Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: zBibcDK3ROZQmtKyvUjdD0LoaUp5xRk0o9a10riJMkA=
Subject key identifier: 00:F3:0D:C4:E3:C1:FF:CC:A8:48:3C:3F:BE:82:35:CA:59:14:CD:EA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 42241EF6BAE95D1191252D7D79B22D521D8AE052
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Wed 16 Sep 2026 00:20:50 +0000
ROA not before: Wed 16 Sep 2026 00:15:50 +0000
ROA not after: Wed 15 Sep 2027 00:20:50 +0000
asID: 9304
IP address blocks: 82.22.14.0/24 maxlen: 24
82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.27.43.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.29.45.0/24 maxlen: 24
82.29.112.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.65.0/24 maxlen: 24
82.40.52.0/24 maxlen: 24
82.40.53.0/24 maxlen: 24
82.40.54.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
82.41.138.0/24 maxlen: 24
82.41.139.0/24 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.51.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.58.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.99.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
82.47.106.0/24 maxlen: 24
82.47.108.0/24 maxlen: 24
82.47.115.0/24 maxlen: 24
82.47.129.0/24 maxlen: 24
82.47.134.0/24 maxlen: 24
82.47.137.0/24 maxlen: 24
82.47.145.0/24 maxlen: 24
82.47.164.0/24 maxlen: 24
82.47.168.0/24 maxlen: 24
82.47.184.0/24 maxlen: 24
82.47.196.0/24 maxlen: 24
84.75.19.0/24 maxlen: 24
84.75.25.0/24 maxlen: 24
84.75.27.0/24 maxlen: 24
84.75.34.0/24 maxlen: 24
84.75.151.0/24 maxlen: 24
178.83.146.0/23 maxlen: 24
178.83.183.0/24 maxlen: 24
178.83.225.0/24 maxlen: 24
178.83.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:1e:f6:ba:e9:5d:11:91:25:2d:7d:79:b2:2d:52:1d:8a:e0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 16 00:15:50 2026 GMT
Not After : Sep 15 00:20:50 2027 GMT
Subject: CN=00F30DC4E3C1FFCCA8483C3FBE8235CA5914CDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:f1:3a:6f:9f:c7:c5:5c:51:2d:bc:9d:5f:
22:a3:40:01:7f:e6:ba:4a:5a:a4:df:f9:84:47:a3:
ff:a7:4e:98:97:6e:bd:77:69:27:44:e6:f9:aa:90:
40:98:0a:0b:de:34:52:c3:50:27:1d:76:93:22:61:
de:45:58:3c:8d:c2:d0:85:fe:8a:24:91:17:5a:ac:
84:35:6a:6a:5f:90:10:37:bb:c2:fd:05:00:84:36:
61:a1:9c:76:e3:dd:82:5c:bc:de:ca:5b:e0:42:2c:
2c:16:74:22:a0:0c:ad:55:8a:fc:9c:96:5f:c6:1d:
99:92:9a:0c:99:6f:ed:a1:a2:1d:6d:9e:cd:e2:89:
9c:62:d0:1d:3b:b8:db:dd:41:c3:a7:38:65:72:e0:
bc:e7:21:04:79:6f:32:0b:7f:00:3d:f0:56:3b:13:
e5:07:6e:ad:1b:9f:c9:23:f7:f6:86:5f:41:3a:38:
f7:6d:3a:04:1a:45:a5:9d:87:3d:bb:6e:ab:c9:55:
8e:27:c3:f9:75:d9:4e:84:28:5c:bc:a7:7b:3e:d8:
21:82:b4:33:b0:31:b5:df:b9:21:fe:46:ec:93:b5:
61:32:17:78:0e:7e:93:7a:2f:d7:04:39:26:b4:09:
97:5d:91:1e:7d:ca:23:9a:53:51:19:dd:76:99:a6:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F3:0D:C4:E3:C1:FF:CC:A8:48:3C:3F:BE:82:35:CA:59:14:CD:EA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.14.0/24
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.27.43.0/24
82.27.105.0/24
82.29.45.0/24
82.29.112.0/24
82.38.38.0/23
82.38.76.0/22
82.39.65.0/24
82.40.52.0-82.40.54.255
82.41.75.0/24
82.41.138.0/23
82.47.23.0/24
82.47.51.0-82.47.52.255
82.47.56.0/24
82.47.58.0/24
82.47.96.0/24
82.47.99.0-82.47.100.255
82.47.103.0/24
82.47.106.0/24
82.47.108.0/24
82.47.115.0/24
82.47.129.0/24
82.47.134.0/24
82.47.137.0/24
82.47.145.0/24
82.47.164.0/24
82.47.168.0/24
82.47.184.0/24
82.47.196.0/24
84.75.19.0/24
84.75.25.0/24
84.75.27.0/24
84.75.34.0/24
84.75.151.0/24
178.83.146.0/23
178.83.183.0/24
178.83.225.0/24
178.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2b:9c:f7:32:6f:06:63:83:5f:b0:a5:ce:5f:06:63:b8:aa:
e0:ce:01:01:7d:d3:8a:ca:9b:f3:06:25:38:34:88:40:6a:40:
43:4e:86:67:85:1e:a4:2f:3b:68:ef:b4:49:90:d8:e0:7b:15:
94:69:eb:d8:69:fd:01:4b:06:bc:3f:0c:90:f4:df:a0:51:16:
45:2d:aa:05:b5:96:d7:91:37:39:eb:e7:f9:1a:b9:50:13:a1:
8f:ad:0d:06:7e:f6:98:26:05:44:0a:97:5d:69:49:e2:00:28:
a9:68:bf:21:1b:2c:eb:56:05:6a:49:fb:ef:76:32:b6:f8:32:
02:e2:29:42:14:3e:71:b4:53:38:10:cf:14:00:c3:ed:e8:e5:
54:ba:15:c5:90:cb:fc:7d:df:fa:ff:15:22:0a:f3:43:82:36:
e2:e1:59:fd:f7:32:3c:3e:10:46:04:45:3f:d7:cf:a3:f0:09:
e3:9f:d2:f7:35:4a:86:b7:92:60:8c:0b:02:00:32:42:d0:bd:
73:e9:04:5a:4e:b9:9a:98:78:2c:23:e6:fe:3b:48:19:f0:db:
78:80:c8:d2:fa:95:90:b7:52:92:9f:55:c2:49:0d:44:5a:94:
91:ea:47:d2:d2:79:35:e7:b4:b1:8b:59:df:4f:23:b7:42:df:
29:a9:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:11:36 2026 by rpki-client