Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: Xs6IIIOL1NDqdYc4yHhjFvxxrKyjCPiGXW5vL5AILPA=
Subject key identifier: C5:99:BE:E2:C6:8B:1E:81:E6:6F:1D:23:27:4F:76:9E:0D:06:E2:0D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 23C7A06CB7C8FC9F34CE09340A5342F59435E997
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Sat 19 Sep 2026 00:06:27 +0000
ROA not before: Sat 19 Sep 2026 00:01:27 +0000
ROA not after: Sat 18 Sep 2027 00:06:27 +0000
asID: 9304
IP address blocks: 141.11.51.0/24 maxlen: 24
141.11.79.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
141.11.137.0/24 maxlen: 24
141.11.192.0/23 maxlen: 24
141.11.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c7:a0:6c:b7:c8:fc:9f:34:ce:09:34:0a:53:42:f5:94:35:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 19 00:01:27 2026 GMT
Not After : Sep 18 00:06:27 2027 GMT
Subject: CN=C599BEE2C68B1E81E66F1D23274F769E0D06E20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:4e:dc:cf:82:70:5a:d4:3c:cd:4f:70:ca:
19:ea:5b:07:d4:37:fd:53:28:f3:8b:15:ac:3a:32:
8f:a8:1d:a4:af:f6:a5:1c:d7:80:ce:1d:a7:84:a7:
06:57:a7:3b:bd:c4:8b:d9:6a:29:6a:3e:d6:78:a5:
c6:8f:a4:a3:24:16:a4:26:73:b6:e8:fa:16:f7:56:
5f:90:fc:64:88:63:04:a1:1c:e9:f3:a3:5b:91:fb:
e7:b2:78:4c:3c:d9:fe:98:76:22:5b:70:ed:44:1d:
b4:59:8f:79:24:c3:18:4d:4a:61:79:b5:c4:a3:a8:
9e:f9:4b:36:31:95:82:92:d7:7e:45:cc:58:60:b4:
43:dc:a0:28:c7:8b:26:29:4f:5f:52:a2:7f:6b:f6:
b0:e2:d9:f2:d4:bb:f0:93:33:9c:47:71:bf:b5:95:
26:86:da:de:61:b0:d9:9c:5a:d2:f4:af:0a:65:dc:
84:2c:c1:70:76:5e:c3:8f:3b:df:0d:51:34:f8:7d:
3e:98:9a:1e:56:cf:d8:7a:7e:5f:2e:b8:05:9d:2f:
da:78:14:16:7e:23:05:57:8e:de:1c:aa:48:ed:52:
58:40:f6:4c:ff:f1:87:d3:0a:50:49:66:4f:ab:95:
69:15:4a:80:f7:6e:f1:c4:95:9d:56:f5:f1:21:67:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:BE:E2:C6:8B:1E:81:E6:6F:1D:23:27:4F:76:9E:0D:06:E2:0D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.51.0/24
141.11.79.0/24
141.11.108.0/24
141.11.137.0/24
141.11.192.0/23
141.11.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bf:2b:b3:1e:86:d1:cd:da:d8:41:c6:aa:cf:3d:d1:4c:77:
5a:3b:97:1a:fe:a2:fd:df:9a:94:69:9f:d7:a9:07:c8:fe:7d:
18:d9:04:a4:90:ac:44:73:40:3c:4f:b7:d5:cb:82:81:a2:2f:
ec:3b:17:50:47:f0:b2:52:6f:37:22:cc:0a:8d:c2:f8:b7:b9:
11:1d:41:6e:3e:34:e3:36:10:fb:60:63:ee:19:f0:d6:41:e2:
f8:ef:1b:23:c2:0b:1a:78:df:a9:b4:5b:f9:04:03:62:2d:1d:
c6:0e:a2:3b:47:87:af:02:8d:45:9c:c3:4d:99:58:8b:21:a5:
21:77:b6:f1:4f:0a:43:0d:2d:57:7b:93:c2:8a:95:e2:db:a0:
6e:ac:5b:0f:42:4e:ff:ab:26:b3:19:b7:5f:38:c5:6a:c7:b0:
6a:8b:78:2a:42:bb:07:f8:55:0f:0c:a5:b1:00:f3:08:fd:5c:
f4:1b:fd:1a:4c:ac:0d:56:29:6c:0d:85:3b:59:f3:66:00:b8:
30:ce:50:29:98:c8:cb:46:71:81:e3:dd:25:03:a8:37:92:27:
26:8d:a4:b0:55:29:ea:5e:f3:b8:52:c6:6f:7c:ec:22:14:63:
70:cc:54:97:6e:48:45:1d:b1:37:0e:bc:65:7e:11:b9:36:b9:
cb:6a:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:00 2026 by rpki-client