Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: +fHWB49XYuoIoErwg+uxEXCW5Yaj5I7fNxveXtAp/gI=
Subject key identifier: 42:3C:14:18:E5:36:DD:51:29:26:74:D5:70:73:02:75:D2:78:46:96
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 459182397B7706098E533E0F6A5437317E6E02C2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS25198.roa
Signing time: Wed 30 Sep 2026 15:34:40 +0000
ROA not before: Wed 30 Sep 2026 15:29:40 +0000
ROA not after: Wed 29 Sep 2027 15:34:40 +0000
asID: 25198
IP address blocks: 141.11.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:91:82:39:7b:77:06:09:8e:53:3e:0f:6a:54:37:31:7e:6e:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:29:40 2026 GMT
Not After : Sep 29 15:34:40 2027 GMT
Subject: CN=423C1418E536DD51292674D570730275D2784696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:1d:a0:30:07:82:b7:67:94:b4:d2:76:4e:
cb:e1:1d:6b:cd:ac:c5:46:3f:9b:be:9e:97:cf:81:
6b:be:06:b8:3c:c6:ad:31:21:be:aa:21:81:3d:1b:
9d:bf:80:a9:94:3c:17:40:cf:1f:3a:af:21:f4:af:
bb:b8:87:11:38:19:93:b5:57:ea:8a:35:df:ca:6b:
5e:32:9a:27:0f:61:67:7a:cc:79:9d:af:a0:c4:9b:
fd:f0:ee:7d:fa:b7:0a:ca:3e:25:39:be:53:2f:9d:
92:1c:c5:c4:f2:63:af:fb:bb:db:1d:44:bc:53:f6:
7f:8f:cf:be:2c:bf:b0:1b:61:a0:f4:28:f8:62:a5:
c1:04:8d:18:62:b8:46:74:dc:78:0a:27:ee:32:5d:
ef:ee:5a:e0:4f:40:9c:4d:66:1d:60:94:09:42:9e:
b4:81:ff:f4:c1:c2:47:ce:98:18:6c:57:6a:b3:97:
b5:66:43:1c:0a:5b:64:d7:40:49:a5:ee:8d:86:ec:
92:df:73:17:69:ae:50:f5:88:3a:63:f7:3f:ca:08:
3e:4b:19:d6:79:43:a9:e1:5d:07:d6:2c:51:6a:6e:
fb:17:39:15:84:cf:2f:dc:74:fc:16:65:c0:2b:a7:
17:60:3b:90:5d:16:8d:da:1d:01:6d:be:7a:b7:fb:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:14:18:E5:36:DD:51:29:26:74:D5:70:73:02:75:D2:78:46:96
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.157.0/24
Signature Algorithm: sha256WithRSAEncryption
62:66:89:fa:00:a8:91:d3:6e:25:97:08:87:1d:8a:3c:5f:c5:
3f:eb:e2:14:62:aa:81:8b:cc:4c:ee:3f:72:88:27:ac:50:85:
eb:82:28:ec:09:5a:d6:a2:21:d1:88:7e:3b:ab:90:ca:5a:91:
ea:df:c1:58:7b:95:17:b2:49:6e:85:ff:20:8c:4c:e1:cc:c5:
e5:2b:14:2a:31:8f:28:12:18:12:4c:c0:6e:34:55:7a:84:d3:
a9:ab:62:bc:bd:6f:87:ee:c1:e7:12:9c:f4:ad:aa:81:72:86:
7a:4d:cf:f7:d6:e4:b5:a3:e5:17:f8:0a:dd:10:27:b6:72:02:
6d:a4:90:f1:2f:7d:1b:25:4d:7b:71:60:75:35:3e:73:6a:5a:
a1:c6:21:15:d2:77:c1:df:55:7b:4c:3d:14:6a:31:05:ea:49:
55:93:10:1a:72:33:a3:b1:3c:63:32:51:4a:88:6e:ac:8a:d8:
1c:8e:8b:5a:e9:9d:db:10:e0:e8:18:02:e7:c6:4d:63:e1:08:
a1:ed:57:f8:1c:b4:2a:09:00:bc:55:58:30:68:fe:92:a8:7f:
79:8d:db:2a:bc:a4:81:92:4c:ea:13:65:48:1b:f6:f8:df:45:
fd:49:f9:7b:af:c7:be:e7:87:5a:e2:2b:ac:42:91:57:cf:ed:
d2:b5:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:05:15 2026 by rpki-client