Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: ZQiDPE0J9DBgfDnntIMs/dCMa+GVMtOx+4hEP9HJ6Qk=
Subject key identifier: DC:2D:D9:98:E5:0A:27:23:61:C5:81:AF:F1:69:3C:3D:A2:A1:F8:43
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1757F2349D32378AC4D09268474FA5E38DBDD144
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
Signing time: Thu 15 Oct 2026 19:43:17 +0000
ROA not before: Thu 15 Oct 2026 19:38:17 +0000
ROA not after: Thu 14 Oct 2027 19:43:17 +0000
asID: 25198
IP address blocks: 185.139.3.0/24 maxlen: 24
185.145.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:57:f2:34:9d:32:37:8a:c4:d0:92:68:47:4f:a5:e3:8d:bd:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 19:38:17 2026 GMT
Not After : Oct 14 19:43:17 2027 GMT
Subject: CN=DC2DD998E50A272361C581AFF1693C3DA2A1F843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:5e:92:5f:75:04:8e:f6:b1:4c:e6:f7:c2:
7a:2a:47:56:96:8d:6c:3e:b3:4d:6f:6c:38:ee:a8:
e6:f6:ae:ba:81:f0:df:d0:d1:41:77:c8:e6:05:48:
b6:e1:aa:8a:b8:81:76:73:ce:b1:f4:e3:9e:0e:cf:
4a:dd:41:cf:ea:e2:e3:7a:1f:b5:9e:70:ce:88:d0:
ca:9e:40:fb:43:b3:b7:51:8f:2b:f9:9c:ca:06:59:
9c:8b:40:17:05:9b:c5:51:ff:97:ed:aa:00:5a:c8:
88:07:59:3c:5e:13:26:ed:cc:36:a4:35:cb:09:2d:
4e:94:1c:6f:a9:24:44:36:b0:ab:ff:47:45:40:ef:
d6:ad:ae:7e:ef:76:ad:b4:06:c9:75:5f:7c:51:53:
e8:2a:a4:03:be:91:d9:89:c8:63:c5:99:95:d4:7c:
39:c3:9c:e9:8b:de:fd:73:ce:bf:5e:68:aa:48:40:
dc:cb:3c:5c:e0:26:82:d9:92:ad:fc:c4:a1:65:02:
13:c7:f6:e2:45:24:a6:b2:da:52:91:0e:f3:25:99:
23:0d:9c:6e:f2:ca:6b:56:33:4a:93:35:56:57:0e:
8d:81:ed:40:3d:4e:c9:09:d0:e5:12:fa:e2:32:b2:
69:26:1d:3c:f1:c1:9c:18:0a:b3:e5:60:7f:0f:07:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:D9:98:E5:0A:27:23:61:C5:81:AF:F1:69:3C:3D:A2:A1:F8:43
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.3.0/24
185.145.37.0/24
Signature Algorithm: sha256WithRSAEncryption
06:76:90:60:48:42:69:08:ab:58:e8:57:2f:95:a5:e1:c1:68:
45:52:07:d6:ef:21:0c:57:89:a7:68:aa:2f:81:24:01:6f:93:
21:06:55:f9:6f:3c:1c:76:c8:2a:49:50:76:b2:de:44:eb:f0:
ec:d2:19:e7:6a:82:fa:ae:6a:aa:b8:82:f8:88:4a:2b:08:e1:
92:6a:b8:9f:1c:b8:dd:05:4d:f9:72:21:f6:f7:d0:ee:4f:84:
ba:3f:c9:e2:a7:7d:f1:ac:ed:7d:ac:a1:9c:71:71:da:5f:5b:
92:c5:88:79:64:f7:6f:1a:7a:10:72:37:18:32:e1:02:75:e8:
b8:2e:6d:fb:1c:4d:89:f1:10:b6:dc:e2:29:0c:a6:fa:ca:86:
cb:cd:36:31:64:0d:86:d2:34:04:1d:f3:7f:93:6d:1b:da:e7:
89:70:ba:16:3b:19:f4:41:a9:14:13:d6:b9:1f:fe:7f:ac:18:
5d:4a:b1:ab:46:7a:8d:9b:b5:b0:c5:66:fa:5f:86:35:3a:93:
7d:ac:1e:37:cd:31:d2:cb:8c:6b:f1:8e:12:f0:23:22:93:06:
2f:16:b0:d0:7b:86:89:63:71:a7:39:43:47:00:c3:e4:33:95:
06:ef:df:b4:22:f7:e3:c5:8a:b5:a8:cf:f4:ef:af:10:77:3e:
d4:c3:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:18 2026 by rpki-client