Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: 6N+WR8MUKLdq/wVeGZSIE+U8U5e6p/XDNTF7x7q2HlM=
Subject key identifier: A7:B9:A3:ED:E7:4B:7F:5A:B4:D3:85:1D:36:60:62:F6:7E:35:6D:9E
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 037F989D13886E921FB867697E8FD9A5129F0ABB
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25369.roa
Signing time: Sun 04 Oct 2026 00:51:02 +0000
ROA not before: Sun 04 Oct 2026 00:46:02 +0000
ROA not after: Sun 03 Oct 2027 00:51:02 +0000
asID: 25369
IP address blocks: 109.66.20.0/23 maxlen: 24
109.66.40.0/23 maxlen: 24
109.66.60.0/24 maxlen: 24
109.66.96.0/23 maxlen: 24
109.66.110.0/23 maxlen: 24
109.66.152.0/23 maxlen: 24
109.66.204.0/23 maxlen: 24
109.66.220.0/23 maxlen: 24
109.66.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7f:98:9d:13:88:6e:92:1f:b8:67:69:7e:8f:d9:a5:12:9f:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:02 2026 GMT
Not After : Oct 3 00:51:02 2027 GMT
Subject: CN=A7B9A3EDE74B7F5AB4D3851D366062F67E356D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:02:16:e8:1b:8f:a5:21:21:5b:e6:38:cc:
c7:cb:e7:29:57:94:05:e8:89:6d:c4:ae:c9:04:0f:
a7:54:7f:9a:4e:fa:be:30:98:ee:02:d2:58:55:ec:
68:5a:54:21:9c:b9:f7:31:a1:4f:fe:10:e1:ee:df:
9f:76:61:32:b2:6a:d8:92:8e:c2:46:13:9a:0a:59:
e2:e0:a9:ae:d6:06:7f:97:34:ef:2e:91:bd:55:41:
9c:b2:41:71:11:78:26:64:dc:ad:84:4f:94:00:87:
6f:ab:91:b0:d8:d5:d6:84:cc:50:db:1a:b4:f4:75:
9f:c0:d0:36:6e:38:3d:04:3e:2b:7b:e5:86:80:ff:
b9:59:e1:78:ba:73:64:98:21:be:4e:ff:b9:91:c1:
f1:e5:0b:57:6d:ff:4b:31:18:cc:4d:69:49:37:66:
95:da:2b:31:be:cb:0c:13:9a:62:de:10:fc:1c:a0:
8a:88:46:df:a7:1e:22:66:dd:f9:93:03:79:e3:aa:
5a:c8:9c:09:3a:94:4b:bd:15:c0:1a:72:54:33:81:
aa:e3:ac:c6:88:97:4c:00:97:2f:01:4a:04:85:ca:
26:b4:a5:80:b5:f9:bf:63:21:d6:09:35:1c:b5:38:
b3:aa:8a:4d:c1:55:d8:20:aa:b8:4f:86:2e:81:b3:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:A3:ED:E7:4B:7F:5A:B4:D3:85:1D:36:60:62:F6:7E:35:6D:9E
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.20.0/23
109.66.40.0/23
109.66.60.0/24
109.66.96.0/23
109.66.110.0/23
109.66.152.0/23
109.66.204.0/23
109.66.220.0/23
109.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
37:b9:0a:d0:ae:a7:fe:ee:b1:01:2e:43:5f:0d:fc:29:b6:86:
c5:cd:57:99:23:6a:8d:f8:f7:55:31:bd:51:d0:82:95:4e:86:
e4:12:5f:1b:01:b1:25:54:b3:21:84:2e:e3:11:6d:11:60:e1:
2c:2f:7c:ce:d5:67:8f:dd:33:93:6e:7d:b6:00:91:64:3a:02:
80:71:51:f9:76:a2:60:76:98:27:00:56:d0:0a:87:b4:c1:b0:
c6:ac:2e:19:8e:00:84:e0:c0:dc:82:90:66:bb:ee:20:11:9e:
d1:38:4f:d4:f3:f3:32:05:a8:c6:0c:d2:f7:48:8e:20:de:a0:
1e:d2:32:6a:04:4b:42:ba:10:6b:6e:8c:10:da:55:60:f3:95:
df:1b:d7:a0:05:07:d5:71:4e:de:b4:1a:0b:38:2f:e5:c1:b0:
ea:cb:8c:12:84:bc:6b:c9:57:09:75:a6:52:9f:73:20:dd:06:
1b:29:54:a4:1b:f2:56:28:74:51:07:0a:b0:04:bf:58:d1:d2:
c2:2a:84:3b:cc:14:97:66:6d:f4:db:68:0f:cb:fe:4f:49:f4:
ad:10:68:23:d5:99:11:a1:c9:e4:1d:84:d3:ae:e9:de:ed:2b:
c0:e0:85:02:43:70:ee:e4:0b:e5:e1:9f:65:1d:f6:b5:da:a4:
f9:63:02:cf
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUA3+YnROIbpIfuGdpfo/ZpRKfCrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ2MDJaFw0yNzEwMDMwMDUxMDJaMDMxMTAvBgNV
BAMTKEE3QjlBM0VERTc0QjdGNUFCNEQzODUxRDM2NjA2MkY2N0UzNTZEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTgIW6BuPpSEhW+Y4zMfL5ylX
lAXoiW3ErskED6dUf5pO+r4wmO4C0lhV7GhaVCGcufcxoU/+EOHu3592YTKyatiS
jsJGE5oKWeLgqa7WBn+XNO8ukb1VQZyyQXEReCZk3K2ET5QAh2+rkbDY1daEzFDb
GrT0dZ/A0DZuOD0EPit75YaA/7lZ4Xi6c2SYIb5O/7mRwfHlC1dt/0sxGMxNaUk3
ZpXaKzG+ywwTmmLeEPwcoIqIRt+nHiJm3fmTA3njqlrInAk6lEu9FcAaclQzgarj
rMaIl0wAly8BSgSFyia0pYC1+b9jIdYJNRy1OLOqik3BVdggqrhPhi6Bs5p3AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUp7mj7edLf1q004UdNmBi9n41bZ4wHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMjUzNjkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAFtQhQD
BAFtQigDBABtQjwDBAFtQmADBAFtQm4DBAFtQpgDBAFtQswDBAFtQtwDBAFtQvow
DQYJKoZIhvcNAQELBQADggEBADe5CtCup/7usQEuQ18N/Cm2hsXNV5kjao3491Ux
vVHQgpVOhuQSXxsBsSVUsyGELuMRbRFg4SwvfM7VZ4/dM5NufbYAkWQ6AoBxUfl2
omB2mCcAVtAKh7TBsMasLhmOAITgwNyCkGa77iARntE4T9Tz8zIFqMYM0vdIjiDe
oB7SMmoES0K6EGtujBDaVWDzld8b16AFB9VxTt60Ggs4L+XBsOrLjBKEvGvJVwl1
plKfcyDdBhspVKQb8lYodFEHCrAEv1jR0sIqhDvMFJdmbfTbaA/L/k9J9K0QaCPV
mRGhyeQdhNOu6d7tK8DghQJDcO7kC+Xhn2Ud9rXapPljAs8=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:35 2026 by rpki-client