Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired
Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: bEpqjpUmMTwFD2mLC5W6bjym6nRGdoYiM57MLBg45jE=
Subject key identifier: DE:AB:92:1E:32:24:19:22:F6:FB:86:F7:3C:06:DB:E5:0C:4B:B9:F0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3F416B34FEA415ECAC7ECD16F38E4490A172C81B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
Signing time: Tue 03 Nov 2026 20:47:26 +0000
ROA not before: Tue 03 Nov 2026 20:42:26 +0000
ROA not after: Tue 02 Nov 2027 20:47:26 +0000
asID: 9304
IP address blocks: 2.216.204.0/22 maxlen: 24
51.146.5.0/24 maxlen: 24
51.146.14.0/24 maxlen: 24
51.146.85.0/24 maxlen: 24
51.146.88.0/24 maxlen: 24
51.146.108.0/24 maxlen: 24
51.194.154.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.194.162.0/24 maxlen: 24
51.194.167.0/24 maxlen: 24
51.241.5.0/24 maxlen: 24
51.241.16.0/23 maxlen: 24
51.241.51.0/24 maxlen: 24
51.241.54.0/24 maxlen: 24
51.241.60.0/23 maxlen: 24
51.241.137.0/24 maxlen: 24
51.241.149.0/24 maxlen: 24
51.241.182.0/24 maxlen: 24
51.241.186.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.103.0/24 maxlen: 24
78.105.169.0/24 maxlen: 24
94.192.20.0/22 maxlen: 24
94.193.68.0/22 maxlen: 24
176.25.152.0/22 maxlen: 24
188.220.4.0/24 maxlen: 24
188.220.6.0/24 maxlen: 24
188.220.9.0/24 maxlen: 24
188.220.18.0/23 maxlen: 24
188.220.60.0/23 maxlen: 24
188.220.145.0/24 maxlen: 24
188.220.193.0/24 maxlen: 24
188.221.3.0/24 maxlen: 24
188.221.12.0/24 maxlen: 24
188.221.18.0/24 maxlen: 24
188.221.21.0/24 maxlen: 24
188.221.22.0/24 maxlen: 24
188.221.38.0/23 maxlen: 24
188.221.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:41:6b:34:fe:a4:15:ec:ac:7e:cd:16:f3:8e:44:90:a1:72:c8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 3 20:42:26 2026 GMT
Not After : Nov 2 20:47:26 2027 GMT
Subject: CN=DEAB921E32241922F6FB86F73C06DBE50C4BB9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:c8:db:7f:6e:35:55:2f:10:c0:98:1a:1b:
c5:98:cc:5b:f1:1c:0f:1c:e0:d0:61:f1:1f:07:ec:
4a:d9:97:66:e8:5c:97:1d:28:86:70:8d:ca:d5:84:
cb:55:cb:b3:02:8c:68:01:a5:dc:7b:cb:73:93:b4:
e4:07:fe:8d:a5:9c:02:13:8e:bf:9e:8f:00:2b:12:
e4:dc:20:41:64:09:92:cb:70:d6:88:1d:2d:30:f9:
06:13:25:8f:4b:8b:5d:c8:82:f2:52:b0:be:b8:9e:
f9:5d:cf:35:f7:8f:4a:25:bd:d1:d3:ea:a7:3d:7e:
08:a3:a3:63:22:5c:c7:98:34:fb:be:ce:2b:87:59:
ae:91:b0:4b:89:80:3f:37:2c:5c:00:b1:e8:3f:f5:
a4:a9:bb:4c:ec:6c:47:0f:c1:84:0a:be:fb:16:fd:
68:1b:0b:c6:aa:a9:d7:d4:c9:85:d9:65:1c:20:b5:
2b:26:98:31:88:3f:56:2c:82:4e:76:b6:cc:58:03:
79:fe:8a:8c:38:a5:3a:b6:27:8c:fc:fd:c6:1f:ea:
cc:fb:15:a6:03:78:bb:2b:87:3c:ff:7a:a5:78:b3:
2d:ff:fd:c6:8c:b1:ea:e2:4f:59:0f:1d:50:95:65:
c8:42:4c:13:54:ba:d0:f6:96:94:e7:52:54:1f:5e:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AB:92:1E:32:24:19:22:F6:FB:86:F7:3C:06:DB:E5:0C:4B:B9:F0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.204.0/22
51.146.5.0/24
51.146.14.0/24
51.146.85.0/24
51.146.88.0/24
51.146.108.0/24
51.194.154.0/24
51.194.160.0-51.194.162.255
51.194.167.0/24
51.241.5.0/24
51.241.16.0/23
51.241.51.0/24
51.241.54.0/24
51.241.60.0/23
51.241.137.0/24
51.241.149.0/24
51.241.182.0/24
51.241.186.0/24
78.105.100.0/24
78.105.103.0/24
78.105.169.0/24
94.192.20.0/22
94.193.68.0/22
176.25.152.0/22
188.220.4.0/24
188.220.6.0/24
188.220.9.0/24
188.220.18.0/23
188.220.60.0/23
188.220.145.0/24
188.220.193.0/24
188.221.3.0/24
188.221.12.0/24
188.221.18.0/24
188.221.21.0-188.221.22.255
188.221.38.0/23
188.221.60.0/23
Signature Algorithm: sha256WithRSAEncryption
80:92:6d:5a:6f:b2:1a:ec:41:43:65:40:c4:b2:83:99:e9:9f:
7d:b7:39:c4:e5:73:b2:21:e3:42:b4:b3:67:e1:f1:e5:18:69:
c0:90:fc:6a:04:84:cd:64:ab:3f:21:eb:00:df:90:fd:b5:2c:
f3:e8:1a:d5:9a:04:fc:3c:5f:b1:3e:e8:ef:2f:59:fe:ad:02:
20:4e:1f:f6:50:24:0c:d2:80:d8:50:9c:d2:ca:8b:74:dd:42:
e2:bf:07:f4:aa:9c:9b:8c:b8:57:0b:25:28:a6:f8:96:c9:f8:
b9:28:f2:60:69:ab:e4:0e:64:5f:16:c1:8d:4a:00:d1:aa:3f:
ab:7b:5e:41:59:ec:1a:9b:75:ab:07:95:f7:8d:d6:e7:fb:d9:
12:c6:33:62:5e:f9:6a:26:58:9e:b4:fc:bc:6c:b1:51:3c:e5:
05:ff:93:29:c6:d1:31:a5:da:f7:7c:20:79:d7:8d:f7:1e:17:
91:a1:60:8a:77:ec:26:f2:f0:12:78:b6:ff:e6:fb:10:6d:17:
66:3d:7f:bd:cd:fc:ac:b7:91:3b:d7:3e:f3:62:e7:13:24:4e:
23:69:df:5e:d0:47:d7:37:39:ca:f7:63:c0:07:1d:e4:5d:32:
34:c5:12:75:c3:7b:55:81:b6:ac:79:81:5b:2e:5a:03:88:50:
07:2c:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 10:15:16 2026 by rpki-client