Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: W4+u85LH27rzv1UPVc2NSxJ8luD86Oj1DO7aESzVXa8=
Subject key identifier: F6:03:EE:6B:90:4F:BC:B2:84:F4:F3:02:F7:7A:DA:4B:05:5B:E0:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E1851042765E07A9BB1B29D146CE2C5C35E76B3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Tue 28 Jul 2026 00:00:10 +0000
ROA not before: Mon 27 Jul 2026 23:55:10 +0000
ROA not after: Tue 27 Jul 2027 00:00:10 +0000
asID: 9304
IP address blocks: 82.22.14.0/24 maxlen: 24
82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.194.0/23 maxlen: 24
82.40.52.0/24 maxlen: 24
82.40.53.0/24 maxlen: 24
82.40.54.0/24 maxlen: 24
82.41.128.0/23 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
82.47.123.0/24 maxlen: 24
84.75.151.0/24 maxlen: 24
178.83.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:18:51:04:27:65:e0:7a:9b:b1:b2:9d:14:6c:e2:c5:c3:5e:76:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 23:55:10 2026 GMT
Not After : Jul 27 00:00:10 2027 GMT
Subject: CN=F603EE6B904FBCB284F4F302F77ADA4B055BE0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:e1:17:2b:07:fa:4b:7e:16:61:52:b7:1d:
20:2a:1d:6c:0d:30:f5:94:6e:59:47:ca:82:46:4e:
bf:8d:61:b3:28:0c:e4:5b:30:3e:1f:ee:b8:ef:81:
04:fb:5e:71:87:f8:b3:e1:68:25:41:fc:9d:44:41:
18:71:f2:9f:31:22:93:99:d1:7d:83:da:24:2b:f9:
82:1f:e8:b7:d6:62:c9:5e:64:94:26:a1:c8:43:ca:
60:55:e7:5f:21:ab:17:26:45:ba:ff:01:12:0f:86:
ec:28:37:75:cf:c9:e6:97:f9:ed:d1:28:58:2e:65:
c1:cf:8d:03:37:03:44:12:a0:c3:b9:3f:ef:25:a4:
70:b8:f3:85:78:e0:86:9c:7b:39:b3:36:c8:74:19:
72:be:a0:8f:a3:c1:2b:1e:62:d0:2f:2b:02:b7:82:
ea:31:9f:60:1f:68:b1:71:4e:04:fd:2c:71:6e:db:
4a:22:02:b6:4a:78:74:21:2a:a8:db:20:d8:2b:d2:
fb:00:20:1f:f6:32:84:84:a4:ce:0f:ab:78:43:65:
1b:84:33:97:67:aa:de:49:d5:46:19:8a:e1:13:bf:
1f:c7:0a:3b:4f:ab:c0:dd:37:b3:3d:e6:72:e6:9d:
8a:01:cc:7e:4f:27:8e:03:dd:b8:a7:ce:eb:6d:cb:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:EE:6B:90:4F:BC:B2:84:F4:F3:02:F7:7A:DA:4B:05:5B:E0:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.14.0/24
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.38.38.0/23
82.38.76.0/22
82.39.194.0/23
82.40.52.0-82.40.54.255
82.41.128.0/23
82.47.23.0/24
82.47.52.0/24
82.47.56.0/24
82.47.96.0/24
82.47.100.0/24
82.47.103.0/24
82.47.123.0/24
84.75.151.0/24
178.83.146.0/23
Signature Algorithm: sha256WithRSAEncryption
50:cf:4e:23:48:68:f8:5a:d6:35:56:a6:89:3a:bf:47:99:da:
cb:63:cd:85:f9:54:9d:80:63:4a:da:40:fa:0e:62:5b:48:91:
94:ad:55:5a:3b:a9:5d:e1:d6:42:7f:0e:54:95:a1:bd:d0:e6:
bc:d6:5e:d4:e0:b7:68:dd:6a:60:f1:11:05:4a:31:4f:8e:be:
cc:09:7b:7e:dc:e9:da:2a:71:cf:f5:75:60:4c:58:4e:ab:4e:
57:90:f3:6a:e2:f6:71:7e:65:ec:b2:43:6b:56:13:e6:63:2e:
1d:2b:24:00:18:a0:6b:59:9f:a8:da:82:41:45:51:c0:ff:35:
89:35:5a:1b:b9:ce:b8:01:8c:8f:a3:76:19:c2:10:d8:e4:c6:
d2:8c:6f:95:cc:b4:b0:ad:9c:97:7e:54:85:8d:c0:82:5c:93:
a8:78:01:d3:f9:d2:73:a2:ad:fd:51:23:9d:24:a6:59:7f:ef:
5d:f3:6e:83:12:ac:08:e4:be:7d:2e:09:65:db:a3:b2:10:41:
49:55:9c:13:08:f9:a3:59:3b:f7:d8:41:cb:6a:ae:2e:98:c5:
96:81:36:19:5e:d5:2e:8b:ee:be:d9:ff:ad:93:48:55:db:dc:
a6:c3:0e:5f:da:a2:96:8f:0e:df:ee:2b:49:c0:92:c1:e3:e0:
18:e4:c8:e8
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIULhhRBCdl4HqbsbKdFGzixcNedrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjcyMzU1MTBaFw0yNzA3MjcwMDAwMTBaMDMxMTAvBgNV
BAMTKEY2MDNFRTZCOTA0RkJDQjI4NEY0RjMwMkY3N0FEQTRCMDU1QkUwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbeEXKwf6S34WYVK3HSAqHWwN
MPWUbllHyoJGTr+NYbMoDORbMD4f7rjvgQT7XnGH+LPhaCVB/J1EQRhx8p8xIpOZ
0X2D2iQr+YIf6LfWYsleZJQmochDymBV518hqxcmRbr/ARIPhuwoN3XPyeaX+e3R
KFguZcHPjQM3A0QSoMO5P+8lpHC484V44IacezmzNsh0GXK+oI+jwSseYtAvKwK3
guoxn2AfaLFxTgT9LHFu20oiArZKeHQhKqjbINgr0vsAIB/2MoSEpM4Pq3hDZRuE
M5dnqt5J1UYZiuETvx/HCjtPq8DdN7M95nLmnYoBzH5PJ44D3binzutty4g9AgMB
AAGjggKTMIICjzAdBgNVHQ4EFgQU9gPua5BPvLKE9PMC93raSwVb4MMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBqQYIKwYBBQUHAQcBAf8EgZkwgZYwgZMEAgABMIGMAwQA
UhYOAwQAUheQAwQAUheTAwQCUhgAAwQAUhpzAwQAUhp2AwQAUhp9AwQAUhqCAwQB
UiYmAwQCUiZMAwQBUifCMAwDBAJSKDQDBABSKDYDBAFSKYADBABSLxcDBABSLzQD
BABSLzgDBABSL2ADBABSL2QDBABSL2cDBABSL3sDBABUS5cDBAGyU5IwDQYJKoZI
hvcNAQELBQADggEBAFDPTiNIaPha1jVWpok6v0eZ2stjzYX5VJ2AY0raQPoOYltI
kZStVVo7qV3h1kJ/DlSVob3Q5rzWXtTgt2jdamDxEQVKMU+OvswJe37c6doqcc/1
dWBMWE6rTleQ82ri9nF+ZeyyQ2tWE+ZjLh0rJAAYoGtZn6jagkFFUcD/NYk1Whu5
zrgBjI+jdhnCENjkxtKMb5XMtLCtnJd+VIWNwIJck6h4AdP50nOirf1RI50kpll/
713zboMSrAjkvn0uCWXbo7IQQUlVnBMI+aNZO/fYQctqri6YxZaBNhle1S6L7r7Z
/62TSFXb3KbDDl/aopaPDt/uK0nAksHj4BjkyOg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:00:32 2026 by rpki-client