Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: 7JAmb866wKbrsuuAS80bZRYatxaNf4yc74fwwwESxTg=
Subject key identifier: EB:78:1D:3F:0C:5C:28:F5:6A:47:BA:DC:CB:D7:7C:B3:D2:BB:B4:82
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 75E6F9F3E7E8C82116A803D5468E2C08AEC7A741
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
Signing time: Fri 14 Aug 2026 13:15:46 +0000
ROA not before: Fri 14 Aug 2026 13:10:46 +0000
ROA not after: Fri 13 Aug 2027 13:15:46 +0000
asID: 25369
IP address blocks: 51.146.69.0/24 maxlen: 24
51.194.168.0/22 maxlen: 24
51.194.176.0/22 maxlen: 24
51.194.184.0/22 maxlen: 24
78.105.159.0/24 maxlen: 24
78.105.171.0/24 maxlen: 24
78.105.190.0/24 maxlen: 24
78.105.205.0/24 maxlen: 24
78.105.213.0/24 maxlen: 24
188.220.97.0/24 maxlen: 24
188.220.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e6:f9:f3:e7:e8:c8:21:16:a8:03:d5:46:8e:2c:08:ae:c7:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 13:10:46 2026 GMT
Not After : Aug 13 13:15:46 2027 GMT
Subject: CN=EB781D3F0C5C28F56A47BADCCBD77CB3D2BBB482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:5e:a6:b2:da:0f:b7:5b:1f:fb:cc:ad:79:
42:0c:8c:30:b7:40:6e:51:68:c8:43:6a:98:7d:30:
ce:c7:28:96:49:65:29:3d:35:4e:18:e9:ce:55:22:
fe:68:a6:7c:b2:46:a2:c5:21:bd:31:a6:16:36:ca:
73:1c:f6:ed:88:45:25:d4:12:25:09:86:44:db:d8:
b7:35:80:ec:5a:1a:a9:0d:a7:dd:1b:31:cc:ca:f4:
b6:b5:cf:97:02:0d:9f:6a:70:70:9e:df:eb:44:89:
53:ad:7a:93:02:1f:27:eb:94:3f:77:49:5e:d6:12:
6a:65:23:5a:72:e4:86:90:ab:93:8b:40:1e:8d:0e:
13:51:46:81:05:52:a4:3b:14:81:d7:ac:a8:97:35:
60:a0:e8:88:85:84:f5:f8:12:eb:5f:26:52:e4:f7:
21:c0:41:06:1c:74:1c:9f:c5:a2:ee:2f:5d:55:b8:
40:86:e7:be:36:a9:fc:d3:24:a2:88:40:2b:65:78:
a1:b1:4b:b1:6f:cf:d9:9a:15:42:2d:d7:ba:3f:0a:
b6:17:26:91:22:bf:46:3d:ff:ea:1e:11:9e:0b:80:
d4:d6:17:82:3a:28:da:36:78:df:e7:98:38:b6:7e:
b9:ca:bd:8f:5c:37:88:c2:8a:9b:e0:cf:b1:61:75:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:1D:3F:0C:5C:28:F5:6A:47:BA:DC:CB:D7:7C:B3:D2:BB:B4:82
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.69.0/24
51.194.168.0/22
51.194.176.0/22
51.194.184.0/22
78.105.159.0/24
78.105.171.0/24
78.105.190.0/24
78.105.205.0/24
78.105.213.0/24
188.220.97.0/24
188.220.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:6b:84:f8:22:4c:60:c5:ca:9b:b3:9b:dd:a0:02:43:37:b7:
a0:7d:9d:18:99:51:50:7f:f8:22:48:ee:a1:c6:bf:5a:15:a2:
ed:5f:cb:21:a3:84:8b:41:54:a4:e0:d3:67:f7:e4:d8:46:bf:
6d:51:11:11:63:f3:a8:b2:05:63:8e:1f:78:4c:cd:d6:be:bd:
82:c0:95:64:22:51:2e:c2:cc:6b:e2:82:ab:57:0a:d5:31:d3:
20:b5:11:c5:05:43:51:7e:29:ff:0c:19:32:04:d1:64:34:5b:
69:3b:26:47:71:05:75:66:76:c0:7c:df:f2:92:6a:72:93:c1:
48:2a:ff:9e:93:c3:86:7b:b0:42:dc:aa:3f:74:d2:5d:f7:ce:
73:2c:70:8e:6a:33:67:c2:21:07:38:08:09:68:09:d7:21:ea:
9e:ab:62:79:bd:57:99:ff:5b:73:90:c6:72:3c:77:f7:85:a9:
4a:20:9a:03:6a:a1:69:4a:1b:66:8c:c2:8e:b5:8c:e1:d1:2b:
cd:da:5c:6f:e6:17:9a:2c:cd:0c:a4:c4:f0:af:da:ba:65:d5:
32:e7:de:5f:f3:77:4b:fc:f4:18:a8:49:08:fc:0c:a8:e2:d6:
be:78:8b:77:f5:54:0e:29:16:e6:31:17:70:b9:57:4e:f2:e4:
d8:77:29:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 03:29:56 2026 by rpki-client