Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: t0keTtm7t7xOfjz0QjRvppqcr11vzJK1sA/NHTsOYjc=
Subject key identifier: 08:80:E0:F0:B8:6F:99:46:F7:C8:A2:DD:85:39:0F:19:04:88:C3:64
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 07D9C364C86DFC4540A8C32398C74BC320BDC969
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Thu 10 Sep 2026 14:51:00 +0000
ROA not before: Thu 10 Sep 2026 14:46:00 +0000
ROA not after: Thu 09 Sep 2027 14:51:00 +0000
asID: 9304
IP address blocks: 194.104.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d9:c3:64:c8:6d:fc:45:40:a8:c3:23:98:c7:4b:c3:20:bd:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 10 14:46:00 2026 GMT
Not After : Sep 9 14:51:00 2027 GMT
Subject: CN=0880E0F0B86F9946F7C8A2DD85390F190488C364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:59:1f:50:48:97:be:83:01:c3:f9:f5:47:
32:98:f3:50:6a:90:cc:b5:6f:2b:48:73:62:4a:c7:
cb:7c:84:1b:e5:4b:87:32:a2:c6:0f:20:3d:e5:17:
9c:a0:09:81:6b:e4:d2:80:89:86:82:9a:3c:16:1a:
cb:d9:a6:1f:8f:de:b7:25:cc:84:94:a0:3b:4a:42:
f3:65:71:96:c3:0c:00:85:72:41:b5:ea:92:98:e3:
e2:e2:e3:05:f7:15:a1:4b:b9:e0:1d:34:6d:81:8e:
88:da:34:aa:2c:2c:a2:ba:36:a4:78:9d:cc:88:f1:
06:8f:c7:c0:cc:db:5d:c2:2b:3c:c9:37:24:8e:48:
d3:82:c3:c4:fb:ce:7d:ff:34:b5:ce:24:d6:92:60:
7b:01:bb:69:1a:43:a0:d6:aa:e6:ec:6b:c7:ef:f8:
89:f5:bb:a2:bf:dd:04:07:12:77:8e:02:45:96:5a:
0a:63:74:31:b9:cc:64:fc:7a:bf:78:98:82:a7:03:
0e:14:13:5d:e9:3c:80:eb:5a:6a:ac:19:6e:61:43:
8c:85:53:6a:7d:b9:d9:50:13:34:32:05:21:29:73:
3a:eb:7f:a7:95:f5:fe:b4:54:93:3b:f8:c4:ed:e0:
74:a6:76:66:9c:fb:d6:9f:6f:b4:e9:a2:ba:05:2c:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:E0:F0:B8:6F:99:46:F7:C8:A2:DD:85:39:0F:19:04:88:C3:64
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.156.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c5:ab:33:44:fe:3d:9e:93:9d:c9:3f:24:d5:c0:dd:f3:99:
e9:d2:ae:67:8a:e0:ef:39:d7:e6:be:ce:de:46:54:87:22:8b:
09:0d:56:f2:14:23:3e:eb:ee:76:15:33:29:59:10:80:33:7b:
03:60:15:aa:17:36:82:4c:73:b4:6b:24:3c:67:6a:c9:1f:fb:
72:10:45:a2:7b:e9:c2:3e:93:58:05:32:6d:e5:69:d9:5a:d7:
c2:67:08:36:97:70:71:d3:3b:ba:e3:de:76:6f:ba:d8:53:bb:
70:f4:38:08:6b:8b:f1:d7:b8:30:ac:df:43:23:83:0a:94:f1:
45:a9:9a:08:d3:36:31:2a:15:20:45:f4:36:93:0c:7a:37:3d:
dc:c1:78:6d:cc:15:82:15:92:0a:f7:4e:b1:ca:a5:68:e9:45:
99:9d:f3:9e:14:e2:77:b4:01:82:c2:5a:09:7c:d7:e6:41:88:
16:84:4d:34:8c:e0:c6:08:c7:f1:06:dc:76:5b:82:c3:2e:6e:
63:0b:26:9c:6b:74:28:c3:62:51:34:ad:73:df:d2:82:c8:08:
9b:24:24:c4:84:60:8f:31:3d:ac:38:5d:bb:3e:36:ae:dd:b1:
a0:9a:5e:7f:2a:9a:ac:fa:e3:e7:dc:b0:d2:8b:12:7f:16:57:
37:4e:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:46:24 2026 by rpki-client