Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: T3AaHLW4+x+arrlOpFmttgbhXRPzXjAfnmMzS5LpFPg=
Subject key identifier: DC:76:EB:95:D4:CA:27:B0:07:6B:E9:89:B8:8A:51:3E:8E:4E:F2:6C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13715FA9167CBB73FC6BAD013891C28F781239A7
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
Signing time: Thu 16 Jul 2026 15:15:20 +0000
ROA not before: Thu 16 Jul 2026 15:10:20 +0000
ROA not after: Thu 15 Jul 2027 15:15:20 +0000
asID: 25198
IP address blocks: 193.5.11.0/24 maxlen: 24
193.29.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:71:5f:a9:16:7c:bb:73:fc:6b:ad:01:38:91:c2:8f:78:12:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 16 15:10:20 2026 GMT
Not After : Jul 15 15:15:20 2027 GMT
Subject: CN=DC76EB95D4CA27B0076BE989B88A513E8E4EF26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:c5:17:07:7e:de:38:bc:e6:6b:8e:b2:39:
f7:b2:4e:67:1e:07:c6:f8:49:14:c2:90:2a:7e:d8:
10:91:a1:61:44:4e:94:47:5b:6f:55:bd:d1:15:7d:
3c:70:dd:d6:6c:21:43:d3:93:0e:2d:49:e5:da:94:
00:6a:9d:9a:b8:f9:6b:9b:50:e1:88:5b:b4:87:de:
9c:64:8b:08:4e:e5:dc:b7:c9:d3:60:b2:36:63:50:
36:f0:9b:5e:ac:80:47:46:11:33:4e:ff:fe:5a:1e:
85:f3:36:14:39:3d:7e:8d:c5:65:4d:f7:b9:33:db:
20:1b:c5:16:49:f3:c4:21:01:b5:04:52:47:6b:aa:
70:bb:64:82:b6:6d:4e:90:29:fc:bc:b3:cc:29:b2:
2f:e3:68:60:23:56:d1:c4:51:de:3c:3e:1d:9b:5c:
83:6d:f7:35:8c:56:a0:10:eb:43:12:64:5d:ef:bf:
24:cd:c3:df:3b:78:c8:be:6e:86:a2:d5:29:4e:a0:
cb:78:f4:04:f6:d2:79:3a:72:6f:46:97:2b:22:e7:
a1:ba:18:0b:1f:6c:5f:21:f0:4e:5e:3a:0c:f3:06:
cf:d4:c3:51:28:af:99:3e:fe:f7:c8:01:69:ce:e7:
61:9d:1a:1f:82:23:ad:c7:d6:ef:2b:40:c2:d1:15:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:EB:95:D4:CA:27:B0:07:6B:E9:89:B8:8A:51:3E:8E:4E:F2:6C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.11.0/24
193.29.98.0/24
Signature Algorithm: sha256WithRSAEncryption
99:84:80:80:b2:37:05:8f:59:a9:56:35:35:5b:3b:3f:7a:da:
24:01:33:61:38:4f:03:16:41:91:3f:87:0d:07:02:e0:b4:57:
41:c4:6b:f5:ba:da:8b:2e:68:c4:e8:2c:08:47:66:8e:8a:46:
81:76:2c:c2:3c:54:44:78:87:0a:38:c6:85:65:2f:74:94:09:
cd:0c:7a:55:2d:a6:cf:da:0f:23:82:69:0c:3b:0d:03:77:c1:
33:ab:65:ed:dc:89:d6:79:d2:dc:98:c1:d1:3c:b6:3b:ba:d9:
bf:b1:2b:a0:f4:03:ab:5d:0d:b1:9a:39:74:82:11:e9:f8:ca:
a7:e6:88:d9:86:d6:d4:43:9c:76:7d:df:da:50:c4:40:50:07:
a9:1f:8b:c2:2a:b0:20:da:16:24:b8:b1:01:b2:2e:66:a2:f2:
18:10:0f:43:3f:f0:47:9e:17:56:c8:15:96:6a:90:cf:10:09:
94:90:ba:1b:c6:af:c9:66:60:64:f1:0e:74:01:21:7d:75:12:
ba:fc:6c:f3:cb:4b:fc:e9:40:62:4c:f8:25:e9:bc:d0:bc:ac:
0a:29:79:65:76:5b:01:0d:fe:6d:29:bf:6e:be:ac:11:6f:f6:
ec:ef:e3:cb:86:6d:e5:b2:84:c4:00:f7:9e:41:9e:d9:ee:54:
2c:e2:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:41:31 2026 by rpki-client