Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
File: AS25160.roa (raw, json)
Hash identifier: pFGEH7yuXcDxp0E/23LjEJwoib5mUGsS5GaIzs/mCxY=
Subject key identifier: FD:5E:81:25:FD:10:F6:D7:71:1C:67:BE:F3:9B:40:46:1D:93:78:5C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1576B7F594CAEAE75D3FC70DB116A3B56D0A4951
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
Signing time: Tue 24 Feb 2026 02:55:39 +0000
ROA not before: Tue 24 Feb 2026 02:50:39 +0000
ROA not after: Tue 23 Feb 2027 02:55:39 +0000
asID: 25160
IP address blocks: 46.203.197.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
95.134.83.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:76:b7:f5:94:ca:ea:e7:5d:3f:c7:0d:b1:16:a3:b5:6d:0a:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 24 02:50:39 2026 GMT
Not After : Feb 23 02:55:39 2027 GMT
Subject: CN=FD5E8125FD10F6D7711C67BEF39B40461D93785C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:39:39:8a:f0:3c:93:c5:b6:a4:88:a2:97:
46:18:a2:bc:bc:81:ab:b8:ab:bc:1e:ea:91:ee:a3:
8c:02:35:09:ec:66:ec:71:2f:14:42:e1:7d:76:31:
1a:23:f1:1a:3e:77:46:3f:32:2a:df:f3:22:0c:8b:
05:56:9d:34:98:e1:e3:a1:54:1b:c2:25:94:a5:07:
f8:87:1b:cc:4f:ee:37:4c:17:bc:85:f2:b1:7a:9c:
74:fc:21:3d:13:4a:d2:7c:81:91:05:9f:33:99:bb:
5a:77:f4:cc:b6:9d:e6:85:a0:2c:b5:b6:81:a1:8d:
f6:69:56:b9:c2:6e:07:b0:22:1e:a5:90:fb:1b:e7:
49:b9:de:6a:f7:94:51:3d:bd:6a:bc:ec:de:93:4c:
a6:98:bb:c8:d9:eb:9e:60:a6:12:90:67:40:45:e4:
c2:3b:9a:db:42:b1:25:2b:57:f8:da:b4:f4:f5:cf:
77:93:fc:fe:b1:51:c3:b2:f9:73:e5:25:66:1e:48:
b6:67:3a:32:11:48:24:87:fb:07:86:0b:f6:cc:8a:
44:4f:ad:a1:7e:bf:72:90:41:9f:de:40:df:27:af:
8f:06:87:fc:5e:3b:10:1b:03:b5:9b:63:7a:d9:5f:
7e:68:30:8e:6e:76:b7:c0:42:36:dc:f6:38:dc:ae:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:81:25:FD:10:F6:D7:71:1C:67:BE:F3:9B:40:46:1D:93:78:5C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.197.0/24
46.203.205.0/24
95.134.83.0/24
95.134.148.0/24
95.134.150.0/24
95.135.194.0/24
95.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b0:9b:5b:93:53:91:db:56:26:07:90:38:67:ea:52:6c:45:
85:a5:70:2c:0b:e9:c0:b9:91:99:e7:0c:ef:f7:26:f5:1c:27:
3c:4d:69:1b:52:ac:47:55:0b:c4:8b:6c:c8:60:a4:e4:d3:4e:
f4:73:fc:00:0d:43:5d:91:e1:a8:8e:f2:0e:c3:47:52:1e:8a:
45:d4:e2:5c:96:ee:75:e8:fe:3a:ea:35:a3:82:9f:b6:1f:b5:
60:68:bb:d2:e7:7b:e3:f4:fc:45:d9:4f:76:d6:33:38:27:ea:
a3:74:9d:70:18:c3:31:0e:52:cc:d4:6f:2d:de:18:ec:6f:a0:
4a:77:0f:82:a9:51:80:b5:0f:07:ec:ac:1e:68:21:95:3f:e5:
0a:19:49:a8:09:9f:cb:88:42:00:de:44:4b:bc:b6:84:c9:15:
1b:01:51:17:5b:92:d0:d0:11:d4:1b:ed:81:aa:67:83:c2:68:
f5:3e:c3:d9:ab:d5:a1:dd:b9:4a:43:96:7f:03:dc:d4:66:ad:
41:6f:37:ff:4f:5d:24:23:3c:20:ab:08:cc:51:1b:30:c9:fd:
04:f4:dd:92:45:25:cb:22:97:31:25:12:b5:f5:7e:9f:98:36:
ee:86:2d:bb:1f:fb:c7:00:b3:11:07:0b:2f:74:95:ed:5a:a3:
80:e3:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:13 2026 by rpki-client