Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: cKMUGtHIgJ4Pv0Ktg8DKs8qI8bfAAPIXmMORmHV9siQ=
Subject key identifier: 7E:45:4C:BB:D3:0D:57:5D:21:0B:24:26:24:75:23:53:C1:6D:CE:59
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 178C198A16DC0C5FA0DE92471D0A830C3DD1C428
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
Signing time: Mon 28 Sep 2026 13:45:50 +0000
ROA not before: Mon 28 Sep 2026 13:40:50 +0000
ROA not after: Mon 27 Sep 2027 13:45:50 +0000
asID: 25369
IP address blocks: 51.146.69.0/24 maxlen: 24
51.194.168.0/22 maxlen: 24
51.194.176.0/22 maxlen: 24
51.194.184.0/22 maxlen: 24
78.105.159.0/24 maxlen: 24
78.105.171.0/24 maxlen: 24
78.105.190.0/24 maxlen: 24
78.105.205.0/24 maxlen: 24
78.105.213.0/24 maxlen: 24
94.116.80.0/22 maxlen: 22
94.116.92.0/22 maxlen: 22
94.116.112.0/22 maxlen: 22
94.116.128.0/22 maxlen: 22
188.220.97.0/24 maxlen: 24
188.220.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8c:19:8a:16:dc:0c:5f:a0:de:92:47:1d:0a:83:0c:3d:d1:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 28 13:40:50 2026 GMT
Not After : Sep 27 13:45:50 2027 GMT
Subject: CN=7E454CBBD30D575D210B242624752353C16DCE59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:58:f9:69:31:bd:2f:dc:a6:29:f3:81:a3:
8e:a4:37:71:39:03:47:0e:84:8d:fc:37:73:4c:2a:
8b:05:f7:6a:de:8b:4a:ea:79:5c:48:91:d7:59:5c:
10:0d:0c:37:13:03:a2:02:b1:0a:23:e8:7f:d7:ac:
b1:c3:70:08:1d:62:e5:31:41:95:70:31:40:9e:5b:
1b:9a:eb:c5:a7:b1:eb:a1:a2:27:5a:f3:50:00:19:
76:7c:f8:47:23:d1:ef:bf:69:e8:c7:bb:ae:fa:f9:
1f:c8:b6:7e:1c:37:8b:14:7b:da:41:7a:40:d0:db:
a4:fe:18:fb:39:87:6e:b5:1e:89:a5:45:42:2e:0e:
57:d9:4f:99:a1:55:0e:a2:dd:15:d4:28:99:22:1f:
4f:6e:85:87:ff:cb:e7:5d:24:48:e0:fe:8e:e4:54:
9a:a1:06:f5:61:69:eb:75:f8:c4:f3:e2:ca:1e:a7:
58:d7:69:38:84:7d:6b:35:d2:ca:c0:fa:40:87:b8:
14:1e:51:c6:ce:49:46:77:74:cf:94:a1:82:3d:e5:
df:7d:23:13:16:f3:33:7a:9e:db:aa:6b:50:4f:0d:
8e:56:13:0b:6e:6e:ce:5a:67:06:2a:37:14:79:70:
a1:2e:16:a9:a9:b4:2e:6c:b4:8a:e0:3f:47:63:84:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:4C:BB:D3:0D:57:5D:21:0B:24:26:24:75:23:53:C1:6D:CE:59
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.69.0/24
51.194.168.0/22
51.194.176.0/22
51.194.184.0/22
78.105.159.0/24
78.105.171.0/24
78.105.190.0/24
78.105.205.0/24
78.105.213.0/24
94.116.80.0/22
94.116.92.0/22
94.116.112.0/22
94.116.128.0/22
188.220.97.0/24
188.220.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6f:51:35:4b:9a:4a:98:9e:ec:44:b5:75:98:1d:05:5f:59:
89:08:e6:4c:4c:17:d6:e2:3e:12:a8:38:02:3c:e9:e0:0b:73:
b9:73:c5:6c:e0:7f:e2:d9:22:a8:9e:81:17:10:16:c9:bd:2a:
91:2d:b7:f5:e4:32:36:c5:43:e7:87:7e:9e:2b:61:71:78:e8:
54:6b:0c:3a:3c:c6:3c:7d:24:e1:d1:72:75:71:b2:f7:cf:0f:
9c:e0:43:72:b1:c9:0b:aa:c1:38:37:40:3b:f6:35:70:38:9c:
13:10:00:23:de:d1:0d:83:55:2d:08:69:06:50:cc:52:52:5d:
64:2e:e6:68:f0:88:a5:d1:9f:fa:ed:64:21:f6:e8:f2:6e:69:
56:2b:ed:79:af:4a:0d:53:3b:f3:e1:19:76:6a:b4:f8:d5:48:
fa:80:b8:19:c7:cf:d0:08:89:d2:93:18:fb:ca:c8:38:b1:24:
b8:25:20:ce:84:c9:58:08:cb:ce:48:e4:51:6c:c3:50:48:f0:
d3:c9:6a:03:6f:37:b6:07:eb:6b:6f:24:51:8f:a6:cb:a0:b3:
e8:78:c0:49:9b:59:91:9c:89:3d:aa:6f:f4:4d:9d:26:1f:e4:
95:7d:31:15:18:6a:32:97:d7:a4:ce:e0:57:d4:4b:e2:2c:3c:
76:cb:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:18 2026 by rpki-client