Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: A1zCh6XmXNklPrQphHwCLqUD9orQospNhKhWGY0WLG4=
Subject key identifier: 7C:55:FD:51:3A:B9:DF:87:D4:32:AA:43:1C:91:5B:09:27:07:95:73
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0D9BC02E3EF751AFD8DEF8C601CF10512EE60476
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Sat 25 Jul 2026 00:04:58 +0000
ROA not before: Fri 24 Jul 2026 23:59:58 +0000
ROA not after: Sat 24 Jul 2027 00:04:58 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.120.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
147.79.8.0/23 maxlen: 24
150.241.130.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
162.141.184.0/21 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
168.222.38.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.86.0/24 maxlen: 24
168.222.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9b:c0:2e:3e:f7:51:af:d8:de:f8:c6:01:cf:10:51:2e:e6:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 23:59:58 2026 GMT
Not After : Jul 24 00:04:58 2027 GMT
Subject: CN=7C55FD513AB9DF87D432AA431C915B0927079573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:1e:4a:11:e7:32:50:46:d0:69:28:2d:cc:
5a:6c:e1:45:ff:2b:b4:a2:9b:ab:10:11:1e:1f:57:
2f:60:8c:40:4c:3c:03:1f:4b:20:36:1f:f2:2c:55:
f0:69:cf:8a:70:e1:1a:ff:47:78:ba:96:63:09:cd:
98:22:7f:bc:b9:2f:ee:e1:ad:6b:ef:90:21:d6:42:
00:51:57:ee:ea:97:20:18:c1:7d:a2:a3:41:a7:6b:
85:83:68:67:69:22:98:47:09:f4:cb:b0:aa:d3:41:
55:9d:2c:da:21:ab:81:a1:4f:dc:6d:89:e7:31:75:
ce:31:2f:40:b2:08:70:8f:c9:80:66:c4:c1:25:7c:
a7:7e:38:b9:ee:34:de:b0:30:88:7c:62:19:39:e5:
2a:29:22:df:cf:17:e7:23:32:0b:74:1a:6f:df:7c:
57:83:75:e3:78:fd:1e:3b:47:f7:e3:1a:81:08:4b:
1a:a6:3a:bb:a8:15:c2:7d:51:e0:5f:42:16:3b:95:
d0:0f:ab:dd:34:83:93:0e:51:1c:6e:47:6c:c5:57:
69:94:a8:62:18:c4:3c:f7:97:2c:6f:11:2f:10:75:
ef:47:a8:8e:44:1b:01:a8:35:07:d0:66:6e:1b:ca:
31:10:7b:2d:29:52:6e:d2:a3:65:cf:40:d0:22:bb:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:55:FD:51:3A:B9:DF:87:D4:32:AA:43:1C:91:5B:09:27:07:95:73
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.147.0/24
96.62.156.0/22
96.62.172.0/24
96.62.229.0/24
143.14.35.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.120.0/24
143.14.144.0/24
143.14.196.0/23
143.14.214.0/24
143.14.222.0/24
146.103.35.0/24
147.79.8.0/23
150.241.130.0/24
162.141.13.0/24
162.141.19.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
162.141.101.0/24
162.141.144.0/21
162.141.168.0/21
162.141.181.0/24
162.141.184.0/21
167.148.12.0/24
167.148.16.0/21
167.148.30.0/24
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.88.0/21
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.176.0/24
167.148.208.0/24
168.222.38.0/24
168.222.40.0/24
168.222.86.0/24
168.222.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a9:e0:e8:b5:03:b3:13:0d:d4:83:f5:bb:83:9a:a3:b1:23:
16:18:55:31:a8:bd:43:53:45:dc:07:c4:c6:ab:4f:26:75:00:
1e:be:f1:cb:c0:5d:10:08:1a:4f:72:42:b1:35:58:c2:63:4b:
bf:84:b6:0e:41:5f:bf:9e:26:21:85:c2:f1:33:7c:fa:0c:4f:
e6:cc:a2:11:16:57:af:32:79:c9:10:95:5d:1b:2a:45:59:96:
51:df:a3:eb:f4:1d:c4:59:a4:d5:c9:e8:80:37:05:1c:69:30:
2f:93:80:3a:ce:1a:1a:cc:c3:57:06:9b:f5:21:5a:13:04:69:
02:49:1e:0d:79:85:5a:99:39:d1:22:cb:79:95:5e:87:59:d5:
8a:dc:79:b7:8a:e4:af:ab:69:64:68:d4:ea:a9:6d:9d:35:1d:
97:43:bf:33:d3:a0:b3:56:1b:e0:af:7b:c5:dd:6a:df:35:7a:
ae:7a:d7:c9:7c:1a:8c:0d:ab:30:c9:fa:cd:24:ee:cb:9f:75:
e9:4a:5b:f5:50:fe:ae:bc:83:61:39:cf:87:4d:9e:b1:05:5d:
07:51:29:13:d5:67:4e:2b:ac:20:f4:d7:ce:14:a4:1b:37:c7:
0c:d3:bf:99:2b:7f:d2:a8:6d:78:c8:89:33:fe:50:d6:8d:a4:
78:e6:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:02:32 2026 by rpki-client