94.118.202.0/23
94.118.214.0/23
94.118.222.0/23
94.118.234.0-94.118.237.255
94.192.156.0/22
94.193.104.0/22
94.193.156.0/22
94.193.204.0/22
94.194.52.0/22
94.194.140.0/22
94.194.156.0-94.194.163.255
94.194.180.0/22
94.194.212.0/22
94.194.248.0/22
176.25.132.0-176.25.139.255
176.25.164.0/22
176.25.196.0/22
176.25.208.0/22
176.25.220.0/22
176.25.240.0/22
176.25.248.0/22
188.220.0.0/23
188.220.134.0/23
188.220.140.0/23
188.221.88.0/22
188.221.154.0/23
Signature Algorithm: sha256WithRSAEncryption
15:60:d7:cb:0e:83:43:e0:17:00:f4:03:8d:13:62:fb:a2:69:
dc:dc:11:c6:b9:19:48:86:9b:4e:2c:a2:0f:fd:ce:b7:43:40:
9d:7a:21:3f:74:23:e2:9a:07:19:68:a6:f8:9d:fb:8f:6c:50:
f7:b5:4b:c5:70:9d:dd:f5:08:ff:88:bf:d4:f9:d7:cb:54:05:
75:e8:3c:99:a3:bd:ce:9f:bc:3b:0f:4b:ff:0d:93:d1:e4:96:
b6:b9:43:de:21:93:99:0e:61:70:3c:cb:69:7b:b5:76:a3:88:
4f:c4:69:1e:59:c7:93:45:62:0a:6c:5f:45:d5:d7:1f:b6:79:
4b:b3:e5:8d:79:ce:eb:6b:ad:e2:87:7b:3a:19:ad:68:93:37:
ad:86:2d:cd:53:9d:b9:02:2a:02:58:77:7d:b1:7d:24:60:2a:
f0:57:fd:c4:11:10:cb:fc:36:8a:12:d2:10:09:f7:ed:7d:e3:
3f:6c:05:1d:de:d0:2c:08:78:08:09:4f:57:90:69:c8:b3:a7:
b5:bc:06:76:12:0b:36:43:32:a6:3e:8f:8f:4c:c4:23:8d:98:
fe:ca:d5:b3:53:02:92:f0:fc:92:b9:f7:f1:cb:84:c6:13:9b:
f7:ae:6f:06:47:ec:59:9e:89:87:ea:95:c1:a3:a4:b5:ac:fe:
3e:38:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:04 2026 by rpki-client