Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: tTKRJusuQe4xQtaDnuNeG+wN1RC4B+Zlh7cyxQZG4tg=
Subject key identifier: 7F:6A:F5:24:C7:F0:CD:DB:80:66:5A:27:5A:70:F5:F9:EF:7D:5F:9A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5D664215710E93DF579CC5B9F6B5810993D5B176
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
Signing time: Mon 19 Oct 2026 23:55:26 +0000
ROA not before: Mon 19 Oct 2026 23:50:26 +0000
ROA not after: Mon 18 Oct 2027 23:55:26 +0000
asID: 25198
IP address blocks: 178.83.111.0/24 maxlen: 24
178.83.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:66:42:15:71:0e:93:df:57:9c:c5:b9:f6:b5:81:09:93:d5:b1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 19 23:50:26 2026 GMT
Not After : Oct 18 23:55:26 2027 GMT
Subject: CN=7F6AF524C7F0CDDB80665A275A70F5F9EF7D5F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:0d:53:bb:2a:79:6d:19:f3:f6:54:22:52:
e9:26:7c:0f:7c:5d:fb:4f:9c:2d:82:a1:44:df:f4:
2c:b8:c8:d0:17:cf:93:c9:fe:74:c3:37:57:f7:dd:
3e:ea:7f:d3:64:8d:2b:e3:e7:e6:15:73:7f:b1:60:
a3:91:39:c0:a4:a5:e2:71:31:0b:1e:ab:c7:ac:be:
3e:5c:f5:f8:6c:33:77:26:fc:0c:93:20:f8:df:0b:
09:22:07:3b:30:1d:cf:18:1f:29:a0:c9:b9:ef:17:
d6:9b:fb:0a:f7:fe:ab:8d:26:38:eb:d7:84:83:12:
01:d8:4f:eb:af:f5:f4:15:a4:d1:c7:54:a4:1b:90:
48:2d:54:c9:83:05:e1:a2:22:93:15:a5:3a:8e:33:
1e:e8:32:ee:00:e1:9e:20:91:c4:18:bb:25:76:e0:
76:9f:3a:c1:37:62:00:07:82:e0:29:91:e7:7b:98:
fe:f3:d5:21:b8:c6:4d:33:fe:c2:10:9f:3d:66:17:
47:15:d3:3b:d8:8a:bc:c2:28:db:cf:46:da:c8:b0:
ed:7d:4a:19:3e:a9:fc:d1:93:d8:28:42:49:94:00:
ad:04:43:30:09:62:aa:2d:74:9a:58:ba:d4:6d:cd:
5f:c0:0d:f3:79:9d:d5:ef:61:22:5d:b7:e6:24:3d:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:F5:24:C7:F0:CD:DB:80:66:5A:27:5A:70:F5:F9:EF:7D:5F:9A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.111.0/24
178.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:00:13:15:cc:be:94:82:4c:89:5e:0b:5b:75:e1:9a:32:
2a:b8:ee:5f:99:89:d2:d9:c7:c7:7a:21:0e:60:77:aa:3a:e1:
91:05:c1:57:87:69:36:50:40:f6:7b:a0:18:bf:2a:6a:40:db:
82:83:8f:12:a7:cb:c5:00:54:9b:9a:19:33:05:71:86:36:ec:
18:61:d6:d8:c1:00:7e:74:1a:9b:38:6e:10:5e:a8:dd:39:86:
8e:6a:ca:18:1b:e6:5b:4b:8b:a9:ec:f7:00:4b:15:cb:5b:d2:
2a:6e:b1:85:84:9c:88:bb:eb:f7:62:43:d0:32:4d:9c:e6:eb:
c0:52:51:8a:a6:92:0d:cc:3d:48:4e:f5:22:2e:b2:c0:b9:cf:
77:0d:f8:9f:46:b3:7d:0c:23:cf:51:f0:d4:c4:c1:73:76:bd:
b9:e9:5b:ca:1c:71:68:21:28:ca:12:21:5d:a6:c3:04:35:3b:
09:d1:4f:40:7f:15:5c:64:7b:50:92:f2:07:05:28:1d:df:6b:
db:cf:9d:2e:33:72:59:68:7e:57:c3:0a:c5:f0:3d:b4:d5:73:
cf:97:3d:06:f6:46:55:8f:b8:bf:23:75:20:9a:08:f5:55:ec:
dc:f1:99:8f:5b:85:75:47:c2:0f:6a:92:8d:b7:c0:ff:34:38:
76:da:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 13 01:00:39 2026 by rpki-client