Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: ho2wuC3SwJbCB528ejvG4ki/Wj23ScvhaQ4kYucowfc=
Subject key identifier: BA:2C:10:33:8E:02:BF:71:2F:2B:A8:56:1A:F3:E5:BA:93:CB:88:12
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0CF994569D7CA2694EB883720C7CE92ED542A199
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
Signing time: Thu 12 Nov 2026 16:03:50 +0000
ROA not before: Thu 12 Nov 2026 15:58:50 +0000
ROA not after: Thu 11 Nov 2027 16:03:50 +0000
asID: 25198
IP address blocks: 94.118.46.0/24 maxlen: 24
94.118.112.0/24 maxlen: 24
94.118.125.0/24 maxlen: 24
94.118.146.0/24 maxlen: 24
188.221.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f9:94:56:9d:7c:a2:69:4e:b8:83:72:0c:7c:e9:2e:d5:42:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 15:58:50 2026 GMT
Not After : Nov 11 16:03:50 2027 GMT
Subject: CN=BA2C10338E02BF712F2BA8561AF3E5BA93CB8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:bd:94:84:8a:5e:bc:f2:b8:f2:2a:22:a5:
51:75:f3:ff:85:6d:aa:74:63:e6:20:4c:17:b4:c1:
8b:6d:13:ef:2e:19:f6:7f:d6:78:cb:e3:0f:59:68:
7c:3d:7e:f4:7a:bd:1e:c3:36:85:6d:da:8e:f4:67:
59:d8:d1:43:ad:4e:65:d3:2c:8e:dc:08:d5:c8:ec:
03:b8:35:b1:e7:9f:6c:97:e5:1d:6d:c1:d4:7c:f2:
c9:cf:6f:da:10:c7:ed:b2:00:14:55:08:15:4b:65:
c1:8f:8a:dc:c6:c1:53:af:17:1e:00:3f:71:81:df:
89:a1:dc:b1:61:fd:b9:a7:97:b7:52:ef:53:e9:53:
86:e0:2b:ee:7d:2a:b4:e8:98:17:bd:7d:62:19:b3:
78:5b:26:37:4a:a6:af:83:d9:f4:6d:df:10:3f:e3:
a2:de:5b:36:fe:77:cf:f9:e8:eb:62:e9:54:90:4e:
97:3d:29:77:72:7e:1d:6a:ca:14:09:a2:46:d0:98:
ac:11:63:70:ed:5a:f3:fc:70:24:91:e0:1c:65:a7:
28:df:e0:43:49:0c:a5:7c:cf:ee:80:32:31:68:87:
75:21:9c:60:ba:5b:04:7b:04:7c:5d:a4:31:cb:69:
cf:11:82:bb:5f:8e:33:ec:81:c2:e3:29:ac:19:8d:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:10:33:8E:02:BF:71:2F:2B:A8:56:1A:F3:E5:BA:93:CB:88:12
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.46.0/24
94.118.112.0/24
94.118.125.0/24
94.118.146.0/24
188.221.54.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4b:a4:ce:d9:c4:af:fb:98:ef:0a:6f:74:e3:30:44:15:33:
6e:d2:f2:d1:66:d2:62:61:c6:67:44:06:a3:0e:20:67:59:72:
cf:fc:11:f1:9b:b6:31:46:2c:28:b8:80:24:c3:f2:98:da:85:
ee:44:3d:c8:a1:b5:34:4e:c1:89:0b:28:d3:b4:6e:56:d7:83:
30:86:7a:34:ef:a3:7a:1c:92:40:7f:fa:ec:8b:17:4f:84:4a:
84:59:2a:28:04:89:1a:75:0a:48:1f:6b:32:d2:5b:52:34:d9:
2c:2e:97:5c:99:eb:d3:35:b1:fd:56:2f:ec:c2:24:99:57:23:
34:15:de:b3:24:39:77:a4:f3:ca:cf:2a:4a:40:11:3d:76:7e:
6e:66:db:ca:ac:ee:35:7e:24:e8:1b:1d:e3:4e:c6:0a:8e:1c:
35:55:92:5a:95:b1:45:e2:0a:e6:00:18:00:a4:25:f5:b6:fe:
24:51:20:1c:a3:35:7d:57:53:29:a4:69:dd:55:6c:17:82:35:
94:35:8c:93:fc:ec:82:cd:d6:68:df:af:e8:c3:0e:21:c2:34:
d6:9d:13:63:85:4e:f8:ec:a3:1d:db:45:ae:68:dc:fe:3f:81:
7e:5e:d6:62:9f:9d:21:b9:c5:2a:3a:ab:b9:45:bc:df:7e:6e:
43:74:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 13 01:00:36 2026 by rpki-client