Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: tb9T0mHtQNMkNTLMzAXdioWEoNDJ4WHauTOb6GiRh/o=
Subject key identifier: A8:43:35:DE:11:62:3D:7A:EC:43:B1:48:E7:7D:88:A4:94:CB:16:66
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 30FD476EB9D2984F1BF0D1E68D5AAB8C3F2DB6B1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Wed 28 Oct 2026 06:32:02 +0000
ROA not before: Wed 28 Oct 2026 06:27:02 +0000
ROA not after: Wed 27 Oct 2027 06:32:02 +0000
asID: 25198
IP address blocks: 155.117.180.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fd:47:6e:b9:d2:98:4f:1b:f0:d1:e6:8d:5a:ab:8c:3f:2d:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 06:27:02 2026 GMT
Not After : Oct 27 06:32:02 2027 GMT
Subject: CN=A84335DE11623D7AEC43B148E77D88A494CB1666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:03:b4:2b:48:dc:bd:5b:1e:c5:69:ea:f1:
1b:1c:a4:f8:d3:f2:de:00:30:bb:73:6e:f8:ca:cb:
fe:bd:c2:8a:fe:b6:eb:a7:95:c0:c0:a7:c0:22:3c:
cc:9e:9c:5f:75:5c:5a:12:51:02:d4:91:6d:79:34:
2a:f4:a4:aa:de:6b:3d:0c:58:09:9a:bb:b2:68:bf:
46:2e:64:fc:ba:82:62:5f:35:17:7b:a1:a3:fe:9f:
1a:fe:26:d4:43:03:a0:60:eb:13:e4:ad:e5:cd:e9:
54:9a:a6:87:ea:2a:32:72:79:d3:fd:9a:5d:f6:40:
38:3e:7e:2f:e5:eb:80:e2:9f:4a:4f:a4:be:f0:2a:
49:2c:58:35:0f:a1:42:20:91:18:2e:11:bc:ba:13:
47:07:52:aa:c2:3c:22:24:47:db:d0:7a:ab:6d:58:
f7:94:b5:0a:b0:f4:96:0b:f8:9a:40:ef:3b:61:8b:
ec:3b:d2:66:c3:4b:bb:7f:64:94:a8:ef:6f:dd:7a:
2d:43:90:8f:15:12:e1:cf:f7:dc:61:7d:4f:4e:f9:
72:6d:60:e1:2d:87:69:97:b9:f0:cc:2e:0b:c6:7a:
49:1b:02:a1:bc:11:12:3c:52:e9:64:75:51:26:51:
b8:b5:41:d5:22:26:f1:e7:bd:24:7b:46:a3:fd:b0:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:35:DE:11:62:3D:7A:EC:43:B1:48:E7:7D:88:A4:94:CB:16:66
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.180.0/24
162.141.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:aa:ef:e4:8d:21:11:96:55:55:ba:96:2b:a8:d1:04:15:dd:
38:7c:94:ce:6b:cc:08:df:10:84:4e:93:ce:b0:11:9d:a0:d4:
92:ba:1e:25:27:0e:36:17:d9:f3:58:f1:13:35:94:f5:a6:f4:
d1:b0:f6:73:0a:db:64:ff:2a:56:5a:b7:2e:26:24:9c:00:98:
ff:d3:43:af:be:62:ad:af:d4:9e:44:27:db:a4:97:19:08:d7:
de:c6:e0:e4:69:fa:5e:c6:7a:06:28:f0:21:b3:74:81:ea:dd:
50:f3:e9:6c:36:84:82:75:55:3d:44:41:9b:a7:ad:11:06:f5:
44:41:7c:41:61:af:74:82:9c:fc:56:a8:32:9c:e3:1e:a1:45:
03:57:b4:4f:81:ab:52:03:bb:c5:d4:70:8f:25:c6:9d:b6:62:
14:4d:5e:89:59:81:c1:f2:ca:0f:ea:76:8c:64:c3:7d:e5:17:
59:68:65:e4:5f:d6:34:6b:e5:5b:04:ed:8c:a9:0e:6b:ba:12:
5f:36:3f:94:41:06:73:c8:ec:66:a3:bc:e8:fb:10:84:ed:91:
6d:bd:67:d9:49:91:97:20:1b:f5:fe:21:64:ab:65:bd:be:60:
bb:18:14:95:6d:b9:54:75:19:20:80:35:2b:f2:7c:26:13:c8:
04:0d:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:17:46 2026 by rpki-client