Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: UnzbjK6zyJDwQk4OfWllGL/hLTDUP4J0SQPsb1nyq68=
Subject key identifier: 63:42:13:3C:1F:31:9C:AC:B9:BA:43:FD:64:AC:02:9C:05:8F:08:FE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2E49E33AE0D913070E675A0760EAF9E0B930B811
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
Signing time: Thu 20 Aug 2026 07:48:52 +0000
ROA not before: Thu 20 Aug 2026 07:43:52 +0000
ROA not after: Thu 19 Aug 2027 07:48:52 +0000
asID: 25198
IP address blocks: 2.57.18.0/24 maxlen: 24
5.182.109.0/24 maxlen: 24
45.137.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:49:e3:3a:e0:d9:13:07:0e:67:5a:07:60:ea:f9:e0:b9:30:b8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 20 07:43:52 2026 GMT
Not After : Aug 19 07:48:52 2027 GMT
Subject: CN=6342133C1F319CACB9BA43FD64AC029C058F08FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d6:fd:dd:bb:38:28:d9:6b:69:f8:4f:db:2a:
71:5b:7d:70:04:36:f6:0c:81:dd:0d:a9:e7:da:c4:
84:63:3b:34:db:83:ee:98:59:01:b9:3c:85:81:00:
01:81:9f:c7:9f:7a:98:57:80:6c:d0:50:c9:67:5d:
09:fe:76:91:03:11:4d:d2:14:f3:d2:26:43:4d:b1:
03:59:ba:54:98:92:74:4f:3f:dc:ab:72:22:ef:1c:
de:c0:8c:03:69:70:46:14:51:31:4d:bc:7d:f7:1e:
18:15:72:1a:a7:26:11:b0:d5:89:81:7f:3e:29:ba:
59:c5:c5:ab:ca:0c:4d:e5:9a:45:0c:92:5f:23:61:
eb:50:0e:4d:b8:b9:b0:ea:ae:ce:0a:14:2f:4c:26:
d9:34:82:3f:65:ef:e2:05:63:55:9b:9a:f4:f3:ba:
9d:91:16:49:08:2b:6a:3a:fc:bd:60:bd:c8:26:a8:
bb:ae:bd:00:de:6a:40:89:3a:a9:a6:e2:49:d4:53:
ce:de:53:d9:1b:3a:1c:da:ea:c1:a7:e9:09:c6:d4:
88:c3:8d:3d:c2:c7:73:c0:6b:01:5b:1d:c6:a4:b4:
f1:51:7f:b0:bb:be:47:df:6b:f4:e2:25:49:33:35:
0d:5e:dc:60:5d:7a:2a:10:8d:5f:67:7d:d3:82:ba:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:13:3C:1F:31:9C:AC:B9:BA:43:FD:64:AC:02:9C:05:8F:08:FE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
5.182.109.0/24
45.137.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ee:90:8e:84:10:cf:ff:23:e4:71:2a:33:60:7d:ca:35:89:
0b:3a:3a:7d:78:d9:76:2d:18:34:b6:7f:60:a4:c4:48:7b:4f:
e3:3f:9e:9a:c2:5b:3b:b1:30:fe:f8:44:4b:dc:b9:e1:ff:9e:
85:a8:3d:dc:48:f6:3c:8c:a6:74:42:23:e3:87:f9:3a:7b:88:
39:f1:b2:6a:e2:06:6c:4d:ae:61:88:8b:f0:a4:4f:01:f0:23:
89:bf:a1:e0:46:61:d6:82:7e:be:ee:58:fd:15:4f:59:f9:00:
03:2b:41:39:75:e6:a9:7d:93:88:6e:a7:4f:6b:bf:96:80:0c:
f7:ab:97:36:f5:97:e2:78:f4:ea:8d:7f:2e:aa:f3:7c:a4:47:
47:f5:14:79:dc:7d:ef:f8:f7:6a:35:35:f1:c9:65:29:ab:56:
ea:ed:c7:e5:fd:fa:86:72:09:43:56:8f:44:81:9b:60:5f:d0:
8e:6d:a9:00:4e:77:80:0c:88:2f:fb:d5:93:3f:12:c0:36:04:
12:70:7a:c9:aa:51:43:01:91:f7:eb:60:c3:64:84:48:b7:b1:
ea:e2:9a:36:44:cb:9c:ad:93:5d:59:b3:c0:d6:b3:4e:54:47:
1b:64:61:88:65:82:f2:d8:93:66:fa:21:85:ee:1f:f2:a7:d3:
7a:43:33:8c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIULknjOuDZEwcOZ1oHYOr54LkwuBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MjAwNzQzNTJaFw0yNzA4MTkwNzQ4NTJaMDMxMTAvBgNV
BAMTKDYzNDIxMzNDMUYzMTlDQUNCOUJBNDNGRDY0QUMwMjlDMDU4RjA4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1v3duzgo2Wtp+E/bKnFbfXAE
NvYMgd0NqefaxIRjOzTbg+6YWQG5PIWBAAGBn8efephXgGzQUMlnXQn+dpEDEU3S
FPPSJkNNsQNZulSYknRPP9yrciLvHN7AjANpcEYUUTFNvH33HhgVchqnJhGw1YmB
fz4pulnFxavKDE3lmkUMkl8jYetQDk24ubDqrs4KFC9MJtk0gj9l7+IFY1WbmvTz
up2RFkkIK2o6/L1gvcgmqLuuvQDeakCJOqmm4knUU87eU9kbOhza6sGn6QnG1IjD
jT3Cx3PAawFbHcaktPFRf7C7vkffa/TiJUkzNQ1e3GBdeioQjV9nfdOCup9JAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUY0ITPB8xnKy5ukP9ZKwCnAWPCP4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAACORID
BAAFtm0DBAAtiR0wDQYJKoZIhvcNAQELBQADggEBAGrukI6EEM//I+RxKjNgfco1
iQs6On142XYtGDS2f2CkxEh7T+M/nprCWzuxMP74REvcueH/noWoPdxI9jyMpnRC
I+OH+Tp7iDnxsmriBmxNrmGIi/CkTwHwI4m/oeBGYdaCfr7uWP0VT1n5AAMrQTl1
5ql9k4hup09rv5aADPerlzb1l+J49OqNfy6q83ykR0f1FHncfe/492o1NfHJZSmr
Vurtx+X9+oZyCUNWj0SBm2Bf0I5tqQBOd4AMiC/71ZM/EsA2BBJwesmqUUMBkffr
YMNkhEi3serimjZEy5ytk11Zs8DWs05URxtkYYhlgvLYk2b6IYXuH/Kn03pDM4w=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:48 2026 by rpki-client