Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: vGw5gvMSMCnjmdGfqHpbT5I0WedWoMZMTGLDVP3HoF0=
Subject key identifier: E7:B5:44:BA:DD:36:DB:66:9C:9E:8B:E5:00:05:F6:F9:A7:99:5F:55
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 665035BD773656A55303AE111F846A635B6F518C
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
Signing time: Sun 26 Oct 2025 04:40:11 +0000
ROA not before: Sun 26 Oct 2025 04:35:11 +0000
ROA not after: Sun 25 Oct 2026 04:40:11 +0000
asID: 9304
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
139.28.48.0/24 maxlen: 24
139.28.49.0/24 maxlen: 24
194.93.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:50:35:bd:77:36:56:a5:53:03:ae:11:1f:84:6a:63:5b:6f:51:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 26 04:35:11 2025 GMT
Not After : Oct 25 04:40:11 2026 GMT
Subject: CN=E7B544BADD36DB669C9E8BE50005F6F9A7995F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:f5:d0:d7:4c:3d:10:7d:55:f5:1d:7f:74:
0b:37:69:91:65:d2:1c:58:b7:41:0b:f0:80:c0:8c:
dc:2f:ec:db:5d:55:56:8c:60:fa:94:d8:90:31:8a:
2c:8b:e1:39:a7:12:0d:9e:4b:d6:63:89:3d:d5:e7:
ad:d2:f1:89:e7:d6:58:1f:55:28:f3:68:a1:e2:00:
8d:47:05:00:cd:aa:ed:c6:33:7f:91:38:cf:1a:1d:
1e:02:ae:9f:e2:fe:f9:ba:f6:4b:f8:97:30:42:e9:
77:15:2b:db:e0:10:cb:7b:d6:61:b3:42:fb:17:83:
8d:cc:29:1e:bb:ad:e9:91:cc:13:14:18:5f:9b:52:
d5:b7:cc:5b:30:08:80:f8:c7:ff:e6:fa:90:ce:ad:
e5:10:1d:31:dd:f3:31:73:78:95:58:4b:fa:94:cf:
af:9b:1a:dd:18:41:e8:dd:24:2e:6d:32:7d:90:b1:
f9:5b:d9:44:2c:bc:fe:80:66:75:c9:18:61:77:79:
1a:6e:74:9d:8a:a9:66:0e:47:44:80:3e:f9:9f:d8:
10:68:6a:51:48:fe:8b:e6:74:c6:0e:d9:09:b3:73:
c0:3f:cc:d1:c9:86:20:4d:2a:e0:91:51:4e:e7:cc:
4c:74:e9:a8:a5:10:95:f0:a7:f2:12:aa:c5:d0:4b:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:44:BA:DD:36:DB:66:9C:9E:8B:E5:00:05:F6:F9:A7:99:5F:55
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
139.28.48.0/23
194.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b4:81:bd:c0:4d:35:cc:fa:91:8c:f0:19:b0:37:64:fd:47:
58:4e:ec:8a:d4:0f:08:62:61:ac:02:04:c8:bb:a5:e1:c3:72:
1e:31:f7:e1:35:56:ff:15:9f:bd:9a:ab:58:04:42:26:84:31:
fb:16:c7:13:30:7a:bb:7f:43:82:03:0d:e7:bf:6d:dc:9c:b6:
af:27:70:f0:0c:07:0c:c1:73:3a:74:89:bb:e3:ca:64:c3:0d:
99:cd:4b:f4:d0:c5:f3:c9:a9:58:d5:82:e1:f7:9a:2e:65:da:
23:d8:34:44:bf:9f:c0:4a:de:da:c5:e3:b8:d7:8f:3a:a7:eb:
df:a0:3e:be:e1:ea:57:73:66:b7:d4:00:28:67:d3:22:e7:e5:
37:06:2d:52:b8:a4:d3:de:6c:97:83:b4:4e:48:89:bc:59:cd:
c6:12:06:68:10:96:0a:4e:16:0c:40:dc:b4:3b:f4:b2:55:3c:
f1:43:52:73:ec:d1:e8:f4:67:a1:f0:01:54:09:ed:72:8c:eb:
02:62:f5:41:ce:eb:a4:2c:cf:3c:ce:87:5c:d0:0c:fb:4b:95:
71:cb:53:f0:32:d0:50:83:6d:46:32:79:b0:0b:1a:23:d3:72:
96:c2:a0:d5:b9:df:ad:29:57:18:c7:74:f2:04:4d:62:a9:4d:
57:bb:9c:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:57 2025 by rpki-client