Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: 9PXFstMBVzr4IgzVefqDFI+tQ2vVjXqrt3jBfxHtym0=
Subject key identifier: E0:01:8F:E9:2C:D2:57:2F:7D:3E:92:A9:F2:54:59:D7:87:86:03:F5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 25940CC4CA0FD6028419DC253ED36C6BBE371F56
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
Signing time: Fri 09 Oct 2026 11:10:51 +0000
ROA not before: Fri 09 Oct 2026 11:05:51 +0000
ROA not after: Fri 08 Oct 2027 11:10:51 +0000
asID: 25369
IP address blocks: 2.57.17.0/24 maxlen: 24
5.252.83.0/24 maxlen: 24
45.133.173.0/24 maxlen: 24
85.209.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:94:0c:c4:ca:0f:d6:02:84:19:dc:25:3e:d3:6c:6b:be:37:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 9 11:05:51 2026 GMT
Not After : Oct 8 11:10:51 2027 GMT
Subject: CN=E0018FE92CD2572F7D3E92A9F25459D7878603F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:52:f7:89:5b:45:54:c6:20:f3:f4:ad:fb:
f7:c3:47:6e:25:6c:bb:a4:77:0f:22:b0:c0:0c:e2:
bb:99:bf:67:23:e6:4b:42:87:b6:44:e7:aa:54:3a:
1d:90:0a:c2:6f:3f:07:3d:24:2c:69:2a:32:a7:cd:
7f:f0:b7:31:ce:fc:5e:a9:23:54:c9:53:46:cc:90:
71:dd:c9:bc:21:12:66:b6:f7:78:30:2a:2f:ef:52:
50:cf:c9:c4:31:89:fc:3b:2f:50:60:2a:b9:7e:ba:
3f:13:49:00:f5:71:28:d3:93:39:6b:db:e0:9b:1e:
ef:3b:1b:99:16:d8:d2:08:15:2a:5d:88:2e:f8:02:
79:c5:e4:c5:41:cd:a3:7d:3f:36:98:6c:19:f9:3f:
d5:24:12:1b:ef:31:fa:8c:e8:17:b2:5a:cb:60:54:
ed:35:f0:c1:11:b7:5f:7e:92:5f:98:0b:ec:21:8b:
ce:dd:0b:f9:6b:bf:dc:29:ae:65:ff:5a:77:71:0d:
40:a2:07:2a:c2:63:b9:ed:33:77:70:c5:0f:a9:3e:
18:08:18:a3:5c:96:4f:b4:59:a7:45:55:51:32:fc:
9f:d7:f8:a7:0e:61:8c:b0:44:21:6a:39:c3:ac:fc:
d0:12:f4:52:3e:a0:d2:9a:0f:68:a6:b9:fd:f9:7b:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:8F:E9:2C:D2:57:2F:7D:3E:92:A9:F2:54:59:D7:87:86:03:F5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.17.0/24
5.252.83.0/24
45.133.173.0/24
85.209.177.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6c:63:76:76:5f:1f:17:94:ff:44:32:61:43:10:8d:cb:c7:
d2:c6:b2:9b:cb:67:5f:64:26:d7:35:45:dc:94:40:86:0a:f7:
cb:55:65:85:7f:07:aa:66:ca:73:b6:1a:bb:5e:69:67:3a:c6:
19:ac:37:e1:bd:df:b9:4f:66:ef:cd:cd:17:ad:74:3a:3f:4a:
af:a7:95:41:81:0b:d2:65:70:0d:02:7e:58:d9:f0:13:9d:3b:
10:f6:2f:66:a2:3e:8d:48:9c:dc:d5:e0:41:48:f0:c5:89:d2:
d7:44:8c:3c:30:32:63:61:a5:66:1d:a4:56:17:f7:c3:ed:4b:
16:70:a2:95:8b:eb:68:ec:28:bf:a1:f6:0a:40:e9:3a:40:aa:
43:70:2a:02:fa:e5:04:d1:b2:7e:c8:af:1a:db:44:7c:0a:c5:
3b:84:b1:59:d0:d3:9a:6f:d4:06:37:4b:3c:9e:5b:d3:bd:05:
ae:4c:94:b0:a2:2c:e9:bb:47:83:d7:21:2d:3f:25:45:3c:dc:
ce:13:20:11:77:76:11:5b:ed:e1:17:df:b8:19:71:71:fd:b7:
7d:47:72:20:4a:43:94:40:6f:96:3b:67:16:d8:01:90:bb:4b:
38:77:c8:61:ae:7f:13:ac:f0:58:18:e4:89:29:95:de:e3:a8:
87:7c:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:11 2026 by rpki-client