Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: 15/j6Pa5mvnGuhjgJf+lHiLLhdVgUoJrZAf3rF8aHZU=
Subject key identifier: 2B:23:3C:1C:10:23:90:55:02:2D:74:B6:CB:EF:A9:38:6C:AB:06:DD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0BB38B9A094F0467E952A7511811A1EC73DD0FAD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Mon 28 Sep 2026 06:37:56 +0000
ROA not before: Mon 28 Sep 2026 06:32:56 +0000
ROA not after: Mon 27 Sep 2027 06:37:56 +0000
asID: 25198
IP address blocks: 162.141.13.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b3:8b:9a:09:4f:04:67:e9:52:a7:51:18:11:a1:ec:73:dd:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 28 06:32:56 2026 GMT
Not After : Sep 27 06:37:56 2027 GMT
Subject: CN=2B233C1C10239055022D74B6CBEFA9386CAB06DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:12:70:ef:59:fb:82:e3:11:7c:30:33:70:
ae:38:93:b4:88:d3:6c:f1:ec:df:73:97:10:58:41:
82:5e:bf:1f:f6:86:f6:21:4a:88:a6:2b:fd:3b:3b:
0e:03:1e:6c:96:7e:59:38:e8:12:72:43:ac:ae:19:
9a:6e:6f:7d:8b:e4:9d:bf:5e:50:46:41:15:60:96:
8e:ee:f9:67:b6:da:dc:eb:8c:4a:cb:5b:6c:d2:ba:
fd:73:0d:60:78:36:34:85:45:fb:a7:56:5b:e9:f6:
8b:b0:f9:90:5a:bb:b7:fd:4c:d9:40:53:98:0a:30:
c3:55:78:ee:0b:63:a3:22:48:ae:00:03:1c:ea:8b:
42:91:83:cb:72:24:05:17:0e:2e:5b:d0:62:00:42:
e2:c7:46:2e:99:4f:c8:04:2e:8d:0f:3a:cc:30:f6:
d8:c2:ca:b3:dd:eb:c7:fd:4b:17:b6:01:95:f0:75:
9c:4c:c4:b4:97:30:92:8b:b7:31:1b:4d:0b:2e:4a:
a2:a4:06:29:3a:57:97:02:9f:87:45:9c:7f:5e:bf:
80:3d:93:c5:bc:3c:fc:54:db:63:fe:d8:ae:15:f8:
5f:b5:0f:48:f9:29:25:ca:68:f6:a5:af:a0:e1:21:
24:26:cd:0d:5a:f8:be:fd:c1:e2:a9:88:07:a1:4b:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:3C:1C:10:23:90:55:02:2D:74:B6:CB:EF:A9:38:6C:AB:06:DD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.13.0/24
162.141.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9d:98:f5:b0:91:c7:24:21:14:ab:d9:44:c5:89:1c:bb:2f:
a6:31:83:f4:29:e7:3d:43:b6:29:a2:c1:a7:81:aa:24:54:5e:
4f:eb:81:26:c4:80:f9:6f:d8:f5:19:5a:64:0f:47:54:2b:d6:
c3:90:a1:cf:86:6e:10:b0:cf:a2:4c:e4:9f:80:42:38:1d:bb:
34:ac:9d:db:26:e7:c9:b7:4c:72:09:d3:bd:6c:dc:9e:c8:61:
8e:f7:12:63:d2:61:b2:0c:62:45:dc:ee:24:3c:2b:5a:aa:e9:
76:27:c2:4b:d7:01:af:36:55:dc:ba:c0:2a:00:a3:1c:44:b0:
4c:35:08:a5:d9:19:29:8d:51:05:50:10:b6:76:43:07:4d:7b:
66:7b:31:75:e5:33:62:af:3f:fa:9e:b7:d3:6f:35:cb:d4:be:
43:3e:60:a9:7c:91:fa:55:95:c6:af:34:c7:02:5e:03:14:76:
75:87:10:bb:fd:e1:fe:37:41:24:d7:a0:41:f3:81:82:6c:9a:
6f:26:d9:24:7b:20:ce:a8:af:bb:1c:be:67:c1:41:92:5a:2e:
13:bc:76:27:00:33:51:3d:f5:d6:85:df:22:b5:aa:8b:96:93:
5b:60:57:c7:bc:94:22:b3:47:5e:09:d9:54:85:7e:ed:37:f4:
4a:67:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:36:07 2026 by rpki-client