Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: zHNpYlOqrtaX4u2GnQrmazkHtjW6h6dFR2uSbPtdUK0=
Subject key identifier: FA:51:AE:95:2E:BF:5B:9A:3C:DE:02:F2:6F:AF:11:19:3D:FE:9A:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B2E7ECF329FC62F2A2719046D6C771356B4D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
Signing time: Fri 27 Feb 2026 10:20:39 +0000
ROA not before: Fri 27 Feb 2026 10:15:39 +0000
ROA not after: Fri 26 Feb 2027 10:20:39 +0000
asID: 25369
IP address blocks: 82.38.130.0/24 maxlen: 24
82.38.199.0/24 maxlen: 24
82.39.141.0/24 maxlen: 24
82.39.189.0/24 maxlen: 24
82.39.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2e:7e:cf:32:9f:c6:2f:2a:27:19:04:6d:6c:77:13:56:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 27 10:15:39 2026 GMT
Not After : Feb 26 10:20:39 2027 GMT
Subject: CN=FA51AE952EBF5B9A3CDE02F26FAF11193DFE9A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:9b:e9:66:35:9c:d0:7a:a5:08:6e:19:a5:
c9:da:87:bf:33:c4:13:d9:2f:a1:45:3e:a1:6e:b2:
6e:e1:3d:b3:94:51:18:2f:10:22:bb:57:8f:51:20:
81:21:ca:a8:22:fa:3c:78:17:d2:56:42:4b:f8:57:
c3:25:45:56:e4:a2:c1:62:d1:6c:95:e4:45:e3:30:
16:ef:6e:92:e7:41:47:7a:dd:f6:68:67:94:6d:fb:
2b:41:cb:d2:d4:97:d5:1f:e0:16:60:c6:43:86:14:
40:8f:f5:e3:6a:4e:8a:0c:60:b5:76:0c:5e:f3:25:
44:d9:d5:62:7c:74:a4:02:4c:e2:a7:80:06:57:c6:
f9:fd:8c:50:ef:95:f5:9c:5a:65:a1:04:24:0b:d0:
16:4a:af:32:94:b5:2f:e6:13:54:04:d8:1f:40:d6:
16:43:b7:f5:24:17:03:0e:26:b4:52:44:76:5e:c2:
e1:91:77:86:8a:a6:d5:4e:6a:f8:a8:86:8b:54:5c:
ca:a7:65:50:35:8a:6b:b3:fe:7a:5a:6e:4d:d4:c7:
cc:0c:f3:34:d2:de:bd:96:dc:ac:ff:b4:fa:64:81:
dc:f8:e0:58:6f:19:5e:52:61:83:21:b3:3b:16:b4:
c4:f1:8f:93:c3:8c:83:7a:be:37:34:df:0d:bc:40:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:AE:95:2E:BF:5B:9A:3C:DE:02:F2:6F:AF:11:19:3D:FE:9A:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.130.0/24
82.38.199.0/24
82.39.141.0/24
82.39.189.0/24
82.39.209.0/24
Signature Algorithm: sha256WithRSAEncryption
46:16:d1:0d:4a:b0:8e:78:7a:12:84:55:4e:06:1a:4a:c0:2f:
f2:a5:db:3a:e8:4e:b3:a8:02:be:45:31:98:99:c4:0a:c0:07:
ef:27:92:b0:bd:26:6e:63:32:af:18:18:ff:cd:44:85:2d:c7:
b5:55:8f:b4:eb:d2:18:5a:71:98:43:ff:7d:5d:bb:a8:ca:38:
11:fc:c2:31:fb:f8:a6:03:43:23:32:0c:75:86:b3:3c:5a:66:
72:a0:23:e4:a7:61:bb:cc:87:3b:57:39:6a:3f:b4:d1:9c:78:
d9:27:87:81:68:09:ec:18:c0:b0:b5:a2:1e:31:c2:f4:d4:8b:
70:fa:0f:bb:18:ed:35:e2:c9:5c:14:bd:4d:59:b4:b7:74:c2:
9f:56:2c:40:b6:c0:02:88:7b:2c:19:c2:ec:6e:7e:52:67:3e:
be:e1:35:e1:c6:3c:e0:3e:14:6b:c4:39:ba:fa:7c:c4:c6:07:
24:97:c3:9e:92:4a:2d:4d:b1:ee:de:5b:9b:b2:cb:2b:ed:85:
7b:62:6d:70:ff:79:9d:4c:01:02:50:d6:3b:18:9f:ba:88:36:
bc:1d:de:85:81:c8:fb:4e:69:89:21:45:4b:0e:39:82:57:7b:
4a:a5:2e:29:38:e9:cd:c5:90:41:8e:33:40:ad:a5:78:40:ab:
f0:5a:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:58 2026 by rpki-client