Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 1PlGw4cmg4lN4fLX6PCgdxyOrO9tIp0aThR0TLsg9BY=
Subject key identifier: 24:41:96:E7:AC:0F:E7:8E:2E:4C:E9:90:A0:EC:0F:D6:E2:BC:D9:28
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4281366CAE48EE86230680BE73202E4BAB9B0230
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Tue 04 Nov 2025 00:08:41 +0000
ROA not before: Tue 04 Nov 2025 00:03:41 +0000
ROA not after: Tue 03 Nov 2026 00:08:41 +0000
asID: 9304
IP address blocks: 141.11.39.0/24 maxlen: 24
141.11.48.0/24 maxlen: 24
141.11.144.0/24 maxlen: 24
141.11.172.0/24 maxlen: 24
141.11.180.0/24 maxlen: 24
141.11.196.0/24 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.237.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
141.11.245.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:81:36:6c:ae:48:ee:86:23:06:80:be:73:20:2e:4b:ab:9b:02:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 4 00:03:41 2025 GMT
Not After : Nov 3 00:08:41 2026 GMT
Subject: CN=244196E7AC0FE78E2E4CE990A0EC0FD6E2BCD928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:8e:30:3f:e0:e8:71:fe:3f:05:48:c0:63:
72:e5:11:37:a7:7b:b5:a4:70:fa:6e:e0:e5:50:4b:
de:7b:f6:61:86:2e:c7:50:3a:50:23:a1:af:74:20:
3f:cb:c3:fc:9f:9b:e6:91:ec:61:20:5a:aa:33:9b:
70:60:33:45:b0:8c:dc:a6:24:0e:28:8b:ad:8d:21:
21:0f:9b:90:a0:20:0f:1e:d5:d7:a6:a9:84:f8:fd:
9a:73:32:81:37:4e:42:47:e8:f5:59:cb:ab:62:cd:
88:88:ac:85:8d:49:6a:86:31:8c:bb:ed:92:0d:83:
e6:38:e0:59:f6:fb:72:7d:c9:57:88:c1:16:e0:14:
ca:39:d4:4d:47:44:70:64:9d:7f:19:3b:a8:cc:ea:
1b:2f:4e:8d:5d:84:6f:63:cf:42:c0:eb:fd:93:e0:
46:ad:61:65:d5:28:e9:4d:63:42:fc:56:45:9e:7c:
cc:58:29:62:cb:ff:3a:2e:10:b5:73:d4:f2:65:cc:
ee:43:80:67:54:da:71:cf:71:a3:52:07:6f:be:df:
5d:b3:b0:6c:b3:ae:df:a8:69:10:8e:63:ae:cc:ec:
c8:68:1a:9c:ba:e0:a4:07:3e:ef:0c:3a:1d:67:1f:
0b:8c:41:8c:50:d5:89:05:51:f7:e7:2f:33:0a:ef:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:96:E7:AC:0F:E7:8E:2E:4C:E9:90:A0:EC:0F:D6:E2:BC:D9:28
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
141.11.48.0/24
141.11.144.0/24
141.11.172.0/24
141.11.180.0/24
141.11.196.0/24
141.11.198.0/24
141.11.237.0/24
141.11.243.0/24
141.11.245.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c5:f8:03:f0:57:2b:f0:21:61:24:04:d6:14:a0:ec:bb:c3:
36:f3:80:0c:54:2c:ee:d2:97:c2:71:8c:49:2d:bf:39:05:dd:
08:39:46:88:c0:66:d1:24:c1:d2:e2:2c:27:82:16:5d:77:84:
a1:fa:a6:2c:69:15:1b:b5:9c:f6:a9:43:cd:3a:e9:57:be:9a:
bd:f3:23:66:f3:49:92:90:32:95:ce:39:6c:e6:50:84:fd:41:
7e:b2:fa:ef:cf:e7:2d:ce:ba:fa:0a:95:dd:2d:7a:4e:23:d6:
43:60:b4:3f:8c:35:83:18:15:e8:25:94:c7:8e:db:28:c1:0b:
75:5c:74:20:6c:27:65:ed:34:d9:a1:8b:09:3a:89:93:29:c1:
5b:c1:65:62:8c:5f:f6:85:8e:7b:6b:8d:cd:fd:91:64:36:ad:
64:cc:c0:b4:f0:9c:ab:97:c6:6e:53:71:59:69:5b:81:c9:04:
c0:97:47:ea:ff:b4:d4:2e:12:a8:d6:96:92:70:87:5a:80:f8:
d1:40:cb:44:d2:59:07:c5:cd:a5:91:a6:02:06:9a:45:1f:31:
e5:05:2b:26:47:66:32:4e:91:c5:39:78:cf:e1:58:25:d4:ae:
26:4d:c8:53:42:83:64:01:66:b8:ed:62:56:db:d6:8e:f4:f3:
9c:56:1d:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:49 2025 by rpki-client