Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: h4upG8bsYaBTvkH8MT2Xi+gm9CztwiU86wlIV5JBPY4=
Subject key identifier: 95:39:C9:94:B3:21:33:B4:FE:D0:4D:14:77:DB:79:5B:DA:16:99:B1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6C86F9DA21B7BE2B22A742D1AB9A2BA37C9797C7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
Signing time: Thu 23 Jul 2026 08:07:55 +0000
ROA not before: Thu 23 Jul 2026 08:02:55 +0000
ROA not after: Thu 22 Jul 2027 08:07:55 +0000
asID: 25198
IP address blocks: 140.233.167.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
147.79.19.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
162.141.68.0/24 maxlen: 24
162.141.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:86:f9:da:21:b7:be:2b:22:a7:42:d1:ab:9a:2b:a3:7c:97:97:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 08:02:55 2026 GMT
Not After : Jul 22 08:07:55 2027 GMT
Subject: CN=9539C994B32133B4FED04D1477DB795BDA1699B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:64:17:5b:93:9d:b2:de:2f:95:96:56:d3:
27:7f:81:d3:96:7f:6b:cb:71:b2:82:41:16:e8:7c:
ac:19:fc:6d:a4:fa:6d:53:cd:e4:82:bb:b9:6a:21:
bc:5f:5d:8f:2e:92:59:e1:24:43:78:6f:10:09:29:
52:0f:b8:4e:bb:f8:13:f2:7f:e1:09:dc:a5:81:c1:
f2:29:39:99:88:08:63:32:3e:99:03:86:9f:2f:b5:
e1:a9:2d:17:b3:69:06:4d:bc:11:ca:50:31:8c:6f:
a3:84:36:eb:73:91:37:3d:fb:03:d8:be:a7:e1:d6:
45:ff:15:06:7d:c4:15:1c:e4:9f:d7:54:52:bd:88:
a7:76:74:90:7b:01:c0:ea:22:56:b2:40:1e:c8:8f:
80:91:1f:8b:48:f3:13:0c:02:25:e4:ac:61:fc:9e:
fe:74:b9:d0:a2:5e:1a:0e:7c:4b:c1:39:11:9d:bf:
dc:42:0f:c5:5a:ad:91:c3:2b:c1:87:b7:cc:eb:e6:
81:50:66:a5:13:77:2f:d5:bd:31:c9:13:16:93:77:
24:ba:4f:3e:91:bc:53:94:5a:41:96:12:97:38:9f:
a3:2e:80:8d:83:9f:d3:a6:39:ca:36:2c:fa:be:0c:
88:44:6c:57:82:32:40:be:19:ba:1a:7e:a3:0d:39:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:C9:94:B3:21:33:B4:FE:D0:4D:14:77:DB:79:5B:DA:16:99:B1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.167.0/24
140.233.184.0/24
147.79.19.0/24
147.79.56.0/24
150.241.136.0/24
162.141.68.0/24
162.141.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7a:cf:e7:e7:1a:78:aa:36:62:fa:49:5e:50:b6:97:26:3a:
77:d2:ca:c1:22:87:b2:ac:52:7e:8c:d3:92:f3:01:8e:35:c2:
21:4f:97:32:5e:38:e1:9c:3f:a7:ff:47:c5:f4:90:78:3f:76:
15:b6:44:86:b9:7b:bd:ff:56:de:f2:71:52:f9:83:d2:e1:59:
ff:de:3d:a9:1e:67:c5:15:69:72:55:36:2d:7a:c4:ab:85:40:
1c:a2:86:37:0e:e3:f9:e7:a3:66:9a:59:78:d1:4d:74:65:a7:
49:77:ca:04:24:a2:cc:c8:bd:7b:e2:53:5e:12:3a:5d:de:ef:
03:54:aa:7e:7a:70:84:fe:e9:b0:63:e9:9c:c5:3d:3d:97:b5:
66:4d:a7:33:4f:8f:59:97:0b:71:d7:a2:c5:7e:18:fc:e0:50:
c8:c7:2e:ab:64:37:82:c1:45:5d:34:47:9d:61:07:0e:e1:7f:
d3:63:62:4b:6f:db:ea:13:7d:6a:eb:08:ca:3d:f5:e5:c3:a4:
e6:20:43:72:a9:a7:ac:af:47:46:b7:d3:11:fb:7a:38:31:97:
ea:fd:97:1b:6e:45:96:09:49:da:71:a8:4f:77:e0:e4:9f:82:
61:2d:2b:6c:62:1c:de:dd:78:34:1d:76:b6:7c:35:2f:63:2a:
06:5e:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:04 2026 by rpki-client