Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: 7MDe9OGJbtaKgtAzodN1fxxiu6fsNSesygYGsQybu2k=
Subject key identifier: DC:01:24:7D:4A:6B:0A:7E:C9:24:FC:A5:7E:49:90:D6:31:75:37:3E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77B0F6C9DBF8F41154113C3C7D4DC3D4496D3548
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
Signing time: Mon 02 Nov 2026 17:55:32 +0000
ROA not before: Mon 02 Nov 2026 17:50:32 +0000
ROA not after: Mon 01 Nov 2027 17:55:32 +0000
asID: 25198
IP address blocks: 94.118.46.0/24 maxlen: 24
94.118.112.0/24 maxlen: 24
94.118.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b0:f6:c9:db:f8:f4:11:54:11:3c:3c:7d:4d:c3:d4:49:6d:35:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 2 17:50:32 2026 GMT
Not After : Nov 1 17:55:32 2027 GMT
Subject: CN=DC01247D4A6B0A7EC924FCA57E4990D63175373E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:79:9c:49:6f:80:8f:92:b9:28:92:88:85:
88:24:91:66:57:9f:4a:6d:af:37:36:9d:89:48:3a:
6f:7a:c4:50:de:93:ef:80:56:8b:bb:fb:fe:85:5b:
72:86:06:df:1c:0f:16:3f:03:5d:16:fe:ad:23:68:
9e:d8:d6:70:41:09:bf:05:3d:2a:05:32:ec:d2:db:
5f:4b:45:20:ff:30:e2:86:d0:83:a9:3b:2d:3d:84:
47:8a:47:c9:7d:64:e1:70:5d:73:a0:9c:43:16:de:
e2:92:fe:46:3b:13:85:f3:55:4a:8a:b3:fb:56:84:
3e:ee:e6:55:68:77:85:47:8d:56:47:71:da:97:06:
14:44:eb:d7:5c:97:2f:83:50:7d:75:63:f4:94:89:
3f:40:4f:31:14:34:a3:3d:f5:02:5c:a7:d7:be:85:
77:ce:cc:9c:d2:4e:3f:08:17:6d:2c:1a:1f:23:3a:
3a:36:ea:88:c1:69:22:ea:90:a7:b6:92:20:d3:dd:
18:16:94:cb:aa:12:89:7f:e5:d3:3f:ac:f6:e8:3f:
bd:09:16:a1:2e:c1:7b:60:85:02:64:85:ac:5e:3c:
c8:29:ab:0f:30:b9:81:d1:5a:ef:88:17:da:e6:92:
10:16:f4:ac:f8:68:62:9a:99:b3:ab:9f:8e:66:d5:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:24:7D:4A:6B:0A:7E:C9:24:FC:A5:7E:49:90:D6:31:75:37:3E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.46.0/24
94.118.112.0/24
94.118.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:80:2e:64:c4:51:c6:c0:e0:da:a3:d0:24:cc:54:1c:bc:ed:
39:7f:d6:84:12:a4:e4:99:89:fa:bb:4c:57:20:d7:76:f3:ad:
7e:89:3f:e6:8b:77:f0:f5:ef:c2:f3:6f:e0:8e:d7:04:1b:44:
87:ce:a0:ee:ef:36:ee:7b:44:8f:6a:5f:5e:38:b5:cb:68:05:
9d:7b:d0:e6:24:95:23:64:55:2a:bc:1f:6f:33:08:b0:b5:e1:
91:e9:c3:03:06:66:70:d9:34:f1:ad:1c:21:62:f6:f2:51:00:
ce:3d:58:c1:eb:3f:88:cb:00:48:c0:e3:82:84:22:ec:26:ac:
4c:ac:d3:4b:78:b3:c2:a8:35:a6:83:67:1b:05:a1:b4:87:45:
17:1a:64:07:f5:d6:de:a1:de:9c:9e:6e:5d:58:f0:54:3b:48:
bb:40:2c:a8:98:18:aa:63:e2:4c:ed:49:d2:94:22:f3:e2:18:
9a:63:c5:f6:59:3a:ae:25:0f:8a:97:3d:cb:3c:fe:cc:db:44:
3d:77:43:a9:ad:8b:e3:bf:35:a4:e7:a6:db:46:cf:7b:6c:89:
7e:29:cc:e3:7c:52:6e:53:14:5f:72:b1:05:eb:42:ff:3a:52:
46:1e:c7:f5:51:df:f1:b7:a1:dd:ef:07:14:f9:82:ed:b6:ca:
77:af:d5:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:18:39 2026 by rpki-client