Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: Slm6MzUpEK+V92iJd2LzyVgTVg9aooT7JgfqzUt32Q4=
Subject key identifier: 07:89:94:34:B7:A9:C7:7D:3B:D9:47:4F:48:B3:7D:58:8C:50:4B:2F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 11E038911A302383AFA9821BCC7962AA0429A4CB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
Signing time: Sun 20 Sep 2026 06:34:02 +0000
ROA not before: Sun 20 Sep 2026 06:29:02 +0000
ROA not after: Sun 19 Sep 2027 06:34:02 +0000
asID: 25198
IP address blocks: 92.113.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e0:38:91:1a:30:23:83:af:a9:82:1b:cc:79:62:aa:04:29:a4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 06:29:02 2026 GMT
Not After : Sep 19 06:34:02 2027 GMT
Subject: CN=07899434B7A9C77D3BD9474F48B37D588C504B2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:6b:78:e5:f2:94:3d:a3:c7:79:57:26:12:
c6:a4:0f:22:f9:d8:78:bd:43:53:68:42:7c:46:55:
39:26:7b:35:6b:23:bc:07:1c:4a:3d:5c:c1:7c:2b:
b0:da:02:27:42:7a:90:b0:e3:b0:fd:6c:87:cf:14:
b3:f5:32:cc:eb:b5:94:d3:85:b9:f5:0a:33:bd:86:
86:fc:e0:a1:07:33:1b:09:e5:8e:13:1b:24:fc:8f:
98:f0:f0:1b:38:a9:bf:04:1d:8c:15:d4:cf:d8:09:
b6:51:f4:cc:61:34:5b:79:3f:35:85:27:ea:58:03:
90:4b:85:93:9a:ee:4a:3a:a0:cd:f5:94:60:55:c3:
06:87:b1:07:cb:f9:c8:41:35:e4:68:39:3d:1f:5a:
d9:c7:ac:84:7f:c4:03:40:4b:52:a2:78:ef:4a:3a:
10:83:10:61:b7:7d:f9:cd:7b:0a:80:95:83:ed:91:
9e:b3:54:16:e0:c9:aa:8f:27:ad:53:f4:4d:5b:b6:
1c:d7:ee:c9:e9:8d:fa:f5:02:05:2c:e3:eb:55:4e:
a5:7c:59:fd:2c:ae:7a:28:2b:97:7f:43:fb:a3:ee:
32:a6:c5:b1:12:0a:91:0e:90:3f:bb:eb:f0:96:1b:
a1:f4:b3:71:6d:7e:1b:07:c3:2f:20:46:0d:5b:3f:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:94:34:B7:A9:C7:7D:3B:D9:47:4F:48:B3:7D:58:8C:50:4B:2F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:95:10:69:0c:9f:76:a9:0d:94:fa:ed:3b:41:d3:d8:99:40:
12:e6:df:fc:d0:f5:20:28:64:e8:8a:37:d1:48:e7:38:dc:4f:
75:f9:a1:6a:22:0e:dd:00:a3:87:4c:67:7c:b3:7d:4b:18:90:
bf:39:1a:72:21:34:e5:e1:34:2b:15:9c:2b:f1:8d:d6:7c:7a:
47:bc:71:bb:73:67:a3:5e:64:9e:bd:e8:b2:fa:0f:7c:2c:00:
f8:d6:f8:be:f0:5e:d7:b8:bf:68:77:d8:8a:aa:05:dd:93:81:
32:b5:9e:48:b7:07:9b:b5:e1:b0:ba:c7:4e:9c:61:d6:f2:34:
a9:b8:e7:40:14:a0:c5:64:a1:16:ef:e7:f2:00:69:95:2d:4f:
c0:d2:9f:30:e4:15:d3:d5:f6:c9:98:b2:97:2f:e5:bb:2f:e9:
40:9a:d1:c9:60:2b:69:6d:d1:7a:8f:91:ff:9a:52:2a:d3:39:
13:8c:6d:0f:fd:53:04:97:bc:dc:85:e6:5f:4d:6d:35:60:f9:
48:bd:04:55:88:78:e2:c8:3d:93:cc:68:ee:31:30:4e:e0:1b:
d5:c3:2b:03:35:74:7f:ec:0a:a1:20:8e:a1:24:f6:fa:9e:98:
42:9a:2d:bc:c5:76:e4:78:d8:8c:42:44:af:ac:34:61:65:b5:
81:9c:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:00:43 2026 by rpki-client