Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: mSPNKhB34VowFeLZ/yu0l7j9LylMYSMZ5NZ1O+DEfSs=
Subject key identifier: DC:E4:83:85:24:57:9B:6A:24:3A:A9:9C:EA:DC:AD:31:87:EF:EB:18
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 52DAEBCCD7E022EC5A601B3A268500AE145F3971
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa
Signing time: Thu 16 Jul 2026 15:15:23 +0000
ROA not before: Thu 16 Jul 2026 15:10:23 +0000
ROA not after: Thu 15 Jul 2027 15:15:23 +0000
asID: 25198
IP address blocks: 82.139.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:da:eb:cc:d7:e0:22:ec:5a:60:1b:3a:26:85:00:ae:14:5f:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 16 15:10:23 2026 GMT
Not After : Jul 15 15:15:23 2027 GMT
Subject: CN=DCE4838524579B6A243AA99CEADCAD3187EFEB18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:8e:1b:29:a4:bc:66:b7:a7:a6:d3:aa:82:
cb:c5:aa:2d:3c:71:c6:9b:ea:d3:e7:2d:03:3e:8e:
eb:cc:73:34:1b:2f:ab:7e:3a:26:3e:0e:ae:ac:2f:
fd:07:e5:32:95:9a:da:d6:c7:9f:16:7f:63:d6:4a:
10:d4:7a:35:86:af:4b:4e:5b:70:e2:dc:34:a9:f0:
a1:2b:9f:f8:99:f7:92:49:18:a5:49:5f:1e:88:bf:
3a:4e:41:3f:d3:97:c7:5a:86:19:34:f0:5a:64:ef:
a7:c1:f4:21:a8:f8:59:a4:79:51:d6:2c:4e:e6:e5:
a9:58:2b:e8:d6:8a:0d:aa:d9:b3:7d:21:c2:3d:6f:
5a:db:df:92:7d:21:a7:59:0a:79:66:80:52:c4:9f:
7a:7e:d6:c0:1e:99:e4:10:c1:04:89:02:94:00:0b:
d1:89:bc:4e:e3:40:5a:75:9d:bd:d1:23:75:a3:72:
aa:db:26:d7:18:f4:df:27:58:37:b0:4c:94:d8:b6:
aa:23:ca:c9:77:98:14:08:0a:3e:35:25:70:c8:ae:
78:c5:6c:c3:5b:1a:fd:d6:0d:d4:0a:33:d3:b6:b1:
10:9e:45:ac:ed:50:d8:e8:a3:d6:cd:34:19:c6:f7:
1d:39:90:6d:2c:03:b1:03:6d:52:f8:7d:a1:10:94:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:83:85:24:57:9B:6A:24:3A:A9:9C:EA:DC:AD:31:87:EF:EB:18
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d6:9f:17:a6:af:ab:99:bc:34:e0:38:a5:7a:3c:c4:91:64:
9b:c8:57:bf:d4:df:1e:8c:c3:8f:94:d5:04:56:17:af:d8:78:
88:c6:85:3a:1f:6a:51:41:b1:77:84:53:27:97:28:dd:ac:d7:
6b:c8:60:bb:6f:3f:04:26:fa:f8:b8:d4:05:1d:25:94:29:60:
94:30:58:d9:b8:08:af:c7:df:ea:36:ee:5b:6b:d0:92:70:aa:
01:a9:29:0b:2f:93:20:e4:6f:54:ce:37:df:b0:e3:fc:68:6e:
72:6d:1d:c9:c9:bc:74:b7:3a:61:ed:e5:f2:46:b3:b1:52:32:
d7:26:74:98:99:b3:4f:e6:8c:9a:3a:d7:86:f1:10:c9:9a:13:
52:42:d5:b3:01:7e:b3:62:65:1c:d9:fd:ce:3a:d5:98:db:fe:
6d:a6:fa:3f:11:77:bc:af:07:85:5b:19:13:cc:76:c6:8c:8b:
cd:28:58:e7:59:58:0c:f6:e1:d0:f4:e8:5f:de:25:88:83:bf:
ba:37:d9:7e:78:94:21:12:35:6c:ce:3d:f1:61:af:52:d1:29:
32:da:e7:44:7a:0d:42:03:68:74:d8:db:bc:f8:a5:8b:27:d2:
50:e1:6a:6f:ec:6d:a0:a2:b2:c2:76:83:81:41:72:19:38:4d:
b7:be:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:48 2026 by rpki-client