$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4637.roa File: AS4637.roa (raw, json) Hash identifier: HWfos2g0B/NZ+oR8WRHHV0qr+bbOm6VhsP1NwevgEvQ= Subject key identifier: A2:8F:3F:CD:6F:7D:37:9C:B5:9F:21:3A:4E:79:6B:76:66:1D:D0:B6 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 29DB0C956B77EB86A7C00400D5E5116D556767A0 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4637.roa Signing time: Mon 05 Oct 2026 06:13:42 +0000 ROA not before: Mon 05 Oct 2026 06:08:42 +0000 ROA not after: Mon 04 Oct 2027 06:13:42 +0000 asID: 4637 IP address blocks: 109.66.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:db:0c:95:6b:77:eb:86:a7:c0:04:00:d5:e5:11:6d:55:67:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:42 2026 GMT Not After : Oct 4 06:13:42 2027 GMT Subject: CN=A28F3FCD6F7D379CB59F213A4E796B76661DD0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:97:42:58:32:43:55:a8:0d:48:3b:a4:95:3c: 0b:e4:39:43:b0:30:a6:54:e2:d5:a1:2a:b6:3e:f4: f9:13:e9:cf:21:77:2c:cd:50:dc:98:6b:21:a4:a6: 78:2e:3e:d0:b8:c9:3d:a3:0a:fe:bd:16:88:66:2b: d0:81:8b:0b:7a:cb:8e:32:76:e2:e8:44:16:38:12: f9:1c:41:40:cd:81:a8:af:aa:68:b2:ff:8e:aa:27: 37:8b:74:9e:e4:eb:1e:b7:f2:bb:c7:c9:58:91:26: 8f:52:f8:69:a8:4a:bf:ba:89:d1:dd:31:b1:7e:3c: 9c:9c:bf:2f:3b:5c:8c:b7:e2:48:34:3b:9f:74:41: 5e:21:aa:31:5e:34:88:74:a6:d0:94:f0:5a:70:46: 24:75:46:34:e8:1b:28:f2:30:77:ef:3b:cd:ee:3f: 74:0b:38:67:4b:3e:a6:4b:51:36:93:5e:59:73:6b: 1a:32:45:e8:00:d7:c4:2d:64:40:5e:65:ef:c3:a9: c7:78:5f:b2:29:bf:23:0c:86:e2:37:27:6a:21:d5: 23:aa:8b:18:5b:41:22:95:12:98:bf:0b:3b:f3:b4: ef:80:1f:05:1f:03:18:71:9c:67:92:47:61:64:45: 57:ad:64:ae:3b:9b:2f:5b:3c:fe:47:f7:b5:68:50: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8F:3F:CD:6F:7D:37:9C:B5:9F:21:3A:4E:79:6B:76:66:1D:D0:B6 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.53.0/24 Signature Algorithm: sha256WithRSAEncryption 77:1c:32:63:ac:c8:83:6f:2b:a4:5f:dc:3b:a8:71:98:14:bc: 5a:d3:05:cf:fc:e2:7b:06:13:70:1e:29:56:1f:68:be:44:e2: 57:ed:dc:33:30:0b:ae:80:be:56:09:55:a7:f0:a1:92:1e:62: ea:89:ae:08:de:2d:e8:06:0f:ca:1a:d9:d0:a5:fb:53:ca:80: 7c:cf:88:de:aa:39:7f:fa:e4:2c:5c:50:6a:95:61:06:06:ea: a5:8e:73:86:62:66:34:1d:a8:5c:f8:6a:66:b5:ec:12:a2:c0: 37:05:8b:b7:c0:a9:44:6b:1e:80:08:a7:6f:47:02:5a:bb:2d: 12:e8:e5:de:9c:d7:84:63:d4:bc:38:ec:fe:a5:b9:ae:0d:64: 2d:fd:60:73:51:78:e9:b3:de:9c:3f:0c:fc:d1:a6:31:d5:48: 1b:59:42:c7:ce:f0:bf:9b:0e:ed:f5:49:f1:c7:eb:a1:15:3e: ad:e5:2f:5d:ac:4d:7f:a9:96:65:5a:25:ae:05:b0:79:3b:bd: b5:c9:12:da:05:42:4d:92:c9:26:19:34:74:a2:3c:7e:1c:d7: 2a:a1:a2:e8:81:d3:ae:1e:2c:3f:97:33:10:df:cb:7f:32:1d: 4d:9a:9a:17:7e:7f:3e:73:d9:62:ae:9f:5e:8c:50:35:5e:f5: df:c0:ac:10 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUKdsMlWt364anwAQA1eURbVVnZ6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDJaFw0yNzEwMDQwNjEzNDJaMDMxMTAvBgNV BAMTKEEyOEYzRkNENkY3RDM3OUNCNTlGMjEzQTRFNzk2Qjc2NjYxREQwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDil0JYMkNVqA1IO6SVPAvkOUOw MKZU4tWhKrY+9PkT6c8hdyzNUNyYayGkpnguPtC4yT2jCv69FohmK9CBiwt6y44y duLoRBY4EvkcQUDNgaivqmiy/46qJzeLdJ7k6x638rvHyViRJo9S+GmoSr+6idHd MbF+PJycvy87XIy34kg0O590QV4hqjFeNIh0ptCU8FpwRiR1RjToGyjyMHfvO83u P3QLOGdLPqZLUTaTXllzaxoyRegA18QtZEBeZe/Dqcd4X7IpvyMMhuI3J2oh1SOq ixhbQSKVEpi/CzvztO+AHwUfAxhxnGeSR2FkRVetZK47my9bPP5H97VoUATZAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUoo8/zW99N5y1nyE6TnlrdmYd0LYwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0NjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAbUI1MA0GCSqGSIb3DQEBCwUAA4IBAQB3HDJjrMiDbyukX9w7qHGYFLxa 0wXP/OJ7BhNwHilWH2i+ROJX7dwzMAuugL5WCVWn8KGSHmLqia4I3i3oBg/KGtnQ pftTyoB8z4jeqjl/+uQsXFBqlWEGBuqljnOGYmY0Hahc+GpmtewSosA3BYu3wKlE ax6ACKdvRwJauy0S6OXenNeEY9S8OOz+pbmuDWQt/WBzUXjps96cPwz80aYx1Ugb WULHzvC/mw7t9Unxx+uhFT6t5S9drE1/qZZlWiWuBbB5O721yRLaBUJNkskmGTR0 ojx+HNcqoaLogdOuHiw/lzMQ38t/Mh1NmpoXfn8+c9lirp9ejFA1XvXfwKwQ -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:48 2026 by rpki-client