$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: oYHEAd/v2a3cWRCCkBYpVE4FL9fM4eDLAX4bsDUZqfc= Subject key identifier: 30:29:A4:03:D9:57:6F:49:BA:F9:45:35:53:52:23:5B:68:E7:BD:FF Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0C1CEFB1E42F9F2A89323591722B0017F9533D29 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa Signing time: Tue 13 Oct 2026 09:26:26 +0000 ROA not before: Tue 13 Oct 2026 09:21:26 +0000 ROA not after: Tue 12 Oct 2027 09:26:26 +0000 asID: 9304 IP address blocks: 79.176.6.0/24 maxlen: 24 79.176.14.0/24 maxlen: 24 79.176.15.0/24 maxlen: 24 79.176.18.0/24 maxlen: 24 79.176.50.0/23 maxlen: 24 79.180.0.0/23 maxlen: 24 79.180.87.0/24 maxlen: 24 79.180.92.0/23 maxlen: 24 79.182.26.0/24 maxlen: 24 79.182.28.0/24 maxlen: 24 79.182.42.0/23 maxlen: 24 79.183.0.0/24 maxlen: 24 79.183.145.0/24 maxlen: 24 79.183.147.0/24 maxlen: 24 79.183.148.0/24 maxlen: 24 79.183.149.0/24 maxlen: 24 109.64.2.0/23 maxlen: 24 109.65.6.0/24 maxlen: 24 109.65.70.0/23 maxlen: 24 109.66.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 15:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1c:ef:b1:e4:2f:9f:2a:89:32:35:91:72:2b:00:17:f9:53:3d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 13 09:21:26 2026 GMT Not After : Oct 12 09:26:26 2027 GMT Subject: CN=3029A403D9576F49BAF945355352235B68E7BDFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:7d:13:f8:1f:c1:25:c0:0e:78:c9:db:b7: 03:dc:55:bf:a0:e9:b5:52:9e:d2:fa:4e:db:50:26: 1f:e6:fc:dd:b5:fc:a7:90:fd:43:7b:b9:87:2b:9b: 13:55:e2:5d:73:45:11:b6:a5:4d:ab:f4:66:6e:d0: bc:60:b5:1e:fd:8d:1f:a0:1c:e5:61:5f:22:b0:af: 86:98:12:a4:49:6a:29:d7:7f:cd:b1:93:e9:85:f8: c4:03:92:27:23:5f:50:e2:0e:46:b9:65:99:17:fd: 8c:c9:dc:be:70:aa:fa:b0:b2:47:51:d0:fd:97:e1: 2b:17:d4:e5:63:2a:38:de:4e:cb:43:30:17:ef:21: b0:1d:40:d3:08:3a:50:b9:d4:12:24:4b:4e:f4:10: ff:8f:e6:82:b8:dc:2f:4b:7d:ef:06:98:09:3b:29: b3:43:05:cd:bd:62:e3:7f:6b:f5:70:6d:8c:4b:f1: 8b:f6:e6:50:d9:8d:53:4a:f8:71:f1:9e:80:cc:4d: 41:41:f7:82:b7:87:7c:15:11:63:0c:1b:e9:c7:08: 8a:20:5f:b3:45:30:52:54:a1:f9:4f:48:38:b7:ad: 59:94:43:c2:0d:28:2b:63:dd:94:a2:af:84:d5:c9: 19:b2:93:5a:a2:e6:85:61:6e:c2:a8:71:e0:5e:ae: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:29:A4:03:D9:57:6F:49:BA:F9:45:35:53:52:23:5B:68:E7:BD:FF X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.6.0/24 79.176.14.0/23 79.176.18.0/24 79.176.50.0/23 79.180.0.0/23 79.180.87.0/24 79.180.92.0/23 79.182.26.0/24 79.182.28.0/24 79.182.42.0/23 79.183.0.0/24 79.183.145.0/24 79.183.147.0-79.183.149.255 109.64.2.0/23 109.65.6.0/24 109.65.70.0/23 109.66.95.0/24 Signature Algorithm: sha256WithRSAEncryption 87:90:2d:6c:10:5f:2d:4b:ae:e7:5e:a3:d5:18:1a:91:d2:03: e3:db:8d:2b:87:7f:50:7a:91:88:e6:0b:ac:55:9a:1f:2c:df: 00:28:81:c3:7b:c0:d7:8d:fc:25:4e:2e:1d:c7:7d:35:6c:b9: a1:8a:d1:3d:ef:c9:0f:ed:98:3e:f6:4d:ad:fa:49:48:b0:f8: e1:56:f5:b1:f6:44:d5:2b:21:4b:73:94:ca:e8:7b:cb:be:7d: 88:15:7b:62:c6:8e:2d:22:f4:01:39:52:0f:a5:cf:43:ae:c9: 33:a1:88:5c:64:18:13:7f:87:08:05:66:b3:56:6d:0e:7f:e2: 3a:a6:e5:2a:e7:6e:35:0c:c8:13:35:3b:51:e0:29:f0:e2:b0: 66:d7:18:25:ea:8b:b7:ae:1b:b5:66:29:5e:00:45:24:ed:e0: 0f:78:d4:94:e7:3a:5f:5e:56:bf:b4:f2:d5:1a:6f:6c:9b:5c: 8c:ee:93:4d:49:d3:29:0f:e5:0b:3e:fe:53:ec:44:18:f5:ca: bc:4b:ac:7f:ec:d2:bc:c2:39:54:fc:af:64:51:23:ce:f6:f2: 40:50:c6:04:8c:06:1e:de:b9:92:20:44:c4:bb:82:4c:f9:08: 0d:63:f6:f6:ff:cc:40:e5:e6:d8:47:1f:44:78:7d:1a:e8:2d: 3f:9e:1e:97 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUDBzvseQvnyqJMjWRcisAF/lTPSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTMwOTIxMjZaFw0yNzEwMTIwOTI2MjZaMDMxMTAvBgNV BAMTKDMwMjlBNDAzRDk1NzZGNDlCQUY5NDUzNTUzNTIyMzVCNjhFN0JERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUX0T+B/BJcAOeMnbtwPcVb+g 6bVSntL6TttQJh/m/N21/KeQ/UN7uYcrmxNV4l1zRRG2pU2r9GZu0LxgtR79jR+g HOVhXyKwr4aYEqRJainXf82xk+mF+MQDkicjX1DiDka5ZZkX/YzJ3L5wqvqwskdR 0P2X4SsX1OVjKjjeTstDMBfvIbAdQNMIOlC51BIkS070EP+P5oK43C9Lfe8GmAk7 KbNDBc29YuN/a/VwbYxL8Yv25lDZjVNK+HHxnoDMTUFB94K3h3wVEWMMG+nHCIog X7NFMFJUoflPSDi3rVmUQ8INKCtj3ZSir4TVyRmyk1qi5oVhbsKoceBerkJRAgMB AAGjggKsMIICqDAdBgNVHQ4EFgQUMCmkA9lXb0m6+UU1U1IjW2jnvf8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQC AAEwbgMEAE+wBgMEAU+wDgMEAE+wEgMEAU+wMgMEAU+0AAMEAE+0VwMEAU+0XAME AE+2GgMEAE+2HAMEAU+2KgMEAE+3AAMEAE+3kTAMAwQAT7eTAwQBT7eUAwQBbUAC AwQAbUEGAwQBbUFGAwQAbUJfMA0GCSqGSIb3DQEBCwUAA4IBAQCHkC1sEF8tS67n XqPVGBqR0gPj240rh39QepGI5gusVZofLN8AKIHDe8DXjfwlTi4dx301bLmhitE9 78kP7Zg+9k2t+klIsPjhVvWx9kTVKyFLc5TK6HvLvn2IFXtixo4tIvQBOVIPpc9D rskzoYhcZBgTf4cIBWazVm0Of+I6puUq5241DMgTNTtR4Cnw4rBm1xgl6ou3rhu1 ZileAEUk7eAPeNSU5zpfXla/tPLVGm9sm1yM7pNNSdMpD+ULPv5T7EQY9cq8S6x/ 7NK8wjlU/K9kUSPO9vJAUMYEjAYe3rmSIETEu4JM+QgNY/b2/8xA5ebYRx9EeH0a 6C0/nh6X -----END CERTIFICATE-----Generated at Wed Oct 14 06:45:03 2026 by rpki-client