Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: lgOc722Abd891SWWJvGBdLVx/sYKfwe9T9UFYo2Rb1w=
Subject key identifier: 20:93:75:32:D3:E2:F9:75:2F:F1:7F:26:7A:1E:53:F0:CC:C8:47:8D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0390273A2A60FD30FBDC8657D3AE10E8CFEDADEF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25369.roa
Signing time: Tue 14 Jul 2026 16:09:30 +0000
ROA not before: Tue 14 Jul 2026 16:04:30 +0000
ROA not after: Tue 13 Jul 2027 16:09:30 +0000
asID: 25369
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:90:27:3a:2a:60:fd:30:fb:dc:86:57:d3:ae:10:e8:cf:ed:ad:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 14 16:04:30 2026 GMT
Not After : Jul 13 16:09:30 2027 GMT
Subject: CN=20937532D3E2F9752FF17F267A1E53F0CCC8478D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:4e:5e:a2:8b:0c:a2:88:de:81:38:3c:86:
71:1b:59:47:cd:b2:b5:8d:f4:e2:85:7f:64:56:2e:
69:65:79:86:df:ca:f8:dc:6c:ce:ca:0b:bf:cd:a8:
77:12:50:d0:c3:c4:b5:07:7a:99:fa:11:f8:0f:d9:
da:c5:d3:19:d0:47:73:4d:c4:4a:1f:4c:84:7e:78:
6e:ba:77:e7:13:93:4a:e4:82:4e:72:6a:f0:d0:0f:
7e:e5:c3:44:81:23:27:10:9e:ee:a4:69:fa:15:0e:
a3:5d:99:ba:d6:75:87:a7:d4:64:50:41:91:19:9c:
5f:8e:38:ad:7f:3e:cf:43:b9:3c:b3:8f:47:5b:17:
b7:71:32:34:9a:34:73:d1:76:74:4a:8d:14:c1:f3:
97:0f:95:8d:8d:b3:e4:61:31:e8:cc:8c:4f:d7:de:
fe:13:1f:04:e4:df:f1:ea:3d:1d:cd:53:b3:6b:f2:
38:42:31:c8:ce:05:8d:2d:0f:d4:d3:30:b8:43:c7:
5f:c8:4d:51:01:3a:e1:12:4d:9c:d0:47:a8:58:35:
2a:29:35:3b:e2:cf:dc:cb:c4:28:e6:a9:f5:d1:9d:
3f:34:92:6e:a7:7d:26:96:59:db:73:8f:ff:28:55:
20:2a:e9:f8:9e:ef:05:be:21:24:6f:43:40:5a:bd:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:75:32:D3:E2:F9:75:2F:F1:7F:26:7A:1E:53:F0:CC:C8:47:8D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0f:47:e0:b3:89:1e:d6:4f:be:28:57:7b:d6:01:25:f4:ca:
ac:d5:f0:4f:ae:a7:97:07:02:14:85:d9:70:73:8f:24:be:84:
69:79:be:da:b4:3e:fa:12:fd:76:da:2e:d7:e9:8f:ee:51:09:
1c:b1:dd:ca:ac:c5:67:d3:69:73:75:c7:6b:0a:aa:34:4e:00:
12:45:2c:c4:02:05:0b:ec:be:52:5b:31:58:d5:f4:ee:1e:33:
e0:d9:78:04:08:4a:8a:9b:81:88:4b:5d:05:a4:d8:ed:1a:08:
bf:30:28:7e:d0:a9:27:d6:79:ca:e7:79:07:96:9a:6b:c4:33:
cc:c3:71:28:5d:ed:30:d3:65:04:41:69:93:a7:7c:76:f5:a8:
7f:0d:58:13:d1:c2:21:d8:8b:cd:96:97:7a:69:21:d4:38:76:
a8:4f:e4:c6:05:ce:26:bc:78:37:f8:4b:16:ac:dc:fa:5e:23:
6a:27:93:26:ac:94:bd:8f:d4:c9:82:5c:6f:69:a5:c1:84:4c:
c3:02:25:eb:fa:f3:84:cc:70:75:9f:25:44:53:37:ba:00:3c:
55:cb:29:1f:37:cc:16:21:67:fe:69:36:08:c4:4a:4c:45:07:
1c:f2:c1:64:71:ac:95:81:df:f5:92:fa:2c:ef:ab:be:b4:c3:
1d:3c:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:28:05 2026 by rpki-client