Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: Ae5DG71n3C4UafylkubCPMTiNCXofRMGrNBnHKgX/HA=
Subject key identifier: BE:D4:E7:80:A4:DD:54:31:A0:44:3D:B5:7E:37:DD:95:3F:EB:7C:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 411B1D2DB5003C3949562A562091537310BC09B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Wed 03 Jun 2026 11:56:24 +0000
ROA not before: Wed 03 Jun 2026 11:51:24 +0000
ROA not after: Wed 02 Jun 2027 11:56:24 +0000
asID: 25198
IP address blocks: 140.233.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1b:1d:2d:b5:00:3c:39:49:56:2a:56:20:91:53:73:10:bc:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 3 11:51:24 2026 GMT
Not After : Jun 2 11:56:24 2027 GMT
Subject: CN=BED4E780A4DD5431A0443DB57E37DD953FEB7C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:66:4a:f2:27:4f:20:87:a5:48:2e:30:00:
52:71:26:ff:01:ef:52:9c:32:a2:96:79:9e:56:70:
ea:0b:f4:ba:09:18:0b:cb:be:f4:c5:94:c7:2e:c3:
67:7e:ae:6d:51:7f:6e:a8:af:3c:9c:3a:5c:15:fd:
48:ef:7d:c8:e0:30:99:02:65:9f:d1:56:d8:32:f5:
b7:c5:1b:3c:2f:5a:e6:98:6c:33:9d:af:e8:1d:dd:
bf:2d:13:3e:0f:6f:bd:f4:f4:32:e9:86:46:ff:e8:
fd:3c:23:e3:ca:0f:50:f6:2d:1d:ce:15:da:fe:6d:
c7:5f:23:be:8b:32:00:26:a7:c1:61:2e:ea:56:3e:
aa:c8:41:f1:6d:7e:a8:be:ec:cb:d2:35:b7:d1:bd:
d1:c0:bf:ec:b6:ea:fd:ee:37:50:b0:e6:24:1e:88:
63:19:8e:c6:24:a3:7f:e9:cd:2c:a9:f9:c6:a5:f8:
02:2f:ad:ea:11:ee:6b:9b:37:5f:0e:97:02:e4:9d:
7b:b8:87:33:59:9f:ae:d8:19:a2:72:70:a1:47:9e:
9a:33:3c:12:68:1f:1f:1b:87:6c:40:15:3b:43:b7:
40:b9:19:f1:44:15:f7:2e:1f:1b:7c:9b:cc:d4:23:
9b:85:ca:2c:8a:9f:4d:ba:3e:d8:cc:f4:1f:72:88:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:E7:80:A4:DD:54:31:A0:44:3D:B5:7E:37:DD:95:3F:EB:7C:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f0:28:7b:42:dd:31:a4:f4:99:e5:29:d2:e1:0e:bd:10:b5:
b2:22:ab:30:19:47:9f:52:62:f4:3a:cf:16:fc:ef:73:e5:a5:
c5:6d:83:dd:8e:da:07:3f:0d:ac:0d:ee:98:a1:2c:3d:20:3b:
7b:e7:d8:3a:ea:39:c3:b4:b2:db:02:b2:a2:b4:f8:f6:3b:f1:
1c:d0:bd:fa:5e:01:f4:e8:75:8d:d3:95:8e:24:cf:eb:cc:96:
02:2f:53:73:b2:56:6b:0e:01:60:f3:26:3c:38:35:c5:9f:7a:
25:96:c4:77:d6:2d:36:9d:41:e3:58:4f:c8:86:e2:2b:50:fe:
b0:89:56:a0:2e:4f:d1:9b:6e:50:5a:df:08:fa:48:56:36:52:
21:c0:cf:29:7d:f6:74:30:0f:06:80:0f:dc:dd:52:b6:09:03:
00:e9:68:71:a4:09:86:15:cb:ab:8c:f4:e0:86:22:c9:64:b8:
4b:fe:fe:a8:c3:20:19:1b:93:83:59:ce:58:d3:e0:ef:8a:24:
3d:16:0f:47:4b:19:79:d3:b5:d1:51:59:0c:12:06:0f:70:56:
b7:6d:39:b9:33:8a:c3:1b:87:9f:d2:2d:86:d5:40:99:01:ce:
d4:b0:6b:eb:12:59:57:a5:08:e6:b9:40:90:2d:ea:59:39:cf:
5b:35:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:18:12 2026 by rpki-client