Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: 1bNHkTJQ2tsvBG3mIlQXyumG6Nt+fJ8rjdJPrGdyrXE=
Subject key identifier: 5A:F8:53:40:F9:15:18:ED:93:32:17:E7:25:49:4C:62:46:23:6F:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7AC287002C8EDF92F37ACE7F77978EDD3BC1F234
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
Signing time: Fri 25 Sep 2026 14:41:54 +0000
ROA not before: Fri 25 Sep 2026 14:36:54 +0000
ROA not after: Fri 24 Sep 2027 14:41:54 +0000
asID: 25369
IP address blocks: 82.38.3.0/24 maxlen: 24
82.38.130.0/24 maxlen: 24
82.38.199.0/24 maxlen: 24
82.39.141.0/24 maxlen: 24
82.39.189.0/24 maxlen: 24
82.39.209.0/24 maxlen: 24
82.40.24.0/24 maxlen: 24
82.40.28.0/24 maxlen: 24
82.47.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c2:87:00:2c:8e:df:92:f3:7a:ce:7f:77:97:8e:dd:3b:c1:f2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 14:36:54 2026 GMT
Not After : Sep 24 14:41:54 2027 GMT
Subject: CN=5AF85340F91518ED933217E725494C6246236F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:38:ff:0d:aa:6d:13:6d:d8:7a:64:11:1b:
0e:aa:62:e8:dc:3a:99:73:a6:07:57:4c:8a:a1:1e:
fd:4c:ce:94:ed:69:43:a6:78:dd:61:50:d0:93:2f:
88:cd:54:0c:e1:84:2e:77:47:cd:f9:1e:5a:dc:d4:
03:d5:8b:18:39:12:34:96:25:a7:fe:3a:1b:ec:33:
77:d6:f4:0d:be:c0:cc:d4:54:df:d8:f9:09:b8:a0:
16:73:0f:20:02:c6:b7:6a:b7:fb:81:ea:67:a8:e1:
54:11:d9:c3:ac:56:2a:fd:81:2f:2d:87:e3:42:e2:
a8:0e:2d:a1:78:9e:af:f1:f7:35:48:51:f8:77:c5:
d8:12:15:a2:e6:4c:ef:7e:18:11:3f:be:42:1e:ec:
c7:09:31:4d:a7:a1:af:fd:32:1a:9d:18:7b:f0:16:
36:74:64:9a:37:cf:04:6a:51:7c:84:cc:22:6e:14:
97:12:59:3b:42:20:fd:ab:cb:52:70:d5:19:7b:f2:
2d:ec:26:5b:7f:87:74:47:c4:05:dd:64:11:f6:32:
02:ea:ec:28:70:bd:4e:1d:06:72:4e:1e:84:1c:6a:
2c:b6:f1:33:a7:e5:8b:c3:a9:50:c7:86:fb:22:dd:
99:02:40:4f:8a:d0:06:ea:76:dd:83:ee:1d:81:c9:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:53:40:F9:15:18:ED:93:32:17:E7:25:49:4C:62:46:23:6F:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.3.0/24
82.38.130.0/24
82.38.199.0/24
82.39.141.0/24
82.39.189.0/24
82.39.209.0/24
82.40.24.0/24
82.40.28.0/24
82.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:16:84:34:f0:81:f3:61:3f:1d:42:60:75:06:a4:db:63:a2:
56:bd:3f:9d:83:f1:27:cc:45:38:ee:f0:42:d9:a4:8b:1c:e1:
89:67:b3:c7:26:1a:a2:79:c1:57:55:82:96:f4:36:d9:62:10:
b8:96:94:38:3d:a1:04:ff:37:3e:eb:24:c9:c7:39:35:9b:54:
7d:a2:e4:28:91:f4:2b:6c:13:a6:22:e7:a4:75:4f:b8:b0:04:
4f:05:cf:d2:d0:22:80:45:0f:8c:a7:e7:69:5a:4f:ee:18:34:
c2:23:cc:d7:76:8d:3a:1d:da:93:c0:ab:7c:d8:87:a1:55:ba:
3f:70:0b:18:6f:dc:8d:af:f4:6a:89:36:d7:d7:3b:02:73:70:
c0:5d:83:53:53:c4:fb:0e:09:e7:44:60:7d:3d:21:5e:bd:e9:
7b:ad:fe:c8:70:cb:2c:34:d3:53:f2:40:20:18:ba:f2:4b:65:
c7:f8:a0:42:32:de:5d:eb:39:02:be:1d:87:1c:a2:94:e0:0b:
93:3d:f8:60:94:35:33:cb:06:ba:08:e2:b1:ab:1b:8f:75:b8:
0d:5d:f6:d9:eb:2a:2d:9d:91:72:02:41:73:39:b6:9b:5b:f5:
32:c3:72:44:34:0a:ba:86:db:d9:c3:4e:8f:d9:85:cc:b1:7a:
ea:31:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:59 2026 by rpki-client