Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: cZPCEJAxyoUyUa3DZZQrtNgmn9O1CsbNbTPLVCGRLtk=
Subject key identifier: 90:57:26:C2:46:2E:CC:1F:AC:B9:E9:0A:45:27:2E:45:42:F9:48:55
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59E27F2DD247B12E40009D652FC05C658C6DE9B4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Fri 11 Sep 2026 15:29:33 +0000
ROA not before: Fri 11 Sep 2026 15:24:33 +0000
ROA not after: Fri 10 Sep 2027 15:29:33 +0000
asID: 25198
IP address blocks: 162.141.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e2:7f:2d:d2:47:b1:2e:40:00:9d:65:2f:c0:5c:65:8c:6d:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 11 15:24:33 2026 GMT
Not After : Sep 10 15:29:33 2027 GMT
Subject: CN=905726C2462ECC1FACB9E90A45272E4542F94855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:3b:fe:70:f4:59:d9:d7:b5:8d:84:d0:bf:
d3:04:ed:cc:e7:4b:ab:c2:63:e5:2a:d3:f0:a0:a8:
32:5f:47:68:8c:a8:e3:f3:48:d8:60:34:e8:78:e5:
9e:8f:fa:da:46:97:a9:0a:1c:33:c3:db:20:11:4f:
81:c2:d9:68:da:71:9e:cc:bf:c4:8c:08:7b:ac:3a:
08:d9:3c:dd:17:9b:d6:af:bd:a6:1f:c2:42:72:12:
d1:49:04:6b:91:d6:7a:34:81:7f:12:98:78:15:bb:
20:07:1b:48:ef:ee:60:28:46:1e:e0:09:87:da:8c:
07:8c:05:b9:cf:22:86:a4:69:76:06:aa:e3:5e:84:
49:e3:24:fc:86:32:79:0e:5d:38:67:11:5d:e7:10:
c1:8a:25:d3:df:d1:bd:e9:12:2d:a0:17:98:9a:bc:
fc:2f:65:12:3e:b5:9b:1a:4c:8b:10:c1:04:8a:ba:
fd:72:9b:e5:0d:c3:00:be:ab:2f:f3:21:52:24:ea:
14:cd:c1:60:93:18:b6:84:82:23:1f:d1:39:be:4d:
d2:8e:41:04:0d:8b:63:08:3f:49:86:e1:ac:df:50:
f7:0f:2b:a4:10:ad:0e:21:ba:0c:a5:f5:51:7b:c0:
3d:3c:d1:b6:07:6b:99:70:75:0b:63:3a:be:38:fa:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:26:C2:46:2E:CC:1F:AC:B9:E9:0A:45:27:2E:45:42:F9:48:55
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.80.0/24
Signature Algorithm: sha256WithRSAEncryption
04:69:4c:f6:4f:1b:95:10:5d:56:e9:6e:6e:d8:c2:f4:b3:05:
55:3f:79:f1:87:4d:06:77:18:4b:d9:08:f4:95:ef:e6:81:f7:
23:77:e5:dc:0e:2d:68:ba:f6:ca:fb:7c:1e:c0:16:2c:03:b4:
e4:e9:a9:2b:2d:15:ef:91:c0:b8:52:ce:48:3b:d3:61:b9:6a:
c1:cf:6e:20:e3:34:bb:77:dd:a1:5c:6d:38:f8:82:fe:52:d1:
cd:ca:0e:29:87:47:7e:e4:bd:d6:5f:c4:9d:76:df:8d:21:0c:
c5:28:39:76:7f:bb:6b:8d:b9:ca:b5:07:a5:bb:d4:3b:a8:f0:
1f:8d:cd:32:03:03:26:46:cd:cc:99:2d:87:ae:37:24:b7:2e:
01:1e:8d:8c:e3:02:16:c8:55:ff:bf:d0:66:b5:1d:28:66:68:
1a:86:ed:cc:b0:cc:40:eb:92:29:dc:2d:60:f4:c3:50:6a:ca:
c9:4d:a0:d2:77:9d:69:95:ee:9b:ce:ad:82:07:00:ef:c2:40:
7f:76:32:cc:ed:a7:c9:50:c6:26:a3:2d:bf:a2:33:39:ca:1b:
f7:95:19:bc:c6:bd:d5:9d:01:ec:db:c3:ba:4a:74:dc:57:a3:
82:3e:21:0b:19:0a:6e:5f:d3:80:39:22:92:b2:e4:81:0c:5f:
b8:56:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:20:11 2026 by rpki-client