Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: wl/FbUqtQqAwmXUbHj3XjcrvGNG1/7MRiC+/KJmjLJc=
Subject key identifier: E6:AF:FA:0B:C5:F2:09:E8:0A:95:CB:2D:59:EA:6F:B5:C3:89:CD:86
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 15849B8CC944C831BE34B2D631F31E3B4611CA4B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
Signing time: Sat 18 Jul 2026 06:44:39 +0000
ROA not before: Sat 18 Jul 2026 06:39:39 +0000
ROA not after: Sat 17 Jul 2027 06:44:39 +0000
asID: 25198
IP address blocks: 178.83.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:9b:8c:c9:44:c8:31:be:34:b2:d6:31:f3:1e:3b:46:11:ca:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 06:39:39 2026 GMT
Not After : Jul 17 06:44:39 2027 GMT
Subject: CN=E6AFFA0BC5F209E80A95CB2D59EA6FB5C389CD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:8c:b7:7e:b8:90:ac:89:cb:b2:05:e1:0a:
92:0c:a9:11:e0:fa:d6:b9:5b:d5:29:9b:85:cf:35:
75:6b:ac:72:2d:27:60:71:6b:8f:c9:2e:c1:ba:c2:
87:fe:59:dc:db:ec:69:66:f3:c1:de:d5:60:ec:b7:
80:13:30:76:a2:9b:37:a1:d3:0a:5d:29:c4:2c:86:
1b:1c:43:2e:59:1c:a4:dc:2f:5c:e0:fa:fa:70:49:
8b:e9:49:39:c4:4d:96:91:c7:17:d3:1f:52:ba:2f:
7b:87:bd:43:4d:59:56:25:7b:f4:ae:30:f4:52:ef:
58:bc:82:40:89:3e:a0:be:ab:cc:20:7d:8d:06:55:
77:52:bb:3b:96:c8:2f:e0:eb:ba:6a:df:5f:4d:87:
07:36:87:61:e9:89:6e:90:d1:24:4f:d6:ce:1d:c9:
6f:73:7c:e1:fb:fd:de:5b:60:92:4f:fe:26:62:11:
f1:9b:b1:a0:27:e4:dd:1f:54:bb:79:52:01:df:19:
2f:12:8b:e2:61:7f:af:28:5e:23:3a:66:8b:86:21:
b5:84:51:75:8a:07:ac:a7:a0:e1:56:09:d1:4d:ac:
60:ef:45:d5:81:23:6d:05:a4:d9:bf:4c:84:75:38:
b9:13:c7:9b:8c:29:4d:47:44:10:83:cd:dd:11:62:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:FA:0B:C5:F2:09:E8:0A:95:CB:2D:59:EA:6F:B5:C3:89:CD:86
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3b:cb:9d:f5:32:50:54:16:7e:7a:65:e0:ef:6f:e9:42:aa:
53:0c:fb:3d:55:48:af:21:0c:39:65:25:0b:50:7c:0c:4e:ee:
59:7c:a5:ff:12:66:a7:fb:63:5d:c7:15:4f:67:a8:09:5b:b0:
f8:59:74:3d:a4:3a:31:d7:2b:e2:78:25:6f:fc:f9:ee:eb:50:
f1:b5:e0:79:bc:e6:c5:12:c1:e3:c3:ea:d4:8c:7a:8a:37:ad:
27:18:93:6b:a2:dc:46:33:5e:54:37:2b:ca:5a:1e:f4:7a:81:
08:fa:80:54:f1:28:47:8a:f0:27:0f:55:81:64:54:8b:cb:e9:
3b:0d:22:fc:70:40:c4:b3:37:7f:33:49:59:e3:70:58:fa:1c:
13:3d:58:12:d5:5d:0c:79:82:7d:68:d2:35:cd:50:1c:48:c2:
98:67:d1:66:1d:f4:c8:65:1d:8d:14:4f:88:91:8f:5e:ff:a7:
5b:6b:0f:ba:42:e1:4d:ab:b6:19:10:6e:ed:1d:75:15:30:ca:
bb:26:16:92:35:46:f4:2b:13:67:d7:48:24:b8:f0:7e:79:68:
00:a4:61:62:44:3f:1c:89:82:f2:b8:be:10:0c:99:5a:ea:c8:
61:12:a3:69:60:13:0c:f8:75:ff:91:34:72:a4:2f:ef:8d:ed:
9d:55:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:56:37 2026 by rpki-client