Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: PFnyGJqWTPQ/wKiL20Uhsw6XE7G0J3YT40wfGj6oFUA=
Subject key identifier: 80:09:47:8F:27:99:37:87:B4:03:24:F2:84:17:E7:B4:3E:4D:BB:3A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 44A801FD55A8366967E894DDBF8FC501A3AD8BD2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
Signing time: Tue 07 Oct 2025 09:09:04 +0000
ROA not before: Tue 07 Oct 2025 09:04:04 +0000
ROA not after: Tue 06 Oct 2026 09:09:04 +0000
asID: 25198
IP address blocks: 46.203.180.0/24 maxlen: 24
95.134.7.0/24 maxlen: 24
178.95.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a8:01:fd:55:a8:36:69:67:e8:94:dd:bf:8f:c5:01:a3:ad:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 7 09:04:04 2025 GMT
Not After : Oct 6 09:09:04 2026 GMT
Subject: CN=8009478F27993787B40324F28417E7B43E4DBB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:79:74:c6:01:52:6b:51:50:83:e9:a9:36:
de:30:26:3a:ea:9e:8f:e6:31:2b:dd:40:dd:3f:49:
3e:eb:3d:12:52:f9:63:9c:f8:65:55:c5:72:d6:1c:
6b:2b:e6:c5:6f:a6:65:6a:08:c9:ea:7b:f0:3c:07:
c4:6c:58:38:6d:91:65:71:11:1a:68:53:49:39:32:
c4:05:da:ad:fa:57:27:c9:47:e6:d5:b4:8f:6a:a1:
92:c0:52:4c:5c:d7:35:a2:50:98:33:bc:03:97:9b:
9a:57:ff:ad:01:ea:96:6b:a8:47:90:e3:e6:0b:51:
3c:39:29:d5:63:0c:a3:92:48:93:5c:5f:29:ac:f1:
76:12:87:5b:05:bb:1e:1e:b3:e6:e0:5a:91:2f:cd:
7d:66:58:62:21:8a:0a:a0:3d:2a:a8:d1:e9:41:cc:
3a:11:08:af:95:e3:0e:e1:5b:1e:33:07:f3:57:b3:
af:c6:09:1a:40:0c:b1:28:5a:25:2a:7e:cd:59:e8:
c9:44:a2:b3:08:f4:96:ed:87:c6:fd:1d:b9:89:4f:
fb:98:b9:02:f0:d4:08:f5:78:42:9a:de:35:68:39:
dd:da:1e:f4:3e:c5:65:fb:69:7a:d9:6d:f6:d2:f2:
31:da:28:f6:70:07:8c:f4:17:94:93:2d:0c:34:6a:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:47:8F:27:99:37:87:B4:03:24:F2:84:17:E7:B4:3E:4D:BB:3A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.180.0/24
95.134.7.0/24
178.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
20:23:1b:87:1d:da:5e:8a:1e:7d:ff:ff:95:1e:d4:55:19:bd:
2e:46:e9:07:2b:f0:dc:0a:41:60:86:26:80:d4:de:2c:77:c6:
8a:d6:fa:67:f5:f0:4b:6c:ed:1c:b7:c3:52:5b:ea:2a:6e:a6:
81:44:59:4a:2b:52:11:b3:1d:98:f4:71:9b:6b:b9:2a:b4:39:
23:b1:2c:db:f7:85:5a:83:e1:8b:cb:68:06:71:1e:24:8d:5b:
5b:90:ae:6c:5d:71:b5:49:fe:5d:6e:c3:d4:74:c8:90:35:6b:
b5:b0:a7:98:c8:16:25:41:12:b4:c2:51:5c:7c:d6:f7:66:19:
5b:56:67:fe:15:7b:91:33:a6:2a:4c:b2:70:76:78:c3:96:92:
9a:68:a3:52:00:19:88:8c:9b:6c:68:1e:f6:a0:48:24:16:a6:
41:79:af:5b:e1:f5:56:2f:df:96:80:cb:4e:ef:a8:f8:eb:c6:
8d:ee:0b:aa:23:18:d9:21:5b:4a:9f:16:8c:7f:f3:b3:08:e4:
21:48:21:aa:fd:b7:f1:10:1b:11:6a:7f:13:00:a4:30:e6:ef:
8d:94:0b:1c:8f:50:5b:e5:bf:a7:00:90:19:66:31:c2:3a:ec:
93:a9:a4:48:10:4c:f5:3f:b1:d2:0f:98:cb:eb:6e:f0:ce:46:
6e:c9:18:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 16 21:27:48 2025 by rpki-client