Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: KY9wmoM+PnwwczfmNMtqtaX1jccPaIpH0GDkmQTLCcE=
Subject key identifier: 73:07:62:D0:25:04:20:C5:E0:A9:7E:D6:1F:4C:29:C8:0D:07:B8:B8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 71FD3CB5C27D26CB231950851705875D35B32955
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
Signing time: Thu 20 Aug 2026 07:48:52 +0000
ROA not before: Thu 20 Aug 2026 07:43:52 +0000
ROA not after: Thu 19 Aug 2027 07:48:52 +0000
asID: 25198
IP address blocks: 92.113.10.0/24 maxlen: 24
178.92.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fd:3c:b5:c2:7d:26:cb:23:19:50:85:17:05:87:5d:35:b3:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 20 07:43:52 2026 GMT
Not After : Aug 19 07:48:52 2027 GMT
Subject: CN=730762D0250420C5E0A97ED61F4C29C80D07B8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:dd:9c:fb:bb:eb:3c:51:e0:16:1b:0b:18:
5a:0b:80:1f:ab:3f:5e:10:53:6e:1d:40:f4:c8:c5:
c0:3a:fb:b5:66:da:d7:29:1b:7e:3c:64:b4:42:a1:
89:9e:52:3d:72:e7:f6:8a:65:17:8a:f7:fa:ef:25:
fe:03:86:90:11:f4:25:13:f3:25:34:4c:2e:fc:e1:
fa:56:44:3e:e5:fa:8d:89:ac:c1:3f:fa:cb:95:ea:
fc:58:13:87:e6:75:06:f7:1b:d5:a8:51:1b:51:f9:
45:49:5a:8f:86:7f:f8:97:d1:77:c9:0a:81:aa:2f:
b9:55:dc:35:0b:72:cb:4d:eb:20:e6:3c:d7:e3:f5:
da:93:3c:63:db:ea:b2:cb:24:07:23:e5:28:a6:6f:
0c:18:8a:61:d9:73:0b:6c:e4:e8:86:dc:55:dc:e2:
14:45:4a:a6:ca:79:20:a3:ca:30:17:b4:5e:94:e7:
72:a0:52:68:64:c0:43:c0:c9:af:9f:5e:a7:83:94:
87:f3:5b:ba:d9:95:51:d1:c6:8b:32:19:a4:6a:ee:
43:68:7f:a0:bf:74:7a:68:dc:43:3c:d1:e7:d5:28:
6b:a5:41:dd:76:8f:e5:77:1e:37:ef:30:72:03:bb:
69:6e:b7:a9:f4:2f:2e:e5:fc:f3:de:f2:14:c2:de:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:62:D0:25:04:20:C5:E0:A9:7E:D6:1F:4C:29:C8:0D:07:B8:B8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.10.0/24
178.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1a:19:23:cc:09:a7:ab:4a:57:88:12:c9:49:fa:15:68:6c:
15:ed:53:ee:d1:81:89:11:68:c7:2e:25:6f:62:3d:5c:44:7e:
88:ad:f5:ba:4a:2f:36:71:13:3c:27:07:48:48:2d:0b:b8:47:
f9:d2:c0:1e:c1:d6:d7:3c:be:ac:49:ad:8a:4a:0f:0f:d0:a0:
37:bc:05:be:17:8e:0f:5c:9b:48:c1:08:5e:ce:82:98:b3:1c:
a5:18:77:e1:3c:f8:fc:a7:f5:33:62:20:cd:0d:da:b5:4d:95:
84:63:95:97:2a:55:e0:70:5b:f0:78:46:27:1a:66:16:d6:4a:
81:8b:40:28:3c:d5:07:be:c3:42:07:9a:83:99:9c:cd:85:c9:
a4:aa:78:ea:d2:50:48:93:e9:63:58:87:ec:9e:b8:cf:a9:61:
80:d0:1e:a6:b3:94:5b:d7:f3:aa:f5:2e:ae:69:93:8c:c0:4e:
ec:ce:fe:ae:d6:3a:a2:1a:82:f3:c2:3b:70:21:e2:db:89:a5:
3a:92:e7:e1:d8:a5:06:91:8c:1b:73:36:c0:c1:4a:a2:68:24:
1f:e6:a7:71:db:20:e9:c7:0c:5c:34:ea:3a:66:9b:bc:f0:08:
dc:bd:61:cd:35:e0:a3:84:34:01:e5:d4:1a:16:22:56:54:a5:
cb:14:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:36 2026 by rpki-client