Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: XfmyWUzJP3GSIG2Xc7jzj/M7lOak33GdV/cEmds0XTU=
Subject key identifier: 23:C2:9E:25:38:5A:F2:62:CD:3C:2E:BB:4F:11:03:A7:C4:B3:A5:73
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 21AB15C24D56C31CFDDCD91B86938F742A35CBAE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
Signing time: Fri 10 Jul 2026 11:10:00 +0000
ROA not before: Fri 10 Jul 2026 11:05:00 +0000
ROA not after: Fri 09 Jul 2027 11:10:00 +0000
asID: 25369
IP address blocks: 82.38.130.0/24 maxlen: 24
82.38.199.0/24 maxlen: 24
82.39.141.0/24 maxlen: 24
82.39.189.0/24 maxlen: 24
82.39.209.0/24 maxlen: 24
82.47.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:15:c2:4d:56:c3:1c:fd:dc:d9:1b:86:93:8f:74:2a:35:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 10 11:05:00 2026 GMT
Not After : Jul 9 11:10:00 2027 GMT
Subject: CN=23C29E25385AF262CD3C2EBB4F1103A7C4B3A573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:21:1e:6e:50:1a:0f:ed:c3:b9:f6:b1:47:
ae:90:29:7d:d7:81:56:3f:4e:9a:32:88:6e:29:71:
d8:68:fb:fe:aa:0c:16:3f:c2:cc:38:ce:a4:40:b3:
35:e1:18:b8:2c:3a:33:64:f1:29:ce:8c:a4:0a:6b:
ce:49:6d:71:89:ee:28:09:ed:93:74:66:83:27:c6:
1f:9d:c2:cd:5b:b5:53:9f:04:17:5c:dd:82:1c:8d:
8f:8e:7a:31:49:d2:e7:66:d0:35:b5:53:ac:07:b6:
8c:91:86:e7:c2:a9:8d:ce:f7:28:5e:a4:b6:d9:6c:
3f:98:0e:82:53:19:f9:85:e3:46:5b:00:84:ac:7e:
a0:32:7a:91:e7:a1:4d:78:43:4f:88:ca:4e:a6:0c:
74:8e:89:68:ef:9c:c3:f4:46:74:93:20:94:1a:35:
c7:a8:4a:6f:b8:8a:27:e0:0a:43:63:78:2b:97:a6:
22:29:33:85:5b:15:82:07:55:d8:02:d8:d5:7a:57:
6d:e5:eb:ff:9c:0c:4d:3e:44:fc:e5:14:58:55:e3:
a9:81:c4:3d:a8:7d:26:9f:c0:76:be:80:b1:ca:20:
68:c5:23:2f:d4:81:4a:d1:f8:48:dd:4a:ca:af:c5:
49:8f:06:ff:52:91:8f:0c:24:b7:8e:36:49:44:09:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:9E:25:38:5A:F2:62:CD:3C:2E:BB:4F:11:03:A7:C4:B3:A5:73
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.130.0/24
82.38.199.0/24
82.39.141.0/24
82.39.189.0/24
82.39.209.0/24
82.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:35:85:6a:af:0f:37:bf:f2:94:ba:33:ce:c2:e9:9d:bd:fb:
1e:a7:fd:61:d5:c8:f5:a4:14:f2:8f:cd:cb:87:f1:b7:05:2e:
cf:c5:a1:0c:e8:57:e0:fa:82:6a:57:28:38:d7:d3:a6:42:7a:
7c:a9:66:76:b0:f3:23:f3:f0:64:93:77:e3:0d:3f:74:b1:a8:
74:43:3c:50:f5:ab:b8:84:6d:14:51:59:c6:2e:e7:1c:60:ce:
b4:d9:8a:b2:9d:aa:8c:52:1f:7f:df:90:60:5a:f9:f8:af:77:
e3:1b:06:b4:63:11:66:45:17:87:95:aa:3c:44:6b:19:6d:34:
9b:4f:34:dc:8e:4e:54:1d:11:41:99:94:a0:2f:a9:02:86:c5:
23:2f:d5:84:f6:43:30:69:9b:e5:5f:dd:13:09:73:09:87:7a:
16:1a:e5:35:d0:cd:f7:ee:cd:2a:d6:a5:fe:5a:10:83:29:93:
5b:7d:c6:a2:80:2b:36:fa:64:7c:df:11:5a:e5:b1:da:ee:7b:
f1:78:5c:35:ea:21:94:4d:f5:a6:17:d7:b8:71:df:3b:d0:cc:
36:44:90:87:e1:d5:35:66:d1:7a:83:67:1e:4e:11:a3:ab:89:
32:89:78:2a:94:48:63:b1:3f:2f:96:68:98:7c:a2:52:b6:af:
f4:f5:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:19 2026 by rpki-client