Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: Kg+t2WJpoZUtODe5P6ggSOv/+3DXigv0RiqloidefHY=
Subject key identifier: A0:2E:23:61:6D:6D:37:24:81:71:A8:3C:0C:7B:7C:84:55:7C:85:F6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A9F54C1D4122BBFBD3CB282F77802A3B013FCA6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Fri 06 Nov 2026 09:51:25 +0000
ROA not before: Fri 06 Nov 2026 09:46:25 +0000
ROA not after: Fri 05 Nov 2027 09:51:25 +0000
asID: 25198
IP address blocks: 155.117.180.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9f:54:c1:d4:12:2b:bf:bd:3c:b2:82:f7:78:02:a3:b0:13:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 6 09:46:25 2026 GMT
Not After : Nov 5 09:51:25 2027 GMT
Subject: CN=A02E23616D6D37248171A83C0C7B7C84557C85F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:1a:9b:70:3e:3c:58:f7:c5:19:29:80:e9:
39:47:dc:da:5e:21:94:38:e7:38:2a:de:e6:26:ec:
1f:9d:2b:ce:d3:5e:8e:93:98:30:44:e8:fc:8e:74:
38:19:e2:08:6a:f8:2d:c1:5b:4e:8a:1e:ac:62:a9:
22:cb:72:8f:97:65:fa:50:48:0b:06:7d:ca:a9:42:
29:40:76:56:7a:4d:cb:ae:ac:65:24:47:b3:af:c2:
70:e1:d1:13:a3:2a:de:1e:cd:3b:9b:4f:72:f7:66:
3f:95:b6:43:f9:3c:72:af:df:89:a9:95:8e:09:e8:
7f:cd:23:6b:7d:8b:de:bb:4e:3d:64:30:a8:ee:be:
14:23:12:b7:7f:3e:ee:13:3f:1c:26:0b:4e:02:c3:
73:95:4c:49:60:8f:96:90:4a:c3:3e:ff:f6:a1:d7:
67:b1:2f:88:11:20:3c:60:20:aa:a2:74:56:d2:41:
ff:d9:e0:a8:fb:5d:ca:d6:4e:d0:68:89:97:21:29:
cf:6f:29:86:2e:20:64:44:fe:b4:69:b3:e1:45:d9:
12:c9:92:e5:69:9f:a0:2a:03:d9:08:bc:7b:a8:2e:
58:40:f8:a1:c4:7d:9c:9a:80:e2:da:af:e1:df:bc:
00:9d:43:ae:e8:e4:88:a0:9a:cc:29:bd:5a:73:a0:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:23:61:6D:6D:37:24:81:71:A8:3C:0C:7B:7C:84:55:7C:85:F6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.180.0/24
162.141.80.0/24
162.141.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:79:13:6c:d0:f4:dc:31:ad:f9:ae:ad:31:26:47:8b:d7:32:
0b:af:75:99:42:dc:75:e9:3c:bd:71:a5:a4:e7:2f:02:c7:50:
13:9e:93:44:ca:ff:66:a5:0b:d8:41:67:28:78:4c:bf:a0:20:
9b:88:bb:4d:e4:ab:17:25:1a:a7:88:2b:a4:8f:58:be:03:2c:
86:e0:b4:54:2f:52:76:4e:64:e4:7a:f1:01:43:42:4b:50:00:
cb:87:ee:14:7b:ba:14:e2:23:f9:af:06:8e:c2:e6:b4:74:17:
98:de:18:0e:2a:56:90:bb:d5:1c:fa:58:4d:d7:6e:6a:5d:aa:
88:89:d3:01:69:c6:2b:07:0e:92:86:7b:1f:01:81:60:1e:43:
df:48:65:2c:7c:65:63:29:62:64:ea:e2:c5:64:1e:c3:52:33:
1c:48:d7:1f:1e:fd:00:4e:0e:bf:0d:bd:4a:43:6b:7e:cd:d6:
d8:a3:bb:3e:f3:12:2a:2f:79:01:83:d3:f9:4c:3f:1b:3c:7d:
14:b2:c2:4d:a1:f7:e1:cd:33:2e:90:e1:3b:d1:dc:67:e1:01:
29:3b:f6:f6:70:76:ae:41:f7:da:a9:9b:8d:1c:02:cc:51:fc:
d3:3f:a6:eb:53:d6:2f:60:45:d5:1b:32:08:c7:43:fa:7c:3a:
47:64:d9:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 13 01:00:33 2026 by rpki-client