Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: taMzlgW1hjgSThYmfauWkaMVaOG25X0UMHl7GAZSIMc=
Subject key identifier: 72:2B:35:AE:65:98:D2:75:71:98:51:9D:B3:91:50:6F:0F:00:60:DB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26276495D58BD5D104451367E688BC328A21B18B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
Signing time: Sun 13 Sep 2026 10:19:40 +0000
ROA not before: Sun 13 Sep 2026 10:14:40 +0000
ROA not after: Sun 12 Sep 2027 10:19:40 +0000
asID: 9304
IP address blocks: 51.146.5.0/24 maxlen: 24
51.146.14.0/24 maxlen: 24
51.146.85.0/24 maxlen: 24
51.146.88.0/24 maxlen: 24
51.146.108.0/24 maxlen: 24
51.194.154.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.194.162.0/24 maxlen: 24
51.194.167.0/24 maxlen: 24
51.241.5.0/24 maxlen: 24
51.241.16.0/23 maxlen: 24
51.241.42.0/24 maxlen: 24
51.241.43.0/24 maxlen: 24
51.241.54.0/24 maxlen: 24
51.241.60.0/23 maxlen: 24
51.241.137.0/24 maxlen: 24
51.241.149.0/24 maxlen: 24
51.241.170.0/24 maxlen: 24
51.241.182.0/24 maxlen: 24
51.241.186.0/24 maxlen: 24
51.241.213.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.103.0/24 maxlen: 24
78.105.169.0/24 maxlen: 24
188.220.4.0/24 maxlen: 24
188.220.6.0/24 maxlen: 24
188.220.9.0/24 maxlen: 24
188.220.11.0/24 maxlen: 24
188.220.18.0/23 maxlen: 24
188.220.60.0/23 maxlen: 24
188.220.98.0/23 maxlen: 24
188.220.111.0/24 maxlen: 24
188.220.145.0/24 maxlen: 24
188.220.165.0/24 maxlen: 24
188.220.193.0/24 maxlen: 24
188.221.3.0/24 maxlen: 24
188.221.12.0/24 maxlen: 24
188.221.18.0/24 maxlen: 24
188.221.21.0/24 maxlen: 24
188.221.22.0/24 maxlen: 24
188.221.35.0/24 maxlen: 24
188.221.38.0/23 maxlen: 24
188.221.60.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
188.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:27:64:95:d5:8b:d5:d1:04:45:13:67:e6:88:bc:32:8a:21:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 13 10:14:40 2026 GMT
Not After : Sep 12 10:19:40 2027 GMT
Subject: CN=722B35AE6598D2757198519DB391506F0F0060DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:0a:93:2c:ea:45:58:dc:3a:05:32:06:bf:
ea:89:56:fa:13:19:dd:22:1a:67:6a:9d:83:24:e6:
d0:dc:b8:44:01:e9:bb:50:5d:96:6c:76:f4:ea:41:
87:25:f8:c5:f1:d3:f2:15:29:90:da:47:04:a0:f5:
2e:a2:21:6f:3e:71:38:cf:80:9d:bd:88:6e:30:1b:
2f:dc:53:44:48:9b:33:c2:0d:4e:5a:3e:f6:be:06:
e2:42:45:dd:9c:97:13:cf:f3:fd:8a:2a:8c:3c:d7:
ff:67:4a:a4:32:34:8d:fd:f4:8a:78:ee:87:39:98:
bd:c4:9a:57:55:8b:9e:62:1a:e1:2f:47:fc:9c:03:
95:45:f0:f2:e3:41:df:69:d2:b6:93:9d:86:0c:af:
ba:37:dd:7d:34:99:f9:6c:87:7f:71:3c:13:55:f3:
3a:b6:87:e3:77:dc:0e:7a:6b:81:df:1d:57:cd:4c:
2e:11:1e:a9:ec:af:3e:20:1e:df:4b:5e:32:c8:3e:
15:78:9c:bf:49:01:a3:cc:3d:be:96:0a:9a:18:b1:
c1:b3:2b:09:d8:e1:93:f6:af:b4:35:34:07:cc:83:
1a:36:d8:c9:cc:8f:95:ff:30:81:43:69:a4:9f:80:
34:50:a8:3a:4d:46:86:9c:6a:4d:a4:fb:f6:b1:28:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:35:AE:65:98:D2:75:71:98:51:9D:B3:91:50:6F:0F:00:60:DB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.5.0/24
51.146.14.0/24
51.146.85.0/24
51.146.88.0/24
51.146.108.0/24
51.194.154.0/24
51.194.160.0-51.194.162.255
51.194.167.0/24
51.241.5.0/24
51.241.16.0/23
51.241.42.0/23
51.241.54.0/24
51.241.60.0/23
51.241.137.0/24
51.241.149.0/24
51.241.170.0/24
51.241.182.0/24
51.241.186.0/24
51.241.213.0/24
78.105.100.0/24
78.105.103.0/24
78.105.169.0/24
188.220.4.0/24
188.220.6.0/24
188.220.9.0/24
188.220.11.0/24
188.220.18.0/23
188.220.60.0/23
188.220.98.0/23
188.220.111.0/24
188.220.145.0/24
188.220.165.0/24
188.220.193.0/24
188.221.3.0/24
188.221.12.0/24
188.221.18.0/24
188.221.21.0-188.221.22.255
188.221.35.0/24
188.221.38.0/23
188.221.60.0/23
188.221.88.0/22
188.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b5:f6:c5:c2:57:33:88:98:56:45:7d:58:6a:3b:33:cc:67:
8f:5d:ef:9a:2a:9d:57:33:ef:28:75:e6:19:2b:c2:a8:fd:b0:
88:0f:b5:6a:42:ba:da:1a:96:9f:28:e5:49:d0:f4:d2:25:9d:
12:2e:3a:92:e3:ed:22:19:52:af:f4:2c:e9:69:af:f0:15:cc:
ae:d8:66:32:88:a7:e5:2c:b4:ac:0e:1f:0e:87:a2:3c:8c:cb:
0e:ec:9d:c8:64:fe:f1:ea:70:02:f4:d1:82:0a:28:3d:cb:2e:
08:d2:ed:11:97:01:5e:ec:a3:6c:3c:00:10:ef:66:ca:5d:d5:
28:41:1c:69:d3:a3:23:31:b4:0e:21:01:00:2f:b5:e4:50:db:
e1:aa:e2:2a:ae:f8:c1:da:1a:db:65:be:85:3c:08:c6:cc:eb:
1e:64:32:c9:a2:fc:65:4b:31:a2:42:fd:70:02:38:c3:e5:8a:
f8:7e:af:46:67:87:10:3d:27:d6:c5:dc:40:9b:ec:da:20:97:
f8:89:c7:44:dd:de:39:dc:b1:6e:3c:51:be:a8:19:b5:65:d8:
2e:a5:7e:3c:6a:16:01:0c:93:71:9a:91:26:92:0e:fb:17:63:
fd:f5:4a:fd:fb:f1:ab:7c:0d:39:dd:ae:90:ed:f4:7b:e5:fa:
a1:4d:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:24 2026 by rpki-client