Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: XQBp3w5Sovi2p31+V+OHSKdxi8sGBdgpIoQAspQxOAw=
Subject key identifier: 0B:1E:62:F1:BA:96:78:4C:C2:C6:D0:88:4C:BD:C7:72:8A:0E:FF:8D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 33C12E5C05ABCBE75CB17E55A2DE5F5CAB3E5DDD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
Signing time: Thu 17 Sep 2026 17:54:30 +0000
ROA not before: Thu 17 Sep 2026 17:49:30 +0000
ROA not after: Thu 16 Sep 2027 17:54:30 +0000
asID: 25369
IP address blocks: 140.233.162.0/24 maxlen: 24
155.117.145.0/24 maxlen: 24
167.148.172.0/24 maxlen: 24
167.148.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c1:2e:5c:05:ab:cb:e7:5c:b1:7e:55:a2:de:5f:5c:ab:3e:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 17:49:30 2026 GMT
Not After : Sep 16 17:54:30 2027 GMT
Subject: CN=0B1E62F1BA96784CC2C6D0884CBDC7728A0EFF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:cd:ab:4b:9f:c8:93:c2:cd:31:00:cd:b9:
96:35:58:44:01:11:19:8d:82:c3:56:f6:eb:85:ea:
b3:53:05:cd:79:8c:14:7b:d6:bb:32:df:d4:57:dc:
4f:63:1c:76:de:e3:c6:78:b4:f2:62:ea:57:e8:14:
ae:e9:3f:80:9a:ea:df:a7:97:8d:06:27:93:7f:21:
d1:af:e1:ab:66:95:dc:85:86:74:90:60:3a:27:5e:
a0:e3:8c:9b:35:7b:9a:d5:06:46:3f:27:9f:1d:73:
e1:e5:6d:cd:37:6c:a2:e4:fc:54:9d:b9:9a:90:1e:
36:d7:82:16:f3:8a:87:5c:95:10:e1:99:4c:46:68:
47:d0:c4:fa:b1:4e:03:97:d1:de:f6:09:45:9e:fb:
2a:12:1f:f4:16:c3:f6:03:32:19:b7:84:bd:7a:ad:
60:10:3a:d9:9c:b7:42:5b:67:01:b4:a1:df:3f:83:
bd:aa:c7:fc:0f:e8:7f:f3:e3:04:15:cf:83:23:a3:
eb:47:70:4c:22:37:12:c7:b5:9b:83:4f:0a:da:8b:
ea:ac:b1:20:6d:86:c6:bd:6f:ef:f0:9c:ca:87:ee:
ce:75:f7:40:7f:eb:26:e7:cf:fc:83:4f:df:b6:1f:
4e:3f:93:ba:56:b1:e7:9f:19:2d:88:de:a4:6b:85:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1E:62:F1:BA:96:78:4C:C2:C6:D0:88:4C:BD:C7:72:8A:0E:FF:8D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.162.0/24
155.117.145.0/24
167.148.172.0/24
167.148.186.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c1:2d:3f:a3:47:ee:b8:be:a2:37:f7:6d:99:a6:de:d2:d7:
df:4a:b7:d9:a4:7a:fb:00:8c:b2:16:c3:bc:36:da:09:25:17:
e9:79:85:b9:c8:b3:89:b1:00:7c:14:82:29:a6:af:e8:e3:4e:
a4:37:3f:68:3f:d1:fc:ba:97:24:0a:3b:24:71:57:d3:99:9f:
0c:a6:80:1f:6f:cc:71:37:14:c6:e8:6f:90:05:d5:e8:c9:26:
aa:f6:50:02:2f:99:ca:79:e3:74:db:ca:f5:86:5b:d7:cd:4c:
69:29:a5:36:a2:1f:49:af:f1:eb:f2:35:59:b0:4c:00:32:61:
7a:c3:12:92:39:99:de:0c:e1:79:2c:da:0c:56:d7:42:99:aa:
af:f8:21:77:60:64:8c:6e:43:d5:e1:58:4a:15:4e:3e:7d:6e:
5f:b5:fe:da:7d:8d:93:34:b9:62:22:6c:d2:27:f9:98:32:6b:
7c:61:0c:94:9c:b5:1b:76:80:35:2c:b7:0e:38:62:00:c7:01:
06:34:b2:d4:a4:3a:c5:54:a5:b2:24:a9:f3:0a:8e:ff:04:51:
31:7d:78:69:55:f8:74:da:f6:36:b5:3a:15:54:81:55:0f:56:
ca:6d:bf:73:3c:79:29:ea:d0:b8:42:bc:f2:28:8b:5b:fe:44:
e1:a4:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:42 2026 by rpki-client