Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: pY5ZItmUZ7XJPVJImpkTdgsbuJU4zjjQoZ5gy47P5hw=
Subject key identifier: A2:2B:AC:41:AA:FC:3D:E2:50:6A:02:53:FD:E0:CD:5C:A1:1F:FA:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01AD1C2BB05D750D733F14B5921E93C2168C23A9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Wed 04 Nov 2026 13:20:36 +0000
ROA not before: Wed 04 Nov 2026 13:15:36 +0000
ROA not after: Wed 03 Nov 2027 13:20:36 +0000
asID: 9304
IP address blocks: 82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.27.43.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.29.45.0/24 maxlen: 24
82.29.112.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.65.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
82.41.139.0/24 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.51.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.58.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.99.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
82.47.108.0/24 maxlen: 24
84.75.19.0/24 maxlen: 24
84.75.25.0/24 maxlen: 24
84.75.27.0/24 maxlen: 24
84.75.34.0/24 maxlen: 24
84.75.146.0/23 maxlen: 24
84.75.151.0/24 maxlen: 24
84.75.184.0/23 maxlen: 24
84.75.186.0/23 maxlen: 24
178.83.146.0/23 maxlen: 24
178.83.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ad:1c:2b:b0:5d:75:0d:73:3f:14:b5:92:1e:93:c2:16:8c:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 13:15:36 2026 GMT
Not After : Nov 3 13:20:36 2027 GMT
Subject: CN=A22BAC41AAFC3DE2506A0253FDE0CD5CA11FFA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:3d:1b:7c:de:d7:82:c5:35:87:2f:62:52:
76:9d:3f:52:18:53:c3:76:f0:45:f3:06:b9:ba:92:
96:af:5f:be:7c:40:b1:63:03:f8:71:d3:fc:97:28:
22:77:0d:bc:ae:37:da:d8:d5:3a:37:c2:97:4a:6d:
34:7a:7d:01:2f:d2:c2:42:91:f5:3c:a2:aa:d8:b0:
40:31:bb:16:0f:0d:14:58:a2:57:a3:88:1a:fc:ce:
c4:a3:f5:89:a4:e2:6c:40:1c:76:69:69:7e:3a:b3:
54:c5:ab:c5:9b:04:a2:2c:2f:30:f8:69:4d:84:46:
78:9c:6e:4c:61:51:8a:03:16:11:88:4b:59:e6:4a:
85:fe:20:8f:55:ed:6a:99:fc:ea:e7:97:26:50:45:
3e:99:1e:35:88:2a:26:28:41:39:7c:f3:da:0e:48:
32:9b:be:bf:bc:0c:a9:ea:08:ec:f7:69:f4:6c:5c:
bd:81:f6:4d:e4:43:c7:09:94:a9:f6:df:78:bb:44:
04:be:08:39:0b:b4:6a:6d:19:94:bb:2b:03:25:e0:
76:f9:ca:25:6c:11:55:4d:68:a4:89:63:88:bc:38:
c4:ba:7b:af:8d:bb:57:21:7f:48:4e:d6:72:01:5e:
19:27:c1:2f:46:90:0a:d5:02:cf:fe:4c:91:fc:54:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:AC:41:AA:FC:3D:E2:50:6A:02:53:FD:E0:CD:5C:A1:1F:FA:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.27.43.0/24
82.27.105.0/24
82.29.45.0/24
82.29.112.0/24
82.38.38.0/23
82.38.76.0/22
82.39.65.0/24
82.41.75.0/24
82.41.139.0/24
82.47.23.0/24
82.47.51.0-82.47.52.255
82.47.56.0/24
82.47.58.0/24
82.47.96.0/24
82.47.99.0-82.47.100.255
82.47.103.0/24
82.47.108.0/24
84.75.19.0/24
84.75.25.0/24
84.75.27.0/24
84.75.34.0/24
84.75.146.0/23
84.75.151.0/24
84.75.184.0/22
178.83.146.0/23
178.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9a:36:58:65:39:09:6d:66:b8:ee:8f:3a:95:cf:43:96:cf:
74:e9:b2:d2:4f:a3:fe:73:93:8c:49:bb:f4:68:6d:4d:29:3e:
0d:2e:ef:32:f2:8d:da:ac:07:52:a9:76:24:67:d6:df:55:8e:
92:1c:69:16:1a:5f:1d:f2:d9:5d:94:49:3b:3b:1e:e1:3f:e8:
f7:a9:20:61:7e:67:3e:0e:de:d6:f8:f6:e1:33:22:fe:db:a5:
e1:a8:49:a5:fe:a2:b5:5d:2a:72:e5:ed:51:2a:79:1e:44:41:
51:62:13:87:a8:c1:67:15:b7:7a:c1:1b:b4:d9:5f:1a:58:a1:
85:97:49:6e:0b:0b:b3:5a:53:9c:95:5a:3d:a2:0b:19:73:13:
79:e1:86:28:7e:dd:8c:db:ee:26:58:83:0c:77:90:39:84:32:
34:cc:11:4f:70:07:09:aa:ef:ff:ee:7b:ed:43:81:3a:00:bd:
ff:72:94:5a:6e:9d:e2:0e:05:d4:bd:a3:cf:18:60:49:bc:bd:
e7:e4:e6:0a:ea:df:3a:f5:ed:ff:7e:f0:9f:fa:7e:54:94:4f:
77:27:44:4e:e6:8d:c0:0f:aa:2e:02:89:e2:d3:fe:04:c4:e9:
fb:56:72:55:c0:d1:b1:28:85:43:65:d6:5e:35:4b:22:6a:4a:
57:e7:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:18:34 2026 by rpki-client