Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: FJJCTwH6qz/l6klHfGzdqoAKoaUrI2dchyKps23lcXY=
Subject key identifier: 17:F0:D9:EA:DE:C7:E7:9D:35:66:E9:C5:3A:0C:C0:76:A7:E7:61:F4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 34D2240880FA824F783111E71CC08C53B033B959
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
Signing time: Mon 08 Jun 2026 07:04:10 +0000
ROA not before: Mon 08 Jun 2026 06:59:10 +0000
ROA not after: Mon 07 Jun 2027 07:04:10 +0000
asID: 9304
IP address blocks: 51.146.0.0/22 maxlen: 24
51.146.65.0/24 maxlen: 24
51.146.71.0/24 maxlen: 24
51.146.78.0/23 maxlen: 24
51.146.80.0/23 maxlen: 24
51.146.84.0/23 maxlen: 24
51.146.88.0/22 maxlen: 24
51.146.92.0/23 maxlen: 24
51.146.108.0/23 maxlen: 24
51.146.112.0/23 maxlen: 24
51.146.126.0/23 maxlen: 24
51.146.140.0/22 maxlen: 24
51.146.150.0/23 maxlen: 24
51.194.154.0/24 maxlen: 24
51.194.155.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.194.162.0/24 maxlen: 24
51.194.166.0/24 maxlen: 24
51.194.167.0/24 maxlen: 24
51.194.173.0/24 maxlen: 24
51.194.180.0/24 maxlen: 24
51.194.182.0/23 maxlen: 24
51.194.188.0/23 maxlen: 24
51.194.191.0/24 maxlen: 24
51.194.192.0/23 maxlen: 24
51.194.202.0/24 maxlen: 24
51.194.204.0/24 maxlen: 24
51.194.206.0/23 maxlen: 24
51.194.208.0/23 maxlen: 24
51.194.214.0/24 maxlen: 24
51.194.216.0/24 maxlen: 24
51.194.217.0/24 maxlen: 24
51.194.218.0/24 maxlen: 24
51.194.220.0/24 maxlen: 24
51.194.222.0/24 maxlen: 24
51.194.223.0/24 maxlen: 24
51.194.226.0/24 maxlen: 24
51.194.230.0/24 maxlen: 24
51.194.233.0/24 maxlen: 24
51.194.238.0/23 maxlen: 24
51.194.240.0/23 maxlen: 24
51.194.244.0/23 maxlen: 24
51.194.252.0/23 maxlen: 24
51.241.16.0/23 maxlen: 24
51.241.40.0/22 maxlen: 24
51.241.60.0/23 maxlen: 24
51.241.180.0/22 maxlen: 24
51.241.188.0/22 maxlen: 24
51.241.204.0/22 maxlen: 24
51.241.210.0/24 maxlen: 24
51.241.212.0/22 maxlen: 24
51.241.220.0/22 maxlen: 24
51.241.228.0/22 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.103.0/24 maxlen: 24
78.105.168.0/24 maxlen: 24
78.105.174.0/24 maxlen: 24
78.105.176.0/24 maxlen: 24
78.105.184.0/22 maxlen: 24
94.192.0.0/20 maxlen: 24
94.192.16.0/20 maxlen: 24
94.192.32.0/20 maxlen: 24
94.192.64.0/20 maxlen: 24
94.192.80.0/20 maxlen: 24
94.192.112.0/20 maxlen: 24
94.192.144.0/20 maxlen: 24
94.192.176.0/20 maxlen: 24
94.193.0.0/20 maxlen: 24
94.193.16.0/20 maxlen: 24
94.193.64.0/20 maxlen: 24
94.193.128.0/20 maxlen: 24
94.193.208.0/20 maxlen: 24
94.193.240.0/20 maxlen: 24
188.220.4.0/24 maxlen: 24
188.220.5.0/24 maxlen: 24
188.220.6.0/24 maxlen: 24
188.220.7.0/24 maxlen: 24
188.220.8.0/24 maxlen: 24
188.220.9.0/24 maxlen: 24
188.220.11.0/24 maxlen: 24
188.220.13.0/24 maxlen: 24
188.220.14.0/24 maxlen: 24
188.220.15.0/24 maxlen: 24
188.220.18.0/23 maxlen: 24
188.220.30.0/23 maxlen: 24
188.220.40.0/22 maxlen: 24
188.220.48.0/23 maxlen: 24
188.220.58.0/24 maxlen: 24
188.220.60.0/23 maxlen: 24
188.220.64.0/23 maxlen: 24
188.220.70.0/23 maxlen: 24
188.220.76.0/22 maxlen: 24
188.220.84.0/23 maxlen: 24
188.220.90.0/23 maxlen: 24
188.220.92.0/24 maxlen: 24
188.220.93.0/24 maxlen: 24
188.220.95.0/24 maxlen: 24
188.220.96.0/24 maxlen: 24
188.220.98.0/23 maxlen: 24
188.220.108.0/23 maxlen: 24
188.220.111.0/24 maxlen: 24
188.220.114.0/23 maxlen: 24
188.220.116.0/24 maxlen: 24
188.220.200.0/22 maxlen: 24
188.221.12.0/24 maxlen: 24
188.221.18.0/24 maxlen: 24
188.221.21.0/24 maxlen: 24
188.221.34.0/23 maxlen: 24
188.221.44.0/23 maxlen: 24
188.221.60.0/23 maxlen: 24
188.221.72.0/22 maxlen: 24
188.221.76.0/22 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.104.0/23 maxlen: 24
188.221.112.0/23 maxlen: 24
188.221.142.0/23 maxlen: 24
188.221.146.0/23 maxlen: 24
188.221.162.0/23 maxlen: 24
188.221.190.0/23 maxlen: 24
188.221.204.0/22 maxlen: 24
188.221.216.0/22 maxlen: 24
188.221.228.0/22 maxlen: 24
188.221.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d2:24:08:80:fa:82:4f:78:31:11:e7:1c:c0:8c:53:b0:33:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 8 06:59:10 2026 GMT
Not After : Jun 7 07:04:10 2027 GMT
Subject: CN=17F0D9EADEC7E79D3566E9C53A0CC076A7E761F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:d4:fd:ee:2a:bb:26:f9:68:76:55:d1:d2:
21:d5:e5:6f:c1:c9:fb:51:57:73:5b:c9:ef:14:1e:
ef:ca:8a:9e:2e:db:bc:aa:4a:78:d7:02:d4:da:1e:
41:b0:f3:56:ad:d6:a7:9a:2c:ac:7f:14:bf:5f:ce:
8f:0e:5a:c1:87:9e:38:95:8e:b3:61:8d:75:1a:d1:
5e:3f:e1:75:69:45:31:ca:49:19:75:ab:e7:e2:ad:
ed:62:37:ca:41:62:43:97:be:5a:9a:f2:92:72:a6:
4d:9f:b1:2b:cd:34:98:78:23:47:72:9c:b6:3a:f2:
87:fd:08:a5:c4:a6:8b:8e:9b:52:ba:0c:f2:5f:7e:
80:78:4c:07:80:9b:dd:ad:7a:7a:21:5e:d0:97:d3:
ee:e3:7f:d1:e8:32:48:d6:39:96:6e:1e:cd:55:93:
ca:80:27:8c:38:67:dd:db:4e:f1:8e:50:f1:20:0e:
b0:67:d5:8d:f3:bd:40:85:45:0e:6b:d1:be:7b:79:
9a:a8:e7:26:7d:18:b2:9f:10:f3:a7:0f:c0:d6:d9:
97:8c:79:d3:15:6b:cf:b1:7d:6d:14:a6:f9:f8:2e:
73:61:4f:8a:6e:eb:37:b2:8e:c3:e9:67:49:78:7d:
50:00:25:97:d2:87:54:64:27:a1:91:1f:21:55:fa:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:D9:EA:DE:C7:E7:9D:35:66:E9:C5:3A:0C:C0:76:A7:E7:61:F4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/22
51.146.65.0/24
51.146.71.0/24
51.146.78.0-51.146.81.255
51.146.84.0/23
51.146.88.0-51.146.93.255
51.146.108.0/23
51.146.112.0/23
51.146.126.0/23
51.146.140.0/22
51.146.150.0/23
51.194.154.0/23
51.194.160.0-51.194.162.255
51.194.166.0/23
51.194.173.0/24
51.194.180.0/24
51.194.182.0/23
51.194.188.0/23
51.194.191.0-51.194.193.255
51.194.202.0/24
51.194.204.0/24
51.194.206.0-51.194.209.255
51.194.214.0/24
51.194.216.0-51.194.218.255
51.194.220.0/24
51.194.222.0/23
51.194.226.0/24
51.194.230.0/24
51.194.233.0/24
51.194.238.0-51.194.241.255
51.194.244.0/23
51.194.252.0/23
51.241.16.0/23
51.241.40.0/22
51.241.60.0/23
51.241.180.0/22
51.241.188.0/22
51.241.204.0/22
51.241.210.0/24
51.241.212.0/22
51.241.220.0/22
51.241.228.0/22
78.105.100.0/24
78.105.103.0/24
78.105.168.0/24
78.105.174.0/24
78.105.176.0/24
78.105.184.0/22
94.192.0.0-94.192.47.255
94.192.64.0/19
94.192.112.0/20
94.192.144.0/20
94.192.176.0/20
94.193.0.0/19
94.193.64.0/20
94.193.128.0/20
94.193.208.0/20
94.193.240.0/20
188.220.4.0-188.220.9.255
188.220.11.0/24
188.220.13.0-188.220.15.255
188.220.18.0/23
188.220.30.0/23
188.220.40.0/22
188.220.48.0/23
188.220.58.0/24
188.220.60.0/23
188.220.64.0/23
188.220.70.0/23
188.220.76.0/22
188.220.84.0/23
188.220.90.0-188.220.93.255
188.220.95.0-188.220.96.255
188.220.98.0/23
188.220.108.0/23
188.220.111.0/24
188.220.114.0-188.220.116.255
188.220.200.0/22
188.221.12.0/24
188.221.18.0/24
188.221.21.0/24
188.221.34.0/23
188.221.44.0/23
188.221.60.0/23
188.221.72.0/21
188.221.88.0/22
188.221.104.0/23
188.221.112.0/23
188.221.142.0/23
188.221.146.0/23
188.221.162.0/23
188.221.190.0/23
188.221.204.0/22
188.221.216.0/22
188.221.228.0-188.221.235.255
Signature Algorithm: sha256WithRSAEncryption
3a:95:4c:71:7a:0e:4d:3b:5b:a8:97:cf:29:6e:90:45:11:71:
a6:38:93:e4:a1:e0:1a:d2:57:6d:cd:c4:14:c1:ac:63:47:fa:
19:7d:69:cd:34:f9:8c:7c:89:ba:82:c9:3b:cd:d2:2a:40:e3:
25:72:9f:49:6f:b0:8d:4b:a8:41:e0:3f:93:73:cd:98:fd:fb:
ab:52:2d:06:1e:dd:6a:75:fa:34:98:a1:1e:0d:7e:41:48:a8:
03:a5:93:5c:35:a6:79:2e:d9:62:49:e6:57:1a:09:1e:df:33:
11:d7:80:e8:bf:98:59:b2:61:61:1c:96:0e:2e:60:e7:bd:ca:
14:02:b7:89:f2:17:25:e6:b2:3b:fc:75:a0:cf:6c:5d:4b:4b:
54:3a:b9:f9:7e:bf:74:2e:b5:10:58:f0:de:11:d0:c6:99:95:
42:08:9e:da:08:bd:77:d9:32:db:c2:52:f3:3b:0a:e5:0f:6c:
ac:b3:5c:a0:b9:a6:07:be:3b:39:a6:b2:49:09:1c:5b:17:6d:
89:fe:b1:54:f4:0c:05:4d:2b:70:15:dd:67:a7:70:75:81:28:
8e:0b:e8:f9:72:b4:1d:02:c8:1b:5a:5d:48:12:ba:c6:bd:ee:
57:67:07:23:07:dd:a5:4f:7a:bc:cd:50:24:63:b1:43:7e:24:
29:d7:6c:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:01 2026 by rpki-client