Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: iSwP9f9uYJ+o1miTMddnflLcjq05nSeFPF5tgv8bFeg=
Subject key identifier: 8B:E1:E8:E2:AD:5E:30:46:67:3F:58:0B:6D:7A:06:52:FE:38:C7:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A99C47821E053863C838ED83D5D55C6BF1946B1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
Signing time: Thu 25 Jun 2026 13:23:29 +0000
ROA not before: Thu 25 Jun 2026 13:18:29 +0000
ROA not after: Thu 24 Jun 2027 13:23:29 +0000
asID: 25369
IP address blocks: 140.233.162.0/24 maxlen: 24
167.148.172.0/24 maxlen: 24
167.148.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:99:c4:78:21:e0:53:86:3c:83:8e:d8:3d:5d:55:c6:bf:19:46:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 13:18:29 2026 GMT
Not After : Jun 24 13:23:29 2027 GMT
Subject: CN=8BE1E8E2AD5E3046673F580B6D7A0652FE38C759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:f7:88:d7:fe:c8:ce:56:64:d0:1f:f2:97:
08:29:4b:59:6b:62:48:92:ea:35:10:50:d5:d1:1b:
15:c4:e4:4b:70:de:98:5f:3d:d9:74:e6:50:5f:61:
1d:8b:ad:5e:64:53:2e:85:8d:52:92:a9:20:16:13:
5c:38:2a:9b:66:63:86:53:54:07:48:29:ac:36:db:
a8:27:09:67:8d:c1:6c:58:a8:a4:54:10:f2:b5:55:
e7:c3:e9:7a:46:df:11:1b:29:bf:b6:72:99:0f:0b:
21:17:8b:6d:21:4b:f5:fa:40:6b:2a:a4:8c:57:3a:
1e:a1:4c:8d:00:58:1c:40:15:79:7c:80:f1:e3:f4:
64:96:4c:fc:46:d2:26:7c:43:45:2d:4c:45:98:d1:
43:05:8c:d2:37:19:09:b2:7d:14:e6:07:f2:d0:08:
08:62:1f:d6:0f:a4:2b:74:69:29:49:ff:5c:06:a8:
07:f4:f3:67:f3:48:49:cf:1a:f1:dd:00:76:81:5e:
71:3e:6c:85:01:8e:a4:44:07:3f:c0:a1:7f:1d:b6:
c4:97:85:3e:3c:58:3a:ea:c6:0e:36:e4:8e:1f:90:
61:b2:11:03:8d:4d:36:87:91:37:36:6f:31:de:29:
be:b1:2e:0f:87:4a:2f:ad:1f:be:bb:90:07:79:78:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E1:E8:E2:AD:5E:30:46:67:3F:58:0B:6D:7A:06:52:FE:38:C7:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.162.0/24
167.148.172.0/24
167.148.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c0:af:38:f7:8e:88:d1:60:1f:8a:98:72:14:72:01:13:3c:
82:a9:4e:df:8b:8d:37:50:0f:8f:13:09:62:8f:26:94:42:ae:
c1:dc:eb:fd:44:95:28:c5:cb:ea:0a:8e:f8:3a:1b:fa:d2:8a:
69:09:c7:d0:8d:ed:a3:03:fc:90:69:c3:b3:db:30:96:dc:c9:
6d:68:0d:78:7a:4c:14:98:99:ad:8d:0b:5a:6d:a9:df:44:9f:
1c:75:52:bd:5a:70:d3:24:9c:7b:07:aa:d5:90:38:79:38:b9:
d5:11:f1:d7:39:86:06:4f:6e:2c:1b:39:7c:0f:6a:0d:20:96:
e5:44:8a:22:98:af:5f:cf:57:07:d0:c9:af:02:a6:d1:97:ae:
39:39:3b:34:29:97:a5:09:ca:25:76:b9:70:09:65:7b:82:2c:
b1:1e:40:55:d9:ee:b5:34:00:15:e2:c3:2d:f6:49:22:30:31:
85:56:ef:ef:76:07:cc:e7:55:f0:18:97:43:ad:0e:e2:25:4f:
38:6c:58:1e:7f:1a:7d:2d:16:63:d9:20:ab:1e:96:d6:71:7f:
b3:c5:b2:37:05:12:41:42:2b:0c:0e:58:a0:99:f4:8f:f3:00:
af:34:bd:97:54:26:57:0e:a5:b7:c9:ca:ed:1a:31:3b:18:2a:
34:d1:96:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:03 2026 by rpki-client