$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: DQGnE2D1z0J8FBSnh+Yo6t7MF9FUteVLpM6pbEoa3Jc= Subject key identifier: 34:90:C9:47:9E:90:CF:5F:0F:07:93:B7:47:DE:5E:BF:56:29:D7:92 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 109042152C62A39786E48F2564AB274B18BDC2C4 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 9304 IP address blocks: 152.237.241.0/24 maxlen: 24 152.237.242.0/24 maxlen: 24 152.237.243.0/24 maxlen: 24 186.241.160.0/24 maxlen: 24 186.241.164.0/24 maxlen: 24 186.241.166.0/24 maxlen: 24 186.241.168.0/24 maxlen: 24 186.241.169.0/24 maxlen: 24 186.241.170.0/24 maxlen: 24 186.241.171.0/24 maxlen: 24 186.241.172.0/24 maxlen: 24 186.241.173.0/24 maxlen: 24 186.241.174.0/24 maxlen: 24 186.241.175.0/24 maxlen: 24 201.4.19.0/24 maxlen: 24 201.4.20.0/24 maxlen: 24 201.4.23.0/24 maxlen: 24 201.4.24.0/24 maxlen: 24 201.4.25.0/24 maxlen: 24 201.4.26.0/24 maxlen: 24 201.4.27.0/24 maxlen: 24 201.4.28.0/24 maxlen: 24 201.4.29.0/24 maxlen: 24 201.50.16.0/24 maxlen: 24 201.50.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:90:42:15:2c:62:a3:97:86:e4:8f:25:64:ab:27:4b:18:bd:c2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=3490C9479E90CF5F0F0793B747DE5EBF5629D792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:c9:aa:5e:da:96:e1:61:ef:42:78:d5:30: f4:2e:b5:5d:26:15:7d:09:47:c4:69:f9:3a:4a:1d: 7f:4b:82:6b:6e:63:d0:8d:74:70:0c:20:ba:28:9d: 2f:6c:0a:34:bc:e4:3e:4e:4e:af:56:a9:70:d1:45: c4:7f:c6:78:e5:2e:de:4d:68:b2:35:0b:e2:40:62: 93:e1:7f:77:3f:c0:b5:d2:0b:d6:35:4d:86:51:c4: fe:ac:f1:12:fd:aa:c0:9d:9e:72:23:a0:bd:d2:e1: af:20:06:46:7f:6d:e5:3d:23:62:1c:e1:9b:7f:5d: 81:3a:41:0f:0f:fd:c8:83:38:ef:6e:25:5a:07:a9: 6c:39:10:1b:cd:d3:2e:9f:b0:30:7a:26:71:a2:47: 53:e4:03:5e:2f:31:09:1c:9c:11:c5:99:67:96:c9: e3:99:78:f0:47:44:06:93:a3:0f:69:17:00:10:1f: d3:ee:8d:c5:aa:02:09:07:1e:ae:9d:eb:df:a5:85: 12:ae:f6:b1:ec:fa:52:b2:96:a3:0f:72:cf:c3:22: c5:87:c9:c9:08:09:e7:f9:a7:f2:b2:ff:3c:bf:8b: 37:ed:be:04:0b:48:78:93:8b:6f:89:71:1a:22:8b: 2e:62:c6:7a:d9:0b:e8:c9:b7:be:db:86:ba:f5:03: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:90:C9:47:9E:90:CF:5F:0F:07:93:B7:47:DE:5E:BF:56:29:D7:92 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.241.0-152.237.243.255 186.241.160.0/24 186.241.164.0/24 186.241.166.0/24 186.241.168.0/21 201.4.19.0-201.4.20.255 201.4.23.0-201.4.29.255 201.50.16.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:bb:69:3f:5c:e3:b4:f0:d2:ec:25:8f:ee:7f:48:ac:6c:cc: d0:d0:f7:9d:09:df:2b:9b:3a:cf:d2:ba:77:7d:54:cb:3e:18: 07:39:0d:33:88:73:64:4a:89:19:40:12:d3:98:7e:9d:ef:23: e1:60:2e:88:7a:f9:21:7f:33:5b:c6:23:af:37:fb:1d:c9:b9: b0:90:4f:97:4e:4d:91:3c:8b:80:00:2b:24:1c:4b:c4:e2:3a: ec:5f:ed:f5:5b:7e:6e:48:fe:6d:e4:c7:d7:93:63:8e:fe:71: bb:c9:fc:65:0e:16:46:05:fc:f5:e1:ce:20:96:9a:7f:a2:2d: ff:91:47:fb:5a:0a:67:5b:79:52:85:bb:97:7f:20:45:d7:5f: e4:e8:2c:a8:61:fa:83:cb:2a:e2:f7:7b:28:28:18:49:bc:88: 69:7e:88:04:62:51:e7:9c:c3:33:7d:bb:f2:c6:ec:b1:4e:71: 5b:87:78:0c:a2:bc:d6:81:f3:49:71:fd:9d:97:b0:99:93:b9: 93:d5:2a:8e:13:1c:5e:5e:d0:30:41:54:99:da:00:9c:26:1e: 4f:6e:99:a1:36:39:0f:63:d2:91:9e:e4:9c:74:ec:30:29:41: d5:54:b1:71:d2:29:fe:70:9f:df:d7:39:d7:5c:72:19:7f:dd: 69:42:c0:bf -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEJBCFSxio5eG5I8lZKsnSxi9wsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDM0OTBDOTQ3OUU5MENGNUYwRjA3OTNCNzQ3REU1RUJGNTYyOUQ3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHMmqXtqW4WHvQnjVMPQutV0m FX0JR8Rp+TpKHX9LgmtuY9CNdHAMILoonS9sCjS85D5OTq9WqXDRRcR/xnjlLt5N aLI1C+JAYpPhf3c/wLXSC9Y1TYZRxP6s8RL9qsCdnnIjoL3S4a8gBkZ/beU9I2Ic 4Zt/XYE6QQ8P/ciDOO9uJVoHqWw5EBvN0y6fsDB6JnGiR1PkA14vMQkcnBHFmWeW yeOZePBHRAaTow9pFwAQH9PujcWqAgkHHq6d69+lhRKu9rHs+lKylqMPcs/DIsWH yckICef5p/Ky/zy/izftvgQLSHiTi2+JcRoiiy5ixnrZC+jJt77bhrr1A+9tAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUNJDJR56Qz18PB5O3R95ev1Yp15IwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIA ATBIMAwDBACY7fEDBAKY7fADBAC68aADBAC68aQDBAC68aYDBAO68agwDAMEAMkE EwMEAMkEFDAMAwQAyQQXAwQByQQcAwQByTIQMA0GCSqGSIb3DQEBCwUAA4IBAQBb u2k/XOO08NLsJY/uf0isbMzQ0PedCd8rmzrP0rp3fVTLPhgHOQ0ziHNkSokZQBLT mH6d7yPhYC6IevkhfzNbxiOvN/sdybmwkE+XTk2RPIuAACskHEvE4jrsX+31W35u SP5t5MfXk2OO/nG7yfxlDhZGBfz14c4glpp/oi3/kUf7WgpnW3lShbuXfyBF11/k 6CyoYfqDyyri93soKBhJvIhpfogEYlHnnMMzfbvyxuyxTnFbh3gMorzWgfNJcf2d l7CZk7mT1SqOExxeXtAwQVSZ2gCcJh5PbpmhNjkPY9KRnuScdOwwKUHVVLFx0in+ cJ/f1znXXHIZf91pQsC/ -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:34 2026 by rpki-client