Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: KHQraxU4EfYiw6IRgwaYqELGC5PVOMk6T0R0NNAbrYY=
Subject key identifier: E1:10:19:41:AE:0D:DE:CB:12:11:B5:3B:B2:87:E3:93:32:03:29:4E
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 52321DB5F8BE53D05594A0DC5D05904A9B849B15
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS25198.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 25198
IP address blocks: 185.169.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:32:1d:b5:f8:be:53:d0:55:94:a0:dc:5d:05:90:4a:9b:84:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=E1101941AE0DDECB1211B53BB287E3933203294E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:fb:fd:93:cd:80:3d:78:8c:c2:6f:b8:f9:
45:53:fa:0d:ad:6c:b7:e9:7f:67:ca:55:8e:23:c1:
77:bd:e8:96:44:fd:bc:1c:28:dc:a7:c7:b0:b3:a7:
f9:71:a8:63:3d:ed:32:c1:e0:45:2a:92:31:f7:e3:
b0:68:fe:97:56:c7:b4:34:06:23:c3:78:54:3d:87:
14:31:c4:0f:f8:ad:73:87:dd:96:4a:3c:1e:b1:7a:
77:3c:7b:0c:e8:9b:bf:91:0a:fe:ad:ba:b4:ca:92:
15:61:85:f1:80:51:f8:96:67:bc:ae:7d:ed:2c:b0:
20:f6:e4:ce:10:99:bb:a7:b7:38:b7:8b:b4:56:c9:
7a:0d:32:80:43:55:a5:9b:79:02:3c:0f:77:e9:ed:
8f:7e:72:d3:0f:30:d3:82:87:54:38:a7:07:36:20:
e4:62:b7:e4:87:63:1b:18:ad:aa:c4:07:76:86:4c:
60:9a:f9:3c:17:ae:09:da:bd:61:9d:da:d9:04:57:
50:62:0b:41:93:69:04:8a:6e:f8:45:60:d1:fd:c5:
dc:3f:b1:80:9f:b1:f7:b2:54:c8:45:b4:cf:e9:f0:
e2:e9:12:80:b5:56:fd:fb:37:14:a3:d3:e5:0e:88:
4c:8a:ae:13:7c:4e:7e:0e:bb:ff:23:62:1d:d4:69:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:19:41:AE:0D:DE:CB:12:11:B5:3B:B2:87:E3:93:32:03:29:4E
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.121.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c1:91:fb:55:5b:df:94:2a:3a:1c:9a:d4:d8:3c:ca:69:23:
b5:e6:83:12:57:f4:67:42:f8:68:70:99:22:76:0d:dc:d4:c1:
a6:60:e0:cc:04:5b:eb:b7:03:64:b5:e9:29:57:dd:d4:0c:87:
81:97:3f:c8:d0:e0:a6:4d:74:96:20:93:45:50:ac:90:20:eb:
51:4c:0a:45:6a:c5:c4:52:55:d0:8e:fe:be:7d:7a:ad:2c:38:
fe:93:b5:3a:81:a1:f6:0e:e6:dd:cf:63:aa:b9:b9:6f:61:3e:
1e:96:d6:6e:4f:03:c5:80:e4:b9:3f:d9:d5:71:13:f2:05:d4:
51:bf:f7:89:d9:2d:ad:93:21:dd:0c:9e:40:a7:9c:25:82:30:
b2:44:88:fe:2b:01:de:5b:24:6e:0b:cb:e9:b3:00:98:09:f6:
95:be:98:04:c3:96:8f:4f:53:b4:6d:64:44:7d:29:17:bc:2e:
ff:77:ff:b3:5c:55:aa:30:f1:13:17:db:ac:58:fe:5c:de:99:
69:d3:00:2d:4e:fb:c0:1b:8f:c9:3b:1f:5f:67:2d:c3:af:a6:
f5:0e:34:1e:79:2c:a5:8f:2d:a4:c9:23:20:66:92:97:c3:d3:
10:3a:6a:1b:0b:5f:82:a3:1d:70:4d:13:2f:8a:ac:43:60:fb:
54:69:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:44 2026 by rpki-client