Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: +ty+0JxjG43ItjUnBLoJT6BfEctnL+JBLMy5+bTLQ5A=
Subject key identifier: 36:B1:8F:10:45:9A:0E:A0:57:27:5F:AA:FC:EE:5F:38:E8:77:BA:E1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 57EABB335529A2195F3596FC2EF0D0D5E0E2B558
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Thu 16 Jul 2026 15:15:18 +0000
ROA not before: Thu 16 Jul 2026 15:10:18 +0000
ROA not after: Thu 15 Jul 2027 15:15:18 +0000
asID: 25198
IP address blocks: 140.233.161.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
147.79.19.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
162.141.68.0/24 maxlen: 24
162.141.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ea:bb:33:55:29:a2:19:5f:35:96:fc:2e:f0:d0:d5:e0:e2:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 16 15:10:18 2026 GMT
Not After : Jul 15 15:15:18 2027 GMT
Subject: CN=36B18F10459A0EA057275FAAFCEE5F38E877BAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:d5:b1:e8:24:d6:a9:70:a1:c1:0d:c2:c3:
43:22:f3:4d:36:bb:f0:33:b5:5e:c0:80:0e:28:9f:
2b:b6:e2:5f:38:56:29:75:d1:a1:23:2c:d0:cc:e9:
1b:7c:ba:d5:ca:86:0d:c8:d9:e3:02:18:a9:6e:97:
23:49:0e:7a:fc:01:21:e2:d9:3c:46:c3:de:9a:ea:
5e:fe:16:47:6f:b4:a4:31:bf:b8:b7:50:59:2a:dc:
bd:e8:95:48:f3:3d:73:b1:e3:24:4c:32:6c:a6:bf:
07:fb:e1:5a:1c:9f:59:f2:0e:f0:7a:5f:fb:d1:dd:
4b:98:82:1d:00:2f:2b:7e:dd:fa:5d:8b:e3:12:2c:
a0:c5:eb:f1:aa:8c:12:57:82:fa:f6:7e:16:8a:ec:
c4:83:12:a4:2a:20:8c:c1:2c:f8:f1:f1:bf:a5:5f:
92:37:df:6c:87:27:b9:08:f4:7b:83:78:d4:ba:c7:
b0:8d:a5:d9:1f:a9:a8:a4:08:df:ef:23:bb:78:a1:
31:f8:ab:c2:2e:77:3b:3b:42:35:7f:e4:fc:eb:e8:
e2:98:09:23:fe:fe:3a:0d:45:85:ac:a4:fc:83:43:
7c:dc:ed:98:5f:8a:14:96:b1:dd:ab:e0:aa:5c:57:
6f:4c:3f:81:bc:92:ad:2f:d1:96:3d:32:52:7c:c1:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:8F:10:45:9A:0E:A0:57:27:5F:AA:FC:EE:5F:38:E8:77:BA:E1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.161.0/24
140.233.167.0/24
147.79.19.0/24
147.79.56.0/24
150.241.136.0/24
162.141.68.0/24
162.141.153.0/24
Signature Algorithm: sha256WithRSAEncryption
55:37:a5:c2:e3:2c:24:14:b7:e0:da:6e:e9:2b:cc:b5:20:5c:
6d:2d:33:11:ba:13:33:c0:c0:61:b1:8c:21:0b:f0:9b:26:84:
08:25:62:70:cb:67:bb:ee:7d:20:82:33:1c:13:db:7e:4e:21:
3c:ff:52:0d:0f:fb:60:bb:1e:0b:02:fa:ec:1d:15:8f:5a:a5:
80:45:4d:c5:91:3e:dc:23:90:dc:ed:70:10:5f:61:58:78:2a:
99:d1:97:95:e8:ea:4e:b2:20:0c:6b:34:b3:c0:0c:00:2b:f1:
ce:a7:2f:7a:99:b0:70:27:25:e6:06:df:7a:b4:d6:ce:2a:b7:
dc:9c:2f:17:b0:b9:46:21:bc:a8:6a:cc:15:d7:14:eb:8c:34:
1e:f1:55:b3:a0:fe:c6:f4:cd:7e:80:39:a6:f0:5a:7d:62:32:
c5:16:11:42:fa:95:97:2c:26:3e:42:b7:e0:e9:d0:c3:cc:d5:
b2:9b:a7:8c:65:0d:25:55:a4:70:81:4d:b6:10:fc:28:95:56:
e2:47:ea:28:77:15:44:5e:2d:61:c3:16:61:b9:ac:ab:80:35:
fc:49:8e:ea:52:52:b8:10:88:79:e0:28:43:4d:db:a6:d2:1f:
64:d5:1c:2c:78:3a:2f:19:f9:87:00:4e:b0:7e:c4:6f:07:45:
d3:df:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:14 2026 by rpki-client