Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: atoM19IF+/0V7MTwpf7uojbGZNlNtGH+4rfymwbe5nM=
Subject key identifier: 10:E2:78:82:DF:4B:77:98:56:A8:F8:C4:34:15:FB:DA:60:FF:2D:E5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 392CA5C1E50AF29BDA6380CF04E0910177225A33
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4637.roa
Signing time: Wed 01 Apr 2026 10:03:13 +0000
ROA not before: Wed 01 Apr 2026 09:58:13 +0000
ROA not after: Wed 31 Mar 2027 10:03:13 +0000
asID: 4637
IP address blocks: 147.125.250.0/24 maxlen: 24
147.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2c:a5:c1:e5:0a:f2:9b:da:63:80:cf:04:e0:91:01:77:22:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 1 09:58:13 2026 GMT
Not After : Mar 31 10:03:13 2027 GMT
Subject: CN=10E27882DF4B779856A8F8C43415FBDA60FF2DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:fb:ef:6f:28:ac:be:10:7f:ea:77:c5:a1:
18:fe:92:f3:50:21:ab:3d:ab:5e:77:c3:c4:28:00:
f4:86:88:43:0d:d3:cc:3f:3a:ec:c6:5d:88:29:0f:
77:6f:8a:54:22:27:93:dd:93:53:79:37:4a:16:15:
b4:13:fb:10:ab:81:ed:f4:bf:19:77:d7:68:38:e0:
0e:a6:7b:17:e9:62:cf:f7:67:4a:05:2e:70:68:44:
74:1d:07:a2:4c:48:a5:e1:19:9d:86:b3:0f:1e:3c:
5c:09:e9:93:a8:e8:a0:c0:d9:da:51:94:62:f9:a7:
56:66:2b:b5:4b:35:f1:d4:76:fd:06:a4:2c:03:fd:
6b:a1:64:e6:72:76:12:6f:06:24:4d:54:9c:6e:86:
ea:7a:fd:57:da:0c:51:56:75:c2:9b:87:8c:87:3e:
84:e5:24:67:4d:66:77:56:03:b8:76:8a:ec:5d:b7:
86:22:ea:eb:8f:6a:1e:0b:9d:2e:24:e8:bd:33:52:
9a:f8:c2:6f:ff:4b:c3:80:da:dd:18:42:91:8d:c3:
0e:2d:11:8b:b4:14:43:e7:8a:a0:1d:68:66:82:a8:
17:4e:69:d1:e7:e3:25:20:e9:a3:f8:be:18:22:b5:
7b:ad:32:87:e5:7d:e0:14:45:a6:5b:2e:16:3a:84:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:78:82:DF:4B:77:98:56:A8:F8:C4:34:15:FB:DA:60:FF:2D:E5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.250.0/23
Signature Algorithm: sha256WithRSAEncryption
60:5c:e6:6e:58:cd:e5:9b:18:37:18:09:28:3e:d0:f2:53:ad:
17:01:e4:12:99:e3:6f:13:c7:c5:5e:05:b6:cb:e9:b1:14:e0:
64:0c:37:96:15:dc:68:18:7c:4d:67:02:cd:83:71:d9:c4:3e:
5d:fe:56:c6:62:b6:f1:d6:b8:64:b0:b0:d3:48:12:3a:20:97:
0c:9f:28:ed:aa:fd:c5:4c:5d:94:da:c2:37:46:c0:1a:33:23:
30:e3:7f:0f:71:71:12:d7:56:bd:f2:f4:f6:19:f9:1d:5d:12:
24:a2:64:38:83:a9:7d:01:7f:d6:5d:12:ee:0f:c7:47:32:78:
03:8e:92:42:92:5b:ab:c4:49:36:67:bc:f8:3e:8b:d6:f1:9b:
7a:94:15:5c:5b:fa:b2:7f:dd:a7:ca:ea:5c:a4:61:a2:37:2e:
d5:ee:3d:c1:8a:ea:c9:c7:a8:04:57:45:00:75:e2:48:a6:f8:
c1:b1:c2:89:34:bf:0b:83:1b:4b:ba:df:ce:24:bd:4d:f7:84:
67:56:23:30:dd:39:02:dd:0d:f7:47:0f:82:09:a6:17:21:f0:
72:a5:07:68:99:f8:36:30:91:9f:37:d2:30:7d:ef:fb:be:41:
9e:68:66:c5:d1:31:7c:53:de:ee:5a:68:3f:99:9e:0b:0f:31:
b4:a1:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:48 2026 by rpki-client