Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: b16pC0ejwEQPwsAsSQfDrnDmKgwh4tOBq0xKp2bUjNk=
Subject key identifier: 07:CF:2E:BA:41:35:31:F2:EA:40:5A:0F:92:B0:EA:7F:0F:67:45:6E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7BD357D28F47CFE843BFDCDD23B64EE367A545F2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25369.roa
Signing time: Wed 09 Sep 2026 10:43:07 +0000
ROA not before: Wed 09 Sep 2026 10:38:07 +0000
ROA not after: Wed 08 Sep 2027 10:43:07 +0000
asID: 25369
IP address blocks: 178.95.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d3:57:d2:8f:47:cf:e8:43:bf:dc:dd:23:b6:4e:e3:67:a5:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 9 10:38:07 2026 GMT
Not After : Sep 8 10:43:07 2027 GMT
Subject: CN=07CF2EBA413531F2EA405A0F92B0EA7F0F67456E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:a1:4b:62:02:4a:c5:b6:1f:a6:8f:61:d3:
5f:61:d9:d6:06:74:98:ad:c2:fa:17:1f:05:64:1b:
a0:71:0e:5d:bd:c2:3a:9f:d6:ef:d1:92:a8:64:e3:
47:fa:24:00:5f:00:e1:03:c1:57:8c:c4:bd:d6:6c:
34:4a:69:e9:03:61:13:31:1a:63:e4:b7:5b:fb:99:
24:09:bd:ae:ba:9b:97:41:29:df:7f:46:0b:9a:83:
16:d1:e0:2e:f3:a0:68:6f:f4:fb:02:9f:b5:b0:66:
fc:fe:76:c2:24:46:1f:5a:cd:25:25:f8:d8:94:23:
ef:be:ce:7d:39:57:14:9c:f9:00:b9:1b:9b:fb:fb:
34:dd:bd:80:33:dd:f4:19:0b:3d:15:f0:59:82:3d:
69:be:3e:5f:c9:dc:14:ac:90:40:97:ca:78:7e:41:
d5:9e:65:e4:33:3a:85:ea:29:a3:5c:10:61:12:a3:
9e:fd:7b:45:d2:44:c7:6c:58:5f:d1:36:32:67:53:
f8:d4:c6:c6:e9:90:64:f0:09:cf:a2:e2:17:e0:9c:
e3:18:ec:3e:1c:eb:4e:29:20:94:b2:3d:9a:af:c4:
c8:f2:9d:c9:15:af:0c:01:b9:7b:99:81:61:ce:4d:
41:5d:ae:c8:55:c8:57:7d:57:c5:9f:6a:c1:0a:19:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:2E:BA:41:35:31:F2:EA:40:5A:0F:92:B0:EA:7F:0F:67:45:6E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.163.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cd:67:3a:e1:37:8f:41:f4:ac:e8:63:34:6c:ad:1e:17:6d:
a6:80:d9:d8:86:0d:d7:c6:5d:3c:93:6e:c8:60:64:72:a7:4c:
d0:73:3f:49:f2:3d:3e:48:cf:28:12:27:f6:09:64:6e:b7:d0:
5b:cb:6b:ec:88:85:a8:e7:c5:80:7c:d6:92:3e:43:52:43:7a:
05:cf:30:db:c3:1f:4c:e6:cd:08:24:24:49:91:7d:6c:0b:08:
84:e0:2e:26:53:04:8c:1f:4e:a2:3b:97:71:02:b0:29:3e:6b:
6a:5f:57:01:72:0a:29:a0:46:3d:32:fd:b5:be:9a:95:a8:d0:
d4:b4:f1:3f:93:ea:ff:f6:d2:40:4b:18:4d:20:59:c0:44:f7:
28:3b:07:83:9a:c8:e5:4e:94:d7:3b:04:4e:b9:06:c6:09:eb:
e5:0a:47:6b:6f:43:98:65:f5:30:92:c5:3d:ce:cb:df:92:43:
90:55:e7:5b:dc:e4:63:02:de:89:8b:11:82:ec:95:80:cc:f2:
9b:62:ff:f7:8c:84:44:61:df:7c:3d:d0:c7:ee:ea:fe:0e:51:
36:fb:8e:3f:38:05:7d:68:5e:88:d0:28:3c:df:0b:39:33:ac:
f1:da:27:68:4c:c0:1f:34:e0:a9:5c:21:a2:71:5b:c0:1e:cd:
41:15:d3:d4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUe9NX0o9Hz+hDv9zdI7ZO42elRfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MDkxMDM4MDdaFw0yNzA5MDgxMDQzMDdaMDMxMTAvBgNV
BAMTKDA3Q0YyRUJBNDEzNTMxRjJFQTQwNUEwRjkyQjBFQTdGMEY2NzQ1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi3aFLYgJKxbYfpo9h019h2dYG
dJitwvoXHwVkG6BxDl29wjqf1u/Rkqhk40f6JABfAOEDwVeMxL3WbDRKaekDYRMx
GmPkt1v7mSQJva66m5dBKd9/RguagxbR4C7zoGhv9PsCn7WwZvz+dsIkRh9azSUl
+NiUI+++zn05VxSc+QC5G5v7+zTdvYAz3fQZCz0V8FmCPWm+Pl/J3BSskECXynh+
QdWeZeQzOoXqKaNcEGESo579e0XSRMdsWF/RNjJnU/jUxsbpkGTwCc+i4hfgnOMY
7D4c604pIJSyPZqvxMjynckVrwwBuXuZgWHOTUFdrshVyFd9V8WfasEKGUVVAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUB88uukE1MfLqQFoPkrDqfw9nRW4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjUzNjkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACyX6Mw
DQYJKoZIhvcNAQELBQADggEBACjNZzrhN49B9KzoYzRsrR4XbaaA2diGDdfGXTyT
bshgZHKnTNBzP0nyPT5IzygSJ/YJZG630FvLa+yIhajnxYB81pI+Q1JDegXPMNvD
H0zmzQgkJEmRfWwLCITgLiZTBIwfTqI7l3ECsCk+a2pfVwFyCimgRj0y/bW+mpWo
0NS08T+T6v/20kBLGE0gWcBE9yg7B4OayOVOlNc7BE65BsYJ6+UKR2tvQ5hl9TCS
xT3Oy9+SQ5BV51vc5GMC3omLEYLslYDM8pti//eMhERh33w90Mfu6v4OUTb7jj84
BX1oXojQKDzfCzkzrPHaJ2hMwB804KlcIaJxW8AezUEV09Q=
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:48:45 2026 by rpki-client