Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: fL5MH2zhS62XmnHpLWm3BYhgNfOfrVbDJyeiA8Nbdmo=
Subject key identifier: 5B:F1:94:45:05:12:21:F5:69:4A:40:46:CA:FA:81:7F:79:10:51:26
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 71CE8E4C6C8E40D15521466DD6EB1D212C1318D7
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Sun 13 Sep 2026 10:19:35 +0000
ROA not before: Sun 13 Sep 2026 10:14:35 +0000
ROA not after: Sun 12 Sep 2027 10:19:35 +0000
asID: 9304
IP address blocks: 82.139.205.0/24 maxlen: 24
212.60.146.0/24 maxlen: 24
212.60.147.0/24 maxlen: 24
212.60.152.0/24 maxlen: 24
212.60.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ce:8e:4c:6c:8e:40:d1:55:21:46:6d:d6:eb:1d:21:2c:13:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 13 10:14:35 2026 GMT
Not After : Sep 12 10:19:35 2027 GMT
Subject: CN=5BF19445051221F5694A4046CAFA817F79105126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:92:ca:f6:de:e5:05:65:17:79:2f:c6:c0:
f2:13:74:b8:18:67:a6:0a:95:99:1a:6d:14:d6:dd:
85:1e:aa:c9:cc:76:32:1c:19:8d:87:d8:f0:7a:36:
35:b5:7f:c7:2e:cb:66:87:22:84:9e:0f:cc:42:4a:
50:5b:64:91:c0:af:02:7f:d4:33:30:1f:75:b0:00:
07:cc:1f:83:a7:9d:fe:18:6d:ff:3f:7e:41:c3:83:
34:95:82:90:04:17:e8:0e:8f:bc:d0:6f:a3:c9:c7:
f6:cc:78:8f:10:d7:40:b6:a4:94:75:e2:5d:7a:92:
b9:eb:0f:ba:d6:6a:2f:75:ce:71:31:ab:1b:d8:5e:
18:cd:fa:d3:a6:b7:69:0a:c8:77:c6:81:5c:14:e5:
44:e7:97:af:9c:15:8b:be:ca:b1:53:a3:46:88:cd:
94:f9:89:7d:38:36:a2:b2:67:66:b1:20:00:08:85:
19:ed:f3:36:53:44:51:a7:f5:42:22:51:bd:18:9a:
c6:28:ae:54:a6:77:75:e5:ba:32:d7:2f:54:a6:8a:
79:d4:53:3f:fe:f0:34:c9:59:dd:c2:8a:c9:9e:00:
62:31:fe:68:f1:af:d4:68:3f:2b:26:37:eb:8f:19:
d8:38:a2:df:28:5a:09:ff:a1:4d:7f:0b:31:06:11:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:94:45:05:12:21:F5:69:4A:40:46:CA:FA:81:7F:79:10:51:26
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
212.60.146.0/23
212.60.152.0/24
212.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
55:94:45:d3:23:6d:07:48:dc:fb:c5:c6:86:32:34:bc:8c:65:
61:7b:97:49:a5:f3:30:95:d9:73:5e:0d:d4:5a:c0:af:b9:3a:
67:33:d8:e2:35:b3:7d:71:b1:2d:59:94:17:36:11:6d:81:01:
fa:0c:00:19:ae:0f:f5:f1:65:b6:e2:90:5b:a7:af:61:9a:54:
5d:be:bc:4f:9a:96:23:45:1b:be:36:4e:4f:17:da:ba:f5:51:
82:a6:e1:19:1a:bc:76:dd:12:57:83:b0:e4:d2:8a:ec:a6:19:
a1:9c:f1:64:99:f2:6c:60:4b:a6:b0:8b:5c:1e:f7:91:af:66:
48:22:7e:ef:f2:ff:24:90:b4:5d:c0:93:50:14:07:3c:cb:59:
22:1f:86:7e:2c:04:5d:6b:55:5f:57:36:1c:9c:28:4f:d7:c3:
30:31:bd:91:6b:b4:da:58:a0:49:45:3e:59:19:68:91:0c:21:
d7:bd:8a:18:8e:b6:03:c0:b6:33:09:fa:8d:9d:ce:0a:a9:a6:
c2:a0:59:e4:84:e6:b2:b8:cc:dd:76:98:88:48:d7:e4:03:5d:
b8:b8:c6:0b:17:0d:40:85:75:2f:94:1f:11:34:8c:69:ba:00:
a4:5b:6a:92:69:23:fc:a3:f1:23:44:eb:3b:34:d8:da:62:d3:
b7:b4:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:03:36 2026 by rpki-client