Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: Y8TAitchsD/d97s0fxoPLpqxmztYIVtrn66zV/yq/KE=
Subject key identifier: 1C:CC:3F:C6:E3:D2:0C:65:C7:81:64:92:EF:66:78:01:10:3F:0D:E9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EB8DCD061223B4635131042843B20CE7E0EFBD4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
Signing time: Sat 03 Oct 2026 03:47:41 +0000
ROA not before: Sat 03 Oct 2026 03:42:41 +0000
ROA not after: Sat 02 Oct 2027 03:47:41 +0000
asID: 25198
IP address blocks: 94.118.46.0/24 maxlen: 24
94.118.112.0/24 maxlen: 24
94.118.146.0/24 maxlen: 24
94.118.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b8:dc:d0:61:22:3b:46:35:13:10:42:84:3b:20:ce:7e:0e:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 3 03:42:41 2026 GMT
Not After : Oct 2 03:47:41 2027 GMT
Subject: CN=1CCC3FC6E3D20C65C7816492EF667801103F0DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:f2:39:3c:b8:5c:19:9e:85:d3:5b:a0:00:
e2:13:48:dd:0a:7e:d0:31:76:f3:2b:f9:d3:66:76:
07:6a:f5:c2:2e:7e:22:0f:5e:ac:d2:53:73:bc:eb:
cc:02:06:f8:9a:f0:3e:d0:e6:54:7c:71:70:86:89:
a1:29:9e:05:99:0f:e2:cf:c7:63:a7:6e:bc:32:f4:
72:88:4b:77:92:40:dc:3f:d2:90:43:fb:6f:6d:b0:
db:e6:01:64:e9:15:76:d8:ed:d1:3b:c0:33:4d:d7:
d9:eb:57:ab:aa:8b:56:3a:20:90:2a:cb:3f:75:5c:
0e:49:95:eb:e0:97:18:28:8a:64:7d:db:5d:a4:13:
14:87:84:ce:2f:c4:79:2c:19:e9:81:64:f6:cc:c2:
98:1e:a5:e1:c6:85:87:cf:47:27:69:af:9f:d2:6b:
d6:87:ac:90:cf:01:66:7d:90:31:bf:5f:e3:e7:d3:
ee:89:8c:98:2a:c8:e1:a2:da:e5:15:0f:e2:17:b2:
41:35:13:98:6e:94:c9:73:e4:01:93:0d:67:7e:16:
0b:60:41:a7:44:84:12:d2:35:7a:56:07:b0:89:1a:
7f:50:f1:5e:e4:79:f9:e3:c8:a7:c8:93:63:7a:b1:
c4:d2:bd:06:fc:61:2b:0d:a2:db:51:d5:8b:c0:a4:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:3F:C6:E3:D2:0C:65:C7:81:64:92:EF:66:78:01:10:3F:0D:E9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.46.0/24
94.118.112.0/24
94.118.146.0/24
94.118.228.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1d:65:be:e2:5c:ad:14:f5:e0:f8:6c:da:de:b0:d9:41:64:
d2:73:50:51:79:06:34:65:33:d3:3d:a0:5f:c3:af:19:42:e7:
91:c9:a6:d8:53:99:4a:9f:98:b6:2e:ba:2a:8c:d3:a2:8a:03:
5a:71:7a:38:14:6f:91:38:dc:bd:7e:83:10:b0:f2:83:73:4f:
b3:30:f9:12:c2:33:86:d6:23:63:c5:ca:3e:ef:ad:4c:b7:a5:
83:46:92:4d:bb:7f:9e:04:27:22:72:11:79:d7:6c:32:28:03:
65:85:5e:75:a4:52:35:58:bc:11:db:32:c7:a9:2f:40:6d:ab:
de:21:bb:c3:b7:68:40:7d:92:02:3f:34:3c:56:36:4d:5f:1f:
d3:cb:26:b2:18:f3:57:cf:b1:97:e5:f6:8c:6e:9f:f5:1d:c7:
02:cd:51:1e:47:c9:4f:05:57:4a:81:d2:a7:7c:70:93:51:db:
16:51:98:6b:e8:f7:6a:0f:48:2d:0f:3b:d1:c5:39:b7:99:a8:
d9:98:58:d7:b4:09:9d:06:8b:96:1b:f8:35:eb:08:a0:66:03:
4c:18:74:c1:97:d8:ca:ed:ee:7f:0e:2e:12:43:91:b0:5f:3a:
c6:bc:1d:31:21:5f:18:2b:d9:cb:47:fa:c4:54:64:45:ec:71:
e0:34:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:36:36 2026 by rpki-client