Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: I9YoDMPrXLyoYmZ3XM1HroEHkdvRS5L4niAW/tCHg48=
Subject key identifier: 77:62:0E:33:B0:55:87:F2:CF:2A:FB:A8:45:C8:E2:D0:00:E5:C4:20
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 497EA613A4A3F4499C8FE4006624736BE960143E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4637.roa
Signing time: Sun 04 Oct 2026 23:14:17 +0000
ROA not before: Sun 04 Oct 2026 23:09:17 +0000
ROA not after: Sun 03 Oct 2027 23:14:17 +0000
asID: 4637
IP address blocks: 92.112.23.0/24 maxlen: 24
95.134.136.0/24 maxlen: 24
95.134.137.0/24 maxlen: 24
95.134.138.0/24 maxlen: 24
95.134.139.0/24 maxlen: 24
95.135.136.0/24 maxlen: 24
95.135.145.0/24 maxlen: 24
95.135.146.0/24 maxlen: 24
95.135.147.0/24 maxlen: 24
95.135.152.0/24 maxlen: 24
95.135.169.0/24 maxlen: 24
95.135.170.0/24 maxlen: 24
95.135.172.0/24 maxlen: 24
95.135.174.0/24 maxlen: 24
95.135.177.0/24 maxlen: 24
95.135.211.0/24 maxlen: 24
95.135.216.0/24 maxlen: 24
95.135.220.0/24 maxlen: 24
95.135.226.0/24 maxlen: 24
95.135.227.0/24 maxlen: 24
95.135.231.0/24 maxlen: 24
95.135.243.0/24 maxlen: 24
95.135.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7e:a6:13:a4:a3:f4:49:9c:8f:e4:00:66:24:73:6b:e9:60:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 4 23:09:17 2026 GMT
Not After : Oct 3 23:14:17 2027 GMT
Subject: CN=77620E33B05587F2CF2AFBA845C8E2D000E5C420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:c1:ce:b2:ae:65:a8:50:68:03:ac:ef:e7:
89:8d:13:61:a6:4c:8f:6a:79:ba:d4:a4:14:da:ff:
21:49:e3:50:dc:f1:0b:3a:6a:6f:f0:c5:60:49:f1:
83:4a:01:aa:38:9c:64:0d:21:75:60:a0:2a:5d:94:
1f:a0:8d:68:20:34:3f:6d:77:0f:ca:07:64:3d:de:
5c:3a:94:0f:68:3c:44:e2:96:73:3c:55:51:66:b1:
25:63:e2:db:e3:89:c1:27:3d:bc:b3:70:6a:fb:fb:
78:1b:ba:ee:bd:37:00:60:b4:62:25:69:e8:e4:af:
2c:33:18:6c:0a:a7:82:24:63:ad:3e:65:4f:2e:6c:
8d:a9:d5:25:3e:a5:d1:f8:30:ff:46:ee:64:68:46:
e2:8e:dc:ff:f2:2e:7c:f1:e8:e8:f1:2a:45:31:93:
97:f6:6b:d9:4d:d9:bc:df:01:73:28:fc:30:f7:77:
05:79:95:7a:28:16:d9:ef:1e:42:20:0f:03:bc:ad:
e0:cd:79:11:60:c7:a9:59:0a:5d:4c:21:51:1e:07:
02:a7:44:1e:63:e8:d0:fb:0a:b6:ad:2a:b9:cc:0b:
77:26:cc:99:f1:72:07:62:37:b9:46:47:d6:ac:99:
13:16:3a:6b:16:47:11:57:18:a6:dd:26:91:d5:cf:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:0E:33:B0:55:87:F2:CF:2A:FB:A8:45:C8:E2:D0:00:E5:C4:20
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.23.0/24
95.134.136.0/22
95.135.136.0/24
95.135.145.0-95.135.147.255
95.135.152.0/24
95.135.169.0-95.135.170.255
95.135.172.0/24
95.135.174.0/24
95.135.177.0/24
95.135.211.0/24
95.135.216.0/24
95.135.220.0/24
95.135.226.0/23
95.135.231.0/24
95.135.243.0/24
95.135.247.0/24
Signature Algorithm: sha256WithRSAEncryption
76:94:ab:00:47:d6:47:fa:78:50:c8:1e:07:c7:6c:47:6b:51:
c1:65:a0:7e:81:87:9e:4b:0c:e7:4c:79:87:69:ac:4d:10:22:
fa:9e:6a:49:6e:8f:56:5a:4a:fb:eb:6b:0c:5c:e3:bc:5c:9c:
2c:bf:b4:3e:a8:05:7a:75:33:04:42:6f:53:44:9b:02:2a:69:
a3:b8:39:7d:74:ee:57:c6:94:da:2f:75:cf:01:a6:7b:c8:8e:
ba:c2:1d:80:e9:0c:00:ff:f2:36:58:76:f7:b8:3d:4e:c9:b4:
d9:d5:a0:75:88:d2:88:0f:88:13:8b:d7:50:b2:22:c8:0d:f4:
48:c3:ab:7a:c6:90:ce:bb:49:8f:2e:3d:17:e2:11:77:9e:0c:
1a:d5:55:e4:db:10:45:3d:c7:9a:25:57:5c:8d:a2:23:cd:73:
5e:f2:8a:d8:1c:cd:e4:de:45:c2:00:32:eb:72:66:1e:5f:94:
57:ff:c4:85:68:2b:37:17:9b:71:3e:06:80:02:8c:90:72:16:
a4:db:c0:09:3e:77:85:19:88:cc:af:97:48:22:8a:3b:64:09:
c5:d6:42:b5:f0:b9:e6:38:79:2e:ce:80:b7:8b:de:ec:d9:4a:
74:05:12:20:72:45:f9:ec:4e:47:f0:18:e1:9d:b2:f7:a6:d5:
06:69:02:6a
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUSX6mE6Sj9Emcj+QAZiRza+lgFD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMDQyMzA5MTdaFw0yNzEwMDMyMzE0MTdaMDMxMTAvBgNV
BAMTKDc3NjIwRTMzQjA1NTg3RjJDRjJBRkJBODQ1QzhFMkQwMDBFNUM0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMfsHOsq5lqFBoA6zv54mNE2Gm
TI9qebrUpBTa/yFJ41Dc8Qs6am/wxWBJ8YNKAao4nGQNIXVgoCpdlB+gjWggND9t
dw/KB2Q93lw6lA9oPETilnM8VVFmsSVj4tvjicEnPbyzcGr7+3gbuu69NwBgtGIl
aejkrywzGGwKp4IkY60+ZU8ubI2p1SU+pdH4MP9G7mRoRuKO3P/yLnzx6OjxKkUx
k5f2a9lN2bzfAXMo/DD3dwV5lXooFtnvHkIgDwO8reDNeRFgx6lZCl1MIVEeBwKn
RB5j6ND7CratKrnMC3cmzJnxcgdiN7lGR9asmRMWOmsWRxFXGKbdJpHVz+sZAgMB
AAGjggJzMIICbzAdBgNVHQ4EFgQUd2IOM7BVh/LPKvuoRcji0ADlxCAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBiQYIKwYBBQUHAQcBAf8EejB4MHYEAgABMHADBABccBcD
BAJfhogDBABfh4gwDAMEAF+HkQMEAl+HkAMEAF+HmDAMAwQAX4epAwQAX4eqAwQA
X4esAwQAX4euAwQAX4exAwQAX4fTAwQAX4fYAwQAX4fcAwQBX4fiAwQAX4fnAwQA
X4fzAwQAX4f3MA0GCSqGSIb3DQEBCwUAA4IBAQB2lKsAR9ZH+nhQyB4Hx2xHa1HB
ZaB+gYeeSwznTHmHaaxNECL6nmpJbo9WWkr762sMXOO8XJwsv7Q+qAV6dTMEQm9T
RJsCKmmjuDl9dO5XxpTaL3XPAaZ7yI66wh2A6QwA//I2WHb3uD1OybTZ1aB1iNKI
D4gTi9dQsiLIDfRIw6t6xpDOu0mPLj0X4hF3ngwa1VXk2xBFPceaJVdcjaIjzXNe
8orYHM3k3kXCADLrcmYeX5RX/8SFaCs3F5txPgaAAoyQchak28AJPneFGYjMr5dI
Ioo7ZAnF1kK18LnmOHkuzoC3i97s2Up0BRIgckX57E5H8BjhnbL3ptUGaQJq
-----END CERTIFICATE-----
Generated at Wed Nov 11 21:05:49 2026 by rpki-client