Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: noV8MQyX9JFAO5I058lbOMY1BKzJf2vEFpHKoY6ZKTw=
Subject key identifier: F6:C0:31:17:82:DC:58:95:F9:4B:C7:FC:79:BA:18:84:00:78:8C:70
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1DC8700DB635D2E42BE834656B3D282425CFA1EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
Signing time: Tue 15 Sep 2026 10:30:48 +0000
ROA not before: Tue 15 Sep 2026 10:25:48 +0000
ROA not after: Tue 14 Sep 2027 10:30:48 +0000
asID: 25369
IP address blocks: 82.38.3.0/24 maxlen: 24
82.38.130.0/24 maxlen: 24
82.38.199.0/24 maxlen: 24
82.39.141.0/24 maxlen: 24
82.39.189.0/24 maxlen: 24
82.39.209.0/24 maxlen: 24
82.47.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c8:70:0d:b6:35:d2:e4:2b:e8:34:65:6b:3d:28:24:25:cf:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 10:25:48 2026 GMT
Not After : Sep 14 10:30:48 2027 GMT
Subject: CN=F6C0311782DC5895F94BC7FC79BA188400788C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:5c:08:b9:02:83:a3:11:03:28:b8:f1:a9:
08:e1:2c:3d:02:ee:4c:30:5d:c2:c3:b8:9b:3d:85:
26:df:cd:22:67:49:33:28:c3:2f:56:b6:dd:7b:cb:
59:82:ca:2d:0a:e8:49:8b:98:8f:82:cf:83:50:d5:
90:8a:a5:6e:19:94:56:71:1e:43:83:78:89:36:80:
4d:85:9a:85:b8:7e:62:11:59:46:cc:7c:b1:5b:7b:
9a:f8:08:ae:85:fd:2a:c7:9b:4f:25:2a:55:81:b0:
9c:43:9b:a4:05:96:8a:86:b1:0c:68:d0:d8:0d:41:
70:a8:b9:c7:31:1d:d7:e1:43:26:c6:9c:20:5c:bc:
c8:e4:e1:bf:44:6d:78:7a:b8:2f:cf:af:37:38:37:
19:76:1a:75:6e:90:71:bb:da:84:db:87:0b:52:07:
f8:85:68:5a:0c:09:46:64:15:94:6a:d5:ba:32:c8:
09:cd:ea:d7:fb:1e:ff:e7:14:9c:2e:be:9b:3d:63:
5d:d6:c8:34:80:76:92:e4:e1:33:85:3a:7e:57:78:
cb:7c:46:76:33:0a:bb:c2:c1:47:08:72:ee:bc:17:
49:98:59:9e:85:4d:38:41:4e:c3:f6:0d:c7:ff:64:
2b:39:dd:6c:a1:b4:c0:cc:44:08:1f:9d:cf:d8:a6:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:31:17:82:DC:58:95:F9:4B:C7:FC:79:BA:18:84:00:78:8C:70
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.3.0/24
82.38.130.0/24
82.38.199.0/24
82.39.141.0/24
82.39.189.0/24
82.39.209.0/24
82.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a0:ef:07:c0:2e:ca:56:99:bc:46:ad:4e:8d:5a:58:43:ae:
f3:54:ad:c9:38:d6:5a:70:2e:8c:45:57:f3:4d:fa:f7:cf:4f:
f3:b9:0e:09:03:3c:b0:03:73:aa:6f:74:2a:44:06:7a:33:8d:
d0:aa:65:7e:f5:87:19:9f:1a:f6:ea:a9:c8:bb:12:75:bf:30:
2a:7c:c7:75:f9:71:eb:5b:cb:b4:8c:3e:e7:fe:f3:4f:fd:77:
7a:3c:92:ba:d5:a8:7d:42:3c:e1:42:a4:7a:f8:8c:30:3f:0f:
6d:0e:87:d6:51:85:68:3c:0b:58:b2:1e:74:3a:1b:5b:07:87:
64:19:da:ea:a0:96:c1:49:62:11:06:3b:b7:0c:6c:4c:bd:6d:
15:cf:0c:a4:e4:43:57:a7:1d:e5:a0:54:d3:b0:e7:f7:44:ca:
9c:2d:7f:52:e3:41:e8:72:f3:1f:ee:80:66:7d:b9:97:21:cc:
2e:ec:36:fb:4d:15:bc:0d:49:bb:d7:2b:04:51:d0:37:0f:0e:
3a:60:78:16:59:4f:72:e0:e7:30:44:c4:8e:8b:78:81:53:4d:
20:15:e2:9c:ee:1d:50:a6:65:f0:a4:70:b9:b6:61:cd:fb:53:
81:21:43:cc:eb:2a:c1:44:9a:f2:9b:6a:c6:e5:41:e5:a4:2d:
e0:ce:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:03:18 2026 by rpki-client