Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: E838ExfpFNejhjlhRG+E9WvMfOBGXGrwfKLq4ZRcoHc=
Subject key identifier: 02:3C:24:06:A0:BA:88:18:62:0E:90:02:0C:E1:5C:AD:2A:83:F6:7F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0D6054D8C5064D0420E07C1663C454EEA33198DC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
Signing time: Sat 17 Oct 2026 13:55:36 +0000
ROA not before: Sat 17 Oct 2026 13:50:36 +0000
ROA not after: Sat 16 Oct 2027 13:55:36 +0000
asID: 25369
IP address blocks: 140.233.162.0/24 maxlen: 24
167.148.172.0/24 maxlen: 24
167.148.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 10:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:60:54:d8:c5:06:4d:04:20:e0:7c:16:63:c4:54:ee:a3:31:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 13:50:36 2026 GMT
Not After : Oct 16 13:55:36 2027 GMT
Subject: CN=023C2406A0BA8818620E90020CE15CAD2A83F67F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a1:2b:45:e8:47:54:6d:06:a1:13:90:5c:ec:
22:63:ec:f7:71:5b:df:8e:0c:57:7a:b2:a9:e6:7d:
1e:0a:ad:c6:e1:0c:27:97:f3:5a:2b:fb:04:a1:85:
de:3e:83:15:ea:50:53:02:30:02:59:03:5e:5e:8c:
bf:cd:10:e6:f5:05:48:36:3d:9c:54:ff:11:fb:ca:
13:8a:0d:2e:31:ab:80:eb:fd:94:0e:1b:bd:d2:5d:
f7:ba:b6:a2:78:02:5c:ba:e0:5a:f5:90:70:6d:17:
88:94:2d:8c:2b:69:ba:d2:d8:34:6b:5a:c9:cc:27:
8b:65:d6:57:a7:c9:9a:ea:42:9c:aa:a9:ae:c5:ed:
db:bf:e4:a9:20:1d:ba:4a:3c:31:ad:7c:e7:04:62:
96:7d:73:46:cb:e0:a2:9f:ab:d8:a0:16:57:19:5b:
53:a1:72:0d:47:d8:85:9d:c1:de:51:90:c7:a3:e0:
d6:83:cb:6b:b2:48:89:1a:10:23:d9:ef:82:58:91:
53:cf:38:6a:60:a0:52:5e:fa:c0:0c:2b:5c:0d:3c:
90:84:d6:13:8e:3e:26:a7:0e:e3:65:80:46:23:37:
9b:dd:b8:c7:a4:67:3a:e5:7d:55:c7:d0:e6:37:84:
5a:06:72:0c:fb:e3:54:a3:27:2e:db:fb:50:3a:49:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3C:24:06:A0:BA:88:18:62:0E:90:02:0C:E1:5C:AD:2A:83:F6:7F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.162.0/24
167.148.172.0/24
167.148.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:37:6f:f6:39:29:a1:61:52:fb:f5:b5:1d:90:2b:d5:d0:d7:
c6:b2:3d:12:88:d6:3e:8a:92:3e:85:46:4f:b7:c8:cf:af:25:
b1:55:c9:b8:9a:57:1c:41:e1:8b:51:4c:0a:64:f1:2c:f4:18:
ed:d9:33:75:2d:85:18:1f:5e:1d:39:a0:a7:a1:60:3a:ed:cc:
65:f4:d1:43:40:2f:5b:9c:09:99:0d:32:76:b8:af:97:ae:6f:
41:89:9e:7c:9b:19:dd:d0:72:fd:91:a3:f0:bf:28:27:b7:7c:
e3:08:d4:18:4e:81:f8:9e:dc:50:e0:7f:37:56:1b:f5:6e:fa:
bd:2b:27:06:1d:e5:6b:12:12:46:fb:60:dd:09:cd:9b:84:e6:
b0:c2:c9:41:84:31:3e:83:09:2c:43:c2:03:fe:4d:7f:d5:85:
71:22:cc:94:b1:cd:70:1f:bc:6e:a0:24:08:0e:f2:0f:0f:68:
9d:b1:b4:5b:31:57:26:c1:be:9e:08:b5:44:7c:65:9f:d4:96:
58:58:93:28:4d:63:56:4b:ee:d8:a4:11:46:64:ac:fb:e6:c8:
63:43:c6:d7:09:ad:1a:5f:7a:f8:da:0d:55:9e:71:6b:5e:37:
1a:e8:fd:48:0b:a5:39:5d:f4:44:35:d4:e4:b6:85:6a:1d:33:
a9:5a:ac:38
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDWBU2MUGTQQg4HwWY8RU7qMxmNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMTcxMzUwMzZaFw0yNzEwMTYxMzU1MzZaMDMxMTAvBgNV
BAMTKDAyM0MyNDA2QTBCQTg4MTg2MjBFOTAwMjBDRTE1Q0FEMkE4M0Y2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoStF6EdUbQahE5Bc7CJj7Pdx
W9+ODFd6sqnmfR4KrcbhDCeX81or+wShhd4+gxXqUFMCMAJZA15ejL/NEOb1BUg2
PZxU/xH7yhOKDS4xq4Dr/ZQOG73SXfe6tqJ4Aly64Fr1kHBtF4iULYwrabrS2DRr
WsnMJ4tl1lenyZrqQpyqqa7F7du/5KkgHbpKPDGtfOcEYpZ9c0bL4KKfq9igFlcZ
W1Ohcg1H2IWdwd5RkMej4NaDy2uySIkaECPZ74JYkVPPOGpgoFJe+sAMK1wNPJCE
1hOOPianDuNlgEYjN5vduMekZzrlfVXH0OY3hFoGcgz741SjJy7b+1A6Sdw/AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUAjwkBqC6iBhiDpACDOFcrSqD9n8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjUzNjkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACM6aID
BACnlKwDBACnlLowDQYJKoZIhvcNAQELBQADggEBAAs3b/Y5KaFhUvv1tR2QK9XQ
18ayPRKI1j6Kkj6FRk+3yM+vJbFVybiaVxxB4YtRTApk8Sz0GO3ZM3UthRgfXh05
oKehYDrtzGX00UNAL1ucCZkNMna4r5eub0GJnnybGd3Qcv2Ro/C/KCe3fOMI1BhO
gfie3FDgfzdWG/Vu+r0rJwYd5WsSEkb7YN0JzZuE5rDCyUGEMT6DCSxDwgP+TX/V
hXEizJSxzXAfvG6gJAgO8g8PaJ2xtFsxVybBvp4ItUR8ZZ/UllhYkyhNY1ZL7tik
EUZkrPvmyGNDxtcJrRpfevjaDVWecWteNxro/UgLpTld9EQ11OS2hWodM6larDg=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:51 2026 by rpki-client