Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: xM89Ks7HXkPXUOQ21+LG7sqA/vG7Dql0qFO46uakbq0=
Subject key identifier: BD:57:30:44:A1:FE:6C:64:2A:23:D3:3B:19:F4:4F:81:A7:9B:9F:77
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5937D66EA79785B0861BC5994F0AB7E526D43B6F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
Signing time: Fri 28 Aug 2026 00:49:30 +0000
ROA not before: Fri 28 Aug 2026 00:44:30 +0000
ROA not after: Fri 27 Aug 2027 00:49:30 +0000
asID: 4637
IP address blocks: 82.21.101.0/24 maxlen: 24
82.21.134.0/23 maxlen: 24
82.21.144.0/24 maxlen: 24
82.23.140.0/23 maxlen: 24
82.29.26.0/24 maxlen: 24
82.29.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:37:d6:6e:a7:97:85:b0:86:1b:c5:99:4f:0a:b7:e5:26:d4:3b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:44:30 2026 GMT
Not After : Aug 27 00:49:30 2027 GMT
Subject: CN=BD573044A1FE6C642A23D33B19F44F81A79B9F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:a6:92:8a:fa:29:27:38:eb:63:11:d7:af:
25:a7:55:c1:4e:3f:c1:1b:8f:96:d0:2c:69:20:aa:
fb:4a:12:a6:29:26:a6:06:27:f7:52:87:ed:dd:51:
ac:dc:22:7a:c6:f9:2b:a4:a8:92:7f:20:90:1b:51:
7a:a5:34:ee:f8:47:58:56:58:c9:03:f0:fa:0d:06:
9f:92:e6:c2:31:7e:06:99:2d:be:d1:1e:40:94:ad:
b1:ee:ae:45:61:ea:ed:fa:dd:b6:8a:a5:37:df:48:
b9:b1:fc:a0:de:c6:ad:d3:3d:96:1d:66:de:fe:fe:
e3:09:53:2f:86:35:ce:82:74:92:3d:7a:e1:4e:2b:
e0:1d:94:15:d5:98:b2:b6:23:fb:cf:fb:7d:a8:f7:
04:c7:f0:75:58:e3:83:3a:66:f1:44:89:70:07:76:
e6:78:20:51:ab:f9:e8:a9:ab:6f:09:b3:b0:95:a5:
35:f0:b1:25:0c:c1:90:5b:c8:01:49:3c:01:54:e2:
14:14:79:c9:5a:05:c7:a3:d0:eb:5e:ea:ab:a1:37:
04:22:29:7d:69:29:c7:4c:28:af:1e:28:da:ea:8e:
21:c1:60:7f:c4:80:11:4a:5e:90:98:46:5b:ac:9d:
5a:4a:a4:23:de:47:14:46:e3:a9:88:58:9b:1a:a1:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:30:44:A1:FE:6C:64:2A:23:D3:3B:19:F4:4F:81:A7:9B:9F:77
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.101.0/24
82.21.134.0/23
82.21.144.0/24
82.23.140.0/23
82.29.26.0/24
82.29.75.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:7e:bd:eb:c1:fc:c0:bf:09:c9:9d:95:c2:97:6b:6f:a9:
41:00:86:54:19:5c:fc:3d:cc:24:fa:7e:8a:eb:0a:54:a2:df:
fe:c1:17:b8:07:4b:31:ed:e6:b8:8b:a7:e0:d2:e1:37:64:c0:
ad:a0:80:a5:9c:04:ff:30:fe:37:fe:a4:3b:d9:d5:c1:3e:0d:
50:45:68:ca:ec:c6:f3:df:8d:5d:4e:bd:9a:50:fa:2d:9f:7a:
c2:df:28:dc:fd:53:42:47:ef:b8:b4:72:d8:2c:25:31:3d:2d:
3b:63:fb:6a:35:10:e2:b5:44:04:66:8d:56:af:1b:40:d4:37:
e0:f8:e2:7f:6d:f1:45:f3:d8:1a:60:30:5d:68:85:1e:2b:57:
04:a9:fd:53:64:14:ef:96:5c:b1:a0:67:ee:9c:92:b5:6d:db:
79:a2:17:d1:55:7e:cf:9c:c7:99:f0:4c:28:a3:e2:6a:6f:97:
ab:13:cd:00:9a:c2:19:c4:07:04:1b:0a:38:a5:dd:ae:1b:f4:
6e:87:63:4b:ac:fc:d7:f0:1e:39:db:d7:ad:62:00:36:95:29:
e8:73:3c:73:67:2e:b0:f4:fc:7d:cf:12:ae:32:05:81:05:dc:
cb:72:ed:07:00:27:a0:a5:62:e5:34:d7:53:02:c5:29:35:b0:
aa:63:06:79
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUWTfWbqeXhbCGG8WZTwq35SbUO28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjgwMDQ0MzBaFw0yNzA4MjcwMDQ5MzBaMDMxMTAvBgNV
BAMTKEJENTczMDQ0QTFGRTZDNjQyQTIzRDMzQjE5RjQ0RjgxQTc5QjlGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26qaSivopJzjrYxHXryWnVcFO
P8Ebj5bQLGkgqvtKEqYpJqYGJ/dSh+3dUazcInrG+SukqJJ/IJAbUXqlNO74R1hW
WMkD8PoNBp+S5sIxfgaZLb7RHkCUrbHurkVh6u363baKpTffSLmx/KDexq3TPZYd
Zt7+/uMJUy+GNc6CdJI9euFOK+AdlBXVmLK2I/vP+32o9wTH8HVY44M6ZvFEiXAH
duZ4IFGr+eipq28Js7CVpTXwsSUMwZBbyAFJPAFU4hQUeclaBcej0Ote6quhNwQi
KX1pKcdMKK8eKNrqjiHBYH/EgBFKXpCYRlusnVpKpCPeRxRG46mIWJsaoTkfAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUvVcwRKH+bGQqI9M7GfRPgaebn3cwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFIVZQME
AVIVhgMEAFIVkAMEAVIXjAMEAFIdGgMEAFIdSzANBgkqhkiG9w0BAQsFAAOCAQEA
k8B+vevB/MC/CcmdlcKXa2+pQQCGVBlc/D3MJPp+iusKVKLf/sEXuAdLMe3muIun
4NLhN2TAraCApZwE/zD+N/6kO9nVwT4NUEVoyuzG89+NXU69mlD6LZ96wt8o3P1T
QkfvuLRy2CwlMT0tO2P7ajUQ4rVEBGaNVq8bQNQ34Pjif23xRfPYGmAwXWiFHitX
BKn9U2QU75ZcsaBn7pyStW3beaIX0VV+z5zHmfBMKKPiam+XqxPNAJrCGcQHBBsK
OKXdrhv0bodjS6z81/AeOdvXrWIANpUp6HM8c2cusPT8fc8SrjIFgQXcy3LtBwAn
oKVi5TTXUwLFKTWwqmMGeQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:35:06 2026 by rpki-client