$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: oRgZJwvLzY8cb73P8+ClluFYoGQhGRGV5waWkK9GA9E= Subject key identifier: 55:71:30:BE:35:2C:42:B1:8A:18:B1:A3:3A:B5:26:DE:F0:72:E4:74 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 0BAF53B7F0E9E4E80DDF92097F143468C55BBF22 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa Signing time: Mon 12 Oct 2026 14:47:19 +0000 ROA not before: Mon 12 Oct 2026 14:42:19 +0000 ROA not after: Mon 11 Oct 2027 14:47:19 +0000 asID: 9304 IP address blocks: 152.237.224.0/24 maxlen: 24 152.237.242.0/24 maxlen: 24 152.237.243.0/24 maxlen: 24 186.241.160.0/24 maxlen: 24 186.241.168.0/24 maxlen: 24 186.241.171.0/24 maxlen: 24 186.241.172.0/24 maxlen: 24 186.241.173.0/24 maxlen: 24 186.241.188.0/24 maxlen: 24 201.4.26.0/24 maxlen: 24 201.4.28.0/24 maxlen: 24 201.50.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:53:b7:f0:e9:e4:e8:0d:df:92:09:7f:14:34:68:c5:5b:bf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 12 14:42:19 2026 GMT Not After : Oct 11 14:47:19 2027 GMT Subject: CN=557130BE352C42B18A18B1A33AB526DEF072E474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:41:53:06:bf:41:17:49:64:2e:3f:d1:e3: 83:63:29:a8:64:8f:e9:c4:19:43:83:a6:46:47:99: e7:41:73:f7:c2:17:3f:1d:0f:f5:b3:5f:9a:a2:7c: f0:20:3a:28:02:03:75:29:35:af:39:90:0d:0b:b8: 37:f7:27:ea:6d:85:14:8d:e0:f7:7f:be:ff:30:10: a7:95:81:b7:f4:18:c3:88:ad:c9:cf:90:35:a9:df: c0:c7:88:cb:e0:eb:0b:33:4b:e1:cb:d5:4e:0d:e5: 29:95:49:98:91:de:b8:3b:28:2b:1f:c8:da:33:44: 21:6a:b2:ad:4d:80:0d:98:27:79:7b:2b:42:a7:45: 1e:28:d4:1b:d0:08:cd:4b:51:19:1a:d5:56:6a:de: a7:a6:82:6d:f9:8b:11:e6:b7:b9:ab:3f:9b:ec:1d: 52:44:6c:93:48:f6:96:6e:84:91:46:d4:64:ce:ae: ad:3f:f5:c9:6b:56:e1:2f:f8:e1:ff:84:5b:81:1b: d0:1c:ed:61:91:9f:f0:30:dc:e8:61:64:a8:fe:ad: 5d:02:bc:ba:c1:0d:b7:1a:fc:a4:cb:00:0c:53:3f: 9c:d1:51:db:fa:8d:44:5b:ba:ef:5f:ad:67:a8:96: 65:44:2f:c4:6d:ef:6a:ea:92:77:cc:5d:07:e1:23: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:30:BE:35:2C:42:B1:8A:18:B1:A3:3A:B5:26:DE:F0:72:E4:74 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.224.0/24 152.237.242.0/23 186.241.160.0/24 186.241.168.0/24 186.241.171.0-186.241.173.255 186.241.188.0/24 201.4.26.0/24 201.4.28.0/24 201.50.16.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:32:72:12:cf:2a:d5:62:5b:72:38:87:d1:23:61:66:62:9c: bb:d2:54:bc:4d:d3:e3:ad:81:c8:d9:2e:49:88:7b:de:4e:55: 33:ae:0d:08:58:48:83:4a:a4:9e:60:a6:80:85:45:72:80:b9: 3c:7f:83:dc:9a:79:c2:61:bb:46:d5:e7:d7:9b:b8:ac:3b:60: 92:c5:0b:4b:96:5b:fc:ea:9d:81:89:8e:41:88:c8:f4:7d:e3: 74:90:aa:48:a7:dc:72:91:68:9e:b9:76:b3:fe:ab:b4:50:95: 47:50:d3:99:b0:7c:2b:d9:12:de:37:50:e1:fb:10:0c:4c:4c: cd:f2:96:58:58:fa:5c:1d:12:8a:2d:f7:bb:79:29:a2:a7:69: 70:26:19:67:1a:2c:ba:ab:22:66:23:6f:14:16:bf:98:a8:bc: 4d:74:94:70:92:2d:3f:ba:6d:97:4e:52:35:b7:56:ca:b4:e8: 7a:01:89:90:3a:d7:36:ea:0d:38:f3:1c:44:aa:b7:d3:f8:94: 60:e1:4a:db:13:a4:8d:92:24:a7:0a:e9:6e:de:ba:09:19:22: db:5a:a0:ea:05:67:31:bd:b7:80:58:20:6b:ed:b0:64:86:0a: 4d:7d:19:55:32:64:ba:fa:be:f7:d6:2e:ea:db:d4:d4:01:9f: ba:69:f7:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUC69Tt/Dp5OgN35IJfxQ0aMVbvyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTIxNDQyMTlaFw0yNzEwMTExNDQ3MTlaMDMxMTAvBgNV BAMTKDU1NzEzMEJFMzUyQzQyQjE4QTE4QjFBMzNBQjUyNkRFRjA3MkU0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoO0FTBr9BF0lkLj/R44NjKahk j+nEGUODpkZHmedBc/fCFz8dD/WzX5qifPAgOigCA3UpNa85kA0LuDf3J+pthRSN 4Pd/vv8wEKeVgbf0GMOIrcnPkDWp38DHiMvg6wszS+HL1U4N5SmVSZiR3rg7KCsf yNozRCFqsq1NgA2YJ3l7K0KnRR4o1BvQCM1LURka1VZq3qemgm35ixHmt7mrP5vs HVJEbJNI9pZuhJFG1GTOrq0/9clrVuEv+OH/hFuBG9Ac7WGRn/Aw3OhhZKj+rV0C vLrBDbca/KTLAAxTP5zRUdv6jURbuu9frWeolmVEL8Rt72rqknfMXQfhI9mpAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUVXEwvjUsQrGKGLGjOrUm3vBy5HQwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIA ATA+AwQAmO3gAwQBmO3yAwQAuvGgAwQAuvGoMAwDBAC68asDBAG68awDBAC68bwD BADJBBoDBADJBBwDBADJMhAwDQYJKoZIhvcNAQELBQADggEBAGsychLPKtViW3I4 h9EjYWZinLvSVLxN0+OtgcjZLkmIe95OVTOuDQhYSINKpJ5gpoCFRXKAuTx/g9ya ecJhu0bV59ebuKw7YJLFC0uWW/zqnYGJjkGIyPR943SQqkin3HKRaJ65drP+q7RQ lUdQ05mwfCvZEt43UOH7EAxMTM3yllhY+lwdEoot97t5KaKnaXAmGWcaLLqrImYj bxQWv5iovE10lHCSLT+6bZdOUjW3Vsq06HoBiZA61zbqDTjzHESqt9P4lGDhStsT pI2SJKcK6W7eugkZIttaoOoFZzG9t4BYIGvtsGSGCk19GVUyZLr6vvfWLurb1NQB n7pp96k= -----END CERTIFICATE-----Generated at Thu Nov 5 20:05:08 2026 by rpki-client