Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: kwmOO8O7bZJa+SMYAYYPADWA7OI1sOgyG7MWKiBtFeE=
Subject key identifier: 6E:12:FF:D1:19:23:EA:8F:EC:98:7F:97:3C:30:60:A2:53:A7:8F:52
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6701A2E4CFC79E6B19E7D9D730284F01108B4952
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Mon 19 Oct 2026 20:23:05 +0000
ROA not before: Mon 19 Oct 2026 20:18:05 +0000
ROA not after: Mon 18 Oct 2027 20:23:05 +0000
asID: 25198
IP address blocks: 155.117.180.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:01:a2:e4:cf:c7:9e:6b:19:e7:d9:d7:30:28:4f:01:10:8b:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 19 20:18:05 2026 GMT
Not After : Oct 18 20:23:05 2027 GMT
Subject: CN=6E12FFD11923EA8FEC987F973C3060A253A78F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:1e:49:7c:65:1d:53:3e:15:98:12:0a:a8:
2a:f7:01:f8:97:db:9b:09:8e:e0:13:5c:ea:dc:3a:
99:06:2b:b6:1e:42:61:53:ef:af:6b:30:1f:11:8b:
2e:e0:62:03:2e:36:e3:b4:59:46:26:02:38:98:8b:
19:6c:7e:51:75:07:2c:e2:21:bd:7b:58:0d:1d:27:
9f:33:9a:7e:f3:68:bc:fd:8b:6c:fc:14:bb:22:1a:
01:f5:a3:5e:48:13:94:ba:62:4b:41:16:4d:3b:a6:
92:b9:31:4d:e8:11:5d:2f:50:a3:90:0a:26:3a:1f:
0e:41:e7:7b:3c:b0:3c:21:13:e5:94:db:2c:c4:0c:
67:77:94:28:97:82:be:d9:68:c8:04:7f:c0:d3:43:
83:43:b2:04:24:25:da:9a:ca:a2:ec:3b:00:3f:bc:
4d:56:08:8f:df:db:16:9a:d8:d6:2a:e6:de:a3:0f:
35:bf:f9:11:e8:80:46:4e:9d:68:86:ca:a2:59:cd:
ff:ac:97:91:e1:14:f6:a7:5f:a4:1f:ba:1e:4c:9e:
62:bb:c7:7b:d7:36:c1:09:a4:bf:ef:d2:94:c0:e7:
2d:72:fb:cf:3b:dc:74:2e:89:af:ea:2c:60:8d:a2:
e6:fd:c3:c7:18:0a:07:7c:64:b3:e6:2f:63:19:31:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:FF:D1:19:23:EA:8F:EC:98:7F:97:3C:30:60:A2:53:A7:8F:52
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.180.0/24
162.141.13.0/24
162.141.80.0/24
Signature Algorithm: sha256WithRSAEncryption
55:27:24:40:fc:83:bf:e9:fd:fa:19:ee:83:0e:95:e4:64:73:
fe:2a:2d:67:0b:ae:90:51:ab:a0:c5:f2:cb:5f:8f:b2:84:c6:
5e:d9:2a:06:61:35:5d:a8:84:76:c8:06:5c:23:37:6a:b4:8a:
58:c0:cb:e5:9d:d9:40:19:b9:39:d1:77:ba:1b:29:86:f4:df:
13:84:b8:31:0e:ce:98:cf:7f:3b:c7:67:70:e4:d9:b1:f6:1e:
62:59:bb:0f:d1:83:40:5f:59:1f:be:22:e7:a4:b3:44:f4:c6:
5c:da:cd:62:6e:ea:70:22:a0:af:5c:0f:0a:e3:03:41:a7:02:
ae:cc:2c:8e:a8:b2:8d:99:48:38:3f:c5:87:e4:de:94:83:13:
d0:2e:77:8a:58:7a:bf:b4:e5:f3:cb:45:b4:f0:03:b1:17:9c:
c6:39:02:50:f3:fe:5c:85:a0:fb:93:be:d4:17:58:eb:db:25:
f3:1c:fb:d1:e0:78:46:c4:9e:39:aa:35:35:84:dd:09:fe:ce:
5d:36:16:68:42:d8:b9:58:d7:92:b5:f0:14:44:db:20:44:ca:
fd:93:91:b9:7c:fc:d3:dc:84:ca:33:68:df:6b:4b:70:08:01:
96:66:52:71:77:b5:9e:08:aa:fd:0b:43:a7:04:ff:a7:42:c9:
0e:da:9e:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:52:39 2026 by rpki-client