Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: IjqDKHgZa+SfJHTa6jHP6y34PJ6D3mh4p59SjaO76jg=
Subject key identifier: AF:A0:25:AF:54:5D:66:67:59:2E:24:63:5C:26:F9:0D:8D:65:AB:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 58149EF70D47D546272F3ECF2A92CB3E672848C4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Sun 26 Jul 2026 13:51:54 +0000
ROA not before: Sun 26 Jul 2026 13:46:54 +0000
ROA not after: Sun 25 Jul 2027 13:51:54 +0000
asID: 25198
IP address blocks: 140.233.167.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
162.141.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:14:9e:f7:0d:47:d5:46:27:2f:3e:cf:2a:92:cb:3e:67:28:48:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 26 13:46:54 2026 GMT
Not After : Jul 25 13:51:54 2027 GMT
Subject: CN=AFA025AF545D6667592E24635C26F90D8D65AB16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:b2:1a:e5:41:5a:af:e5:79:05:74:85:44:
98:5d:cb:5d:1a:f2:2c:91:3d:e4:4a:6c:6b:18:8c:
27:48:60:b7:e5:d2:4c:3c:07:a2:bd:3c:95:7c:ad:
1e:98:44:4c:54:5e:39:eb:03:74:f1:64:dd:67:91:
7a:be:3f:1b:0e:57:3d:98:28:20:5a:d8:f7:9b:9a:
83:9c:b1:87:20:78:e0:57:11:0e:c9:1a:01:8b:ef:
df:fe:3f:36:8e:d0:3e:97:7b:cf:9a:6a:3d:35:74:
5f:72:ea:33:c9:f0:76:15:26:84:d8:cc:49:ee:5c:
84:22:5e:d6:39:dd:ef:f6:e9:87:33:7f:18:36:22:
64:38:9a:16:be:7c:71:2e:cc:2b:06:5e:cd:8f:ac:
44:73:a3:1b:ce:6f:2a:c4:79:cc:56:dd:37:8b:3b:
cf:87:4d:68:18:aa:be:b6:c3:c3:49:76:e0:01:15:
ca:6f:bb:f2:b9:08:02:2f:1e:23:52:8e:e2:12:d0:
5a:06:3a:56:f0:21:36:d4:cb:b0:a0:b6:c5:ed:25:
53:82:6e:db:92:87:ee:20:37:b5:46:bf:aa:bb:f7:
82:56:44:3f:30:77:46:87:20:8a:8a:2e:8b:34:a7:
c2:46:0e:e4:e8:bf:be:89:f5:63:fe:2f:43:f0:cb:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:25:AF:54:5D:66:67:59:2E:24:63:5C:26:F9:0D:8D:65:AB:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.167.0/24
140.233.184.0/24
147.79.56.0/24
150.241.136.0/24
162.141.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9a:fa:ec:10:87:34:c4:17:4e:7d:0a:cb:79:16:2b:bf:68:
c5:ba:5c:86:37:3d:96:26:f9:5f:27:fd:cc:01:0a:a4:d3:20:
55:76:c2:a7:4c:d3:b0:3d:7d:b3:be:60:d2:55:b9:68:7d:17:
62:7b:f9:a8:93:ba:a5:99:e6:97:8b:18:6e:0c:31:82:fa:eb:
3e:47:d4:87:d4:71:12:37:9b:3a:5d:d5:a1:0c:02:9a:63:2f:
c1:56:93:0f:08:3b:9f:65:e1:34:c7:58:6e:35:57:f5:e9:38:
72:e0:24:93:05:30:67:28:51:44:a9:41:a5:2c:74:c2:74:40:
21:fd:f6:f3:ad:41:f3:f4:4f:c1:59:be:b8:73:d0:45:39:d6:
7b:cf:c1:b5:25:20:45:29:f8:e3:52:72:91:6c:d8:9e:25:6e:
7d:49:77:68:ce:0c:1f:78:12:8c:f0:58:e4:3a:c6:11:b4:02:
8d:af:5d:ca:f3:f8:ee:4d:1b:bf:20:df:3a:37:b4:be:6c:c3:
f2:34:39:8d:e8:4d:1b:12:a3:9c:69:74:fb:ff:81:b8:2a:3a:
89:ca:71:c3:79:1a:eb:52:2f:07:95:cb:47:97:48:d2:d0:88:
cb:1f:d7:44:5d:31:75:9f:fa:f5:bd:39:3b:c0:61:4e:59:be:
16:ec:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:03:28 2026 by rpki-client