Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 9+f4Si8K/wXyPy2A8TIdbYi5lsc/H+ZsPsYhmpo+F+4=
Subject key identifier: 84:39:16:E3:61:6C:0D:89:72:70:94:7A:C1:F5:40:AC:FF:1D:82:A0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 445CC021A23E05E1883FD77656E82547D1526FFA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Sat 19 Sep 2026 00:06:27 +0000
ROA not before: Sat 19 Sep 2026 00:01:27 +0000
ROA not after: Sat 18 Sep 2027 00:06:27 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
140.150.224.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.183.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.208.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
145.223.6.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
146.103.59.0/24 maxlen: 24
147.79.16.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
155.117.105.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.212.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.67.0/24 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.90.0/24 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.98.0/24 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.152.0/24 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.177.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
167.148.190.0/24 maxlen: 24
167.148.206.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.42.0/24 maxlen: 24
168.222.48.0/24 maxlen: 24
168.222.70.0/24 maxlen: 24
168.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5c:c0:21:a2:3e:05:e1:88:3f:d7:76:56:e8:25:47:d1:52:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 19 00:01:27 2026 GMT
Not After : Sep 18 00:06:27 2027 GMT
Subject: CN=843916E3616C0D897270947AC1F540ACFF1D82A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:ed:38:28:90:4f:8a:28:9f:8f:92:27:c0:
bf:55:8a:c8:4b:35:66:f6:ed:fb:47:ff:88:28:3f:
75:c9:7f:9e:8e:eb:4a:9f:b6:68:2b:4c:f1:49:bb:
65:b3:ba:d0:83:f4:32:bf:8d:ea:8b:16:0f:c8:4c:
eb:e7:2c:dc:f6:1e:cc:14:ac:a0:a0:20:ff:aa:c2:
eb:f7:cf:60:2f:65:c6:07:50:7d:c0:43:4b:e4:93:
85:fa:ba:e7:7a:f2:b4:8b:d0:f1:69:83:41:f9:d8:
8b:31:5e:6c:92:76:41:e8:d2:2d:e7:bc:44:98:25:
de:3b:b8:7b:f2:80:1b:7a:cc:db:c9:d7:38:e4:5e:
6e:d0:c1:a6:13:75:50:11:9a:d9:01:ac:06:26:d7:
21:91:f6:dc:46:1d:b8:4d:2b:7c:1f:d2:60:8c:6a:
ac:e1:f0:ad:11:ae:29:e6:4f:e1:0f:c2:0e:bf:ee:
a6:66:6b:7c:80:6c:a4:87:70:1f:d5:46:28:20:3e:
20:ba:4b:f2:bc:9b:fd:0a:d7:31:c0:bc:c6:5a:5d:
49:71:39:59:1a:09:cb:87:fa:7c:f6:c8:0f:62:8d:
f7:bb:31:d4:16:3e:de:a4:f9:fa:22:b6:3a:66:7a:
f1:2e:7b:11:4b:aa:f8:11:06:96:40:27:dd:9e:62:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:16:E3:61:6C:0D:89:72:70:94:7A:C1:F5:40:AC:FF:1D:82:A0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.147.0/24
96.62.156.0/22
96.62.172.0/24
96.62.229.0/24
140.150.224.0/24
140.233.181.0/24
140.233.184.0/24
143.14.35.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.144.0/24
143.14.183.0/24
143.14.196.0/23
143.14.208.0/24
143.14.214.0/24
143.14.222.0/24
145.223.6.0/24
146.103.35.0/24
146.103.59.0/24
147.79.16.0/24
147.79.31.0/24
147.79.56.0/24
150.241.130.0/24
150.241.242.0/24
155.117.105.0/24
155.117.207.0/24
155.117.210.0/24
155.117.212.0/24
162.141.4.0/23
162.141.19.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.67.0/24
162.141.70.0/24
162.141.72.0/22
162.141.90.0/24
162.141.97.0-162.141.98.255
162.141.101.0/24
162.141.105.0/24
162.141.107.0/24
162.141.126.0/24
162.141.144.0-162.141.152.255
162.141.168.0/21
162.141.181.0/24
167.148.12.0/24
167.148.16.0/21
167.148.30.0/24
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.176.0/23
167.148.188.0/24
167.148.190.0/24
167.148.206.0/24
167.148.208.0/24
168.222.40.0/24
168.222.42.0/24
168.222.48.0/24
168.222.70.0/24
168.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bf:6f:78:9a:8c:85:6d:2e:e8:c3:0b:9b:66:20:c5:b5:e6:
a3:ab:73:ed:3f:70:29:21:e3:b5:43:08:a0:a6:a5:9e:fb:aa:
d1:06:aa:3d:3b:e8:16:0f:69:3b:f1:3f:f9:b9:c2:d1:e1:72:
f9:6b:96:c7:1d:24:f7:d8:ee:1c:89:e1:47:c6:08:95:af:3f:
54:c4:79:3f:f8:ef:8d:fc:d0:34:87:eb:d9:f2:c9:dc:c3:19:
f7:24:de:ed:0f:6b:da:dc:c1:7f:c2:51:e2:b3:fe:a1:fb:7e:
7b:2d:3d:b8:ec:41:fe:3f:25:8d:9f:2c:13:1c:4a:0d:cd:2b:
ac:23:d6:ea:1f:b6:ab:7b:87:f7:15:c0:38:4a:88:13:86:2c:
9e:ff:cd:96:6a:d4:aa:e0:2b:e0:76:ae:bb:aa:a0:fa:d9:b7:
f0:e4:a0:2a:9f:89:88:ea:66:02:04:25:81:f0:8c:68:1e:48:
ce:9f:ed:ad:73:23:b7:2a:a1:53:b2:7d:f4:69:57:0f:79:2f:
f4:01:30:60:99:fc:7c:6a:a0:0e:f9:80:75:33:7f:68:12:4f:
e5:71:56:6a:98:9a:bb:96:5c:ee:79:9e:f9:e2:5d:96:9f:ce:
c8:4f:02:05:d0:c8:58:51:32:a8:23:88:d6:ea:56:49:bd:75:
d8:d5:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:58:21 2026 by rpki-client