Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: DSXO5MuU2dSQQkg7sumPUsdJO+jm3U1/FZrUrPUffyE=
Subject key identifier: 22:AA:6E:CF:5C:9E:65:B5:92:81:58:70:C8:B9:87:25:91:9A:CB:56
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 14290448259F9119EDA5823658E4A4813859729F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Wed 04 Nov 2026 00:01:48 +0000
ROA not before: Tue 03 Nov 2026 23:56:48 +0000
ROA not after: Wed 03 Nov 2027 00:01:48 +0000
asID: 9304
IP address blocks: 141.11.108.0/24 maxlen: 24
141.11.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:29:04:48:25:9f:91:19:ed:a5:82:36:58:e4:a4:81:38:59:72:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 3 23:56:48 2026 GMT
Not After : Nov 3 00:01:48 2027 GMT
Subject: CN=22AA6ECF5C9E65B592815870C8B98725919ACB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:79:dd:74:5f:15:0f:ec:10:94:44:66:26:
30:42:c5:66:2a:23:b8:59:4e:0f:73:3c:9a:0f:c9:
77:81:6e:4c:bf:18:b0:cb:6a:6b:5a:01:1f:a6:bf:
77:26:e5:8d:c4:7f:cf:80:70:1e:12:21:28:b0:86:
8f:35:ce:06:2e:8b:8b:39:e7:2b:d7:1e:c8:2a:d7:
9a:ac:7d:91:08:1f:02:dc:fe:30:61:2a:60:1e:8c:
3e:f7:ed:b9:88:2b:7a:5c:80:0d:c4:99:86:d5:c4:
4a:0a:16:e0:77:a7:98:cc:a8:83:05:8d:24:c9:99:
74:06:93:43:ae:42:e4:2b:9a:1d:0f:5a:d9:3d:2a:
3d:2b:8c:fc:2a:b8:ed:69:9f:87:e0:fd:b9:47:0c:
cf:23:f5:68:74:14:fd:9d:25:3c:21:b0:e8:0f:97:
d9:85:d5:a1:35:37:2f:5f:19:2d:01:c5:70:82:4c:
1d:47:a4:0d:31:2a:54:74:f9:db:2f:2b:a8:a0:b5:
55:9e:c7:a4:e6:28:dd:f2:53:cd:00:f7:a3:21:c7:
83:77:9b:0a:8d:ce:0c:dd:17:f8:7d:82:c1:54:80:
dd:9c:24:aa:24:a5:36:65:bf:be:b7:0f:fe:fc:cc:
cf:e4:fb:2c:15:2d:92:9e:43:6b:e3:83:71:e6:3b:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:6E:CF:5C:9E:65:B5:92:81:58:70:C8:B9:87:25:91:9A:CB:56
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
141.11.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:45:f7:c8:39:7e:aa:28:5c:6d:06:21:0f:cb:35:cc:24:41:
3b:1f:0b:8a:3f:9b:b3:1c:80:57:f6:f9:92:a2:5c:7e:2e:dc:
85:d3:60:c1:ff:bd:f8:57:67:ad:7e:a1:90:e6:72:92:9a:be:
0b:ac:6f:03:7b:30:97:ea:ef:c7:12:4d:c2:03:c2:12:d4:14:
e0:af:0f:fd:4d:a8:f7:57:9b:a4:ca:da:90:85:b9:95:9c:a7:
ff:65:dc:80:c8:49:79:54:c7:60:28:d2:35:e4:57:69:dd:91:
0c:8c:74:b7:c5:91:46:3f:05:a6:54:cc:72:f0:30:d6:02:4b:
a6:31:e3:26:4b:8e:01:22:76:82:08:f5:ec:1d:10:07:75:9a:
df:5e:55:cd:74:a1:5f:23:b2:4f:25:cf:17:48:43:8f:58:55:
9e:d0:b5:aa:1a:d5:b4:f8:93:e3:e3:2e:a7:e8:e7:25:cd:ee:
f1:1f:59:83:0b:86:a6:6f:86:82:e1:14:43:8b:fb:dd:95:35:
e8:60:32:e1:64:fe:bc:94:9f:76:03:74:1c:0a:1f:0d:a4:7a:
ee:66:ce:ae:19:39:fa:d4:06:25:50:41:05:c3:6a:1b:1c:54:
c3:d8:71:3d:db:7e:fe:aa:aa:05:7a:0b:18:f2:69:03:ab:f4:
af:52:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:14:05 2026 by rpki-client