Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: TreAVgvuoIpMU0lw7OLQWxgZOo2UuNjCqUjUungdZOM=
Subject key identifier: 22:0A:E0:95:7C:6F:98:05:18:B9:B7:D6:7F:36:FB:8F:4F:7B:22:78
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2C71A3CF7E1A5F5C239A3382D8A3E231F1CEED32
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
Signing time: Wed 09 Sep 2026 11:43:25 +0000
ROA not before: Wed 09 Sep 2026 11:38:25 +0000
ROA not after: Wed 08 Sep 2027 11:43:25 +0000
asID: 25369
IP address blocks: 2.57.17.0/24 maxlen: 24
5.252.83.0/24 maxlen: 24
45.133.173.0/24 maxlen: 24
85.209.177.0/24 maxlen: 24
179.61.130.0/24 maxlen: 24
181.41.211.0/24 maxlen: 24
181.214.0.0/24 maxlen: 24
181.215.7.0/24 maxlen: 24
185.34.42.0/24 maxlen: 24
185.137.12.0/24 maxlen: 24
185.139.3.0/24 maxlen: 24
185.141.166.0/24 maxlen: 24
185.142.25.0/24 maxlen: 24
185.145.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:71:a3:cf:7e:1a:5f:5c:23:9a:33:82:d8:a3:e2:31:f1:ce:ed:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 9 11:38:25 2026 GMT
Not After : Sep 8 11:43:25 2027 GMT
Subject: CN=220AE0957C6F980518B9B7D67F36FB8F4F7B2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:4c:b3:71:e1:9f:c5:03:80:fd:fd:9e:bc:
a1:cd:30:63:a4:d7:d4:be:72:70:d2:39:9f:c5:3d:
f1:be:ec:a1:2d:57:82:55:e8:f8:57:50:c5:96:37:
ad:8b:3a:58:8d:da:c1:2d:14:c2:91:e9:e2:85:b9:
f8:99:9c:12:8e:82:fa:c5:81:0f:4c:b9:de:b6:bd:
10:ca:1b:63:91:39:51:d5:f0:6e:58:e6:8f:f6:6b:
bf:9d:7d:73:4e:94:18:84:b0:5e:08:92:64:47:a8:
b2:a4:62:a3:c5:23:a5:a8:e9:e7:42:ae:b2:b4:54:
16:8a:11:26:97:1a:97:e4:7c:f2:1a:53:bc:c4:ac:
22:64:74:05:3d:ce:0c:26:84:54:4c:48:88:56:c5:
fa:d1:a4:08:9c:a9:02:af:1e:46:5e:41:27:ca:3c:
cd:14:bd:9d:8d:b6:6d:87:68:58:8a:6d:d2:27:1c:
df:4c:dc:f7:3e:7c:59:84:87:05:ad:fc:df:99:30:
a1:57:dc:3b:a7:88:a5:92:39:4e:9f:7a:04:ff:82:
bb:81:59:16:ff:a5:cc:99:1b:29:41:f9:0c:31:d4:
a2:cd:20:fb:37:6b:a7:7f:45:86:14:37:a1:7b:27:
17:7a:3c:6e:d4:e6:56:15:64:a5:3c:ef:7b:01:92:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:E0:95:7C:6F:98:05:18:B9:B7:D6:7F:36:FB:8F:4F:7B:22:78
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.17.0/24
5.252.83.0/24
45.133.173.0/24
85.209.177.0/24
179.61.130.0/24
181.41.211.0/24
181.214.0.0/24
181.215.7.0/24
185.34.42.0/24
185.137.12.0/24
185.139.3.0/24
185.141.166.0/24
185.142.25.0/24
185.145.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:df:64:8f:19:59:b6:a1:14:da:cb:87:b7:ab:1f:05:d6:88:
b2:8e:0e:09:19:02:47:a3:7f:cb:b4:71:69:69:71:83:b8:f8:
dc:6a:6f:e6:3b:38:8e:05:ce:a1:ee:b5:4e:65:9f:4d:6a:01:
74:64:72:a9:75:33:1f:5f:a0:a7:9c:e9:87:27:d9:32:55:51:
27:69:f3:af:f6:6b:03:56:06:36:57:f5:b3:c7:18:f8:d4:fc:
c0:87:87:3d:8f:38:50:eb:86:d8:52:76:b9:04:bd:16:64:b8:
92:96:10:ee:08:42:a9:41:05:80:0e:9a:4c:43:67:61:7e:75:
7e:36:29:7b:05:a2:d1:8b:f1:1c:85:28:3d:45:d6:07:71:9a:
a1:26:fe:94:a4:80:f5:6f:1a:61:d7:5b:d2:91:3b:21:89:d8:
2e:6c:25:5b:80:71:8d:07:00:90:c2:a0:a7:01:71:56:a6:3a:
68:07:1f:bb:f4:d8:88:c0:4e:15:38:1e:07:9e:44:35:f3:09:
8e:bf:c0:8d:de:7a:32:d1:2f:f9:73:cb:c1:9e:44:73:45:fc:
b9:27:f9:ac:27:bd:ad:53:0d:a2:72:a8:fe:a3:07:05:9d:92:
80:2f:2c:31:40:02:15:ec:56:63:00:14:15:f6:7e:14:a8:c2:
37:2d:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:52:51 2026 by rpki-client