Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: uh9i9l0TunQge+MC7qy+w/RQ0dx400Fj52UZTO7kURg=
Subject key identifier: 50:02:2E:F1:80:8E:5F:FF:03:4B:08:86:1A:1C:84:97:B4:7C:B4:F0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 040BBD1E5523BAC9609A958AD4FEF1739BC69612
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Thu 10 Sep 2026 14:51:01 +0000
ROA not before: Thu 10 Sep 2026 14:46:01 +0000
ROA not after: Thu 09 Sep 2027 14:51:01 +0000
asID: 9304
IP address blocks: 143.20.35.0/24 maxlen: 24
143.20.39.0/24 maxlen: 24
143.20.73.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
143.20.86.0/24 maxlen: 24
143.20.108.0/22 maxlen: 24
143.20.113.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.121.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.139.0/24 maxlen: 24
143.20.144.0/24 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.146.0/24 maxlen: 24
143.20.147.0/24 maxlen: 24
143.20.157.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.176.0/24 maxlen: 24
143.20.188.0/24 maxlen: 24
143.20.189.0/24 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.197.0/24 maxlen: 24
143.20.201.0/24 maxlen: 24
143.20.202.0/24 maxlen: 24
143.20.203.0/24 maxlen: 24
143.20.207.0/24 maxlen: 24
143.20.231.0/24 maxlen: 24
143.20.236.0/24 maxlen: 24
143.20.239.0/24 maxlen: 24
143.20.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0b:bd:1e:55:23:ba:c9:60:9a:95:8a:d4:fe:f1:73:9b:c6:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 10 14:46:01 2026 GMT
Not After : Sep 9 14:51:01 2027 GMT
Subject: CN=50022EF1808E5FFF034B08861A1C8497B47CB4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:a8:b9:62:13:13:e3:a8:d9:52:b7:9f:71:
e2:29:ea:eb:30:4d:7f:0f:2a:95:5e:47:0a:38:e2:
8e:27:bf:e2:8f:33:0b:da:be:dc:7c:e8:28:47:30:
95:25:f4:15:8c:7a:49:27:3c:29:94:97:58:ed:e0:
80:2a:60:ca:03:6f:6d:3b:e4:f0:cf:c9:46:da:b4:
20:33:ec:dd:e9:7c:f7:c1:ab:6f:80:09:76:fe:85:
fc:2c:47:93:73:66:48:c3:72:c6:41:40:b9:a2:21:
c6:04:b1:b5:88:f1:bb:ba:7f:9a:2a:83:cf:0d:3e:
d3:a3:da:5d:a4:11:43:a2:38:13:67:49:bf:0f:41:
b4:ee:0f:7c:d7:f7:c9:6a:7c:81:23:45:77:8c:a1:
8f:17:a9:b5:4e:aa:28:ad:36:08:d5:2b:09:5c:cc:
65:3b:cd:a8:01:59:f8:78:bc:ec:72:ad:f3:4a:36:
a5:22:68:30:52:1a:72:c0:45:a5:bf:e3:47:f8:5f:
1e:8b:e0:8c:ae:9c:8c:f1:9d:8e:01:15:5f:97:25:
9f:de:0e:4e:28:2c:46:34:8b:1f:1a:9d:59:6e:0a:
8c:b9:25:3c:19:f9:7c:f3:91:dd:0b:4a:fc:5f:3d:
4f:83:e5:0e:af:f2:c2:cd:6f:20:d6:99:66:e5:07:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:2E:F1:80:8E:5F:FF:03:4B:08:86:1A:1C:84:97:B4:7C:B4:F0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.35.0/24
143.20.39.0/24
143.20.73.0/24
143.20.77.0/24
143.20.84.0/24
143.20.86.0/24
143.20.108.0/22
143.20.113.0/24
143.20.116.0-143.20.118.255
143.20.121.0/24
143.20.131.0/24
143.20.139.0/24
143.20.144.0/22
143.20.157.0/24
143.20.167.0-143.20.168.255
143.20.176.0/24
143.20.188.0-143.20.190.255
143.20.192.0/24
143.20.197.0/24
143.20.201.0-143.20.203.255
143.20.207.0/24
143.20.231.0/24
143.20.236.0/24
143.20.239.0/24
143.20.247.0/24
Signature Algorithm: sha256WithRSAEncryption
11:78:c1:de:3c:73:00:bd:50:61:b7:5b:ed:e3:51:37:5d:81:
d6:e7:8b:dd:f8:6a:ad:80:b3:63:d1:54:e7:25:ea:7f:c0:96:
e3:65:94:1a:59:eb:ee:67:9f:4d:6a:ba:42:66:02:50:c6:d7:
87:a2:e1:28:d5:6a:84:41:b2:a3:8e:aa:ad:47:f4:da:c2:3e:
91:51:ce:90:46:1c:53:62:32:dc:74:a2:01:b6:aa:ec:fd:15:
03:8c:06:2a:49:34:e2:aa:2c:d3:88:e0:2e:1d:50:88:db:f8:
8a:32:73:e7:ab:09:ad:6d:c0:ce:1f:b5:22:93:f4:de:4d:ac:
7c:67:8a:30:26:03:05:72:19:e1:e8:7b:e5:5d:18:56:8f:7e:
23:d0:41:be:fb:8f:85:0c:9f:4e:26:f2:7e:6b:f7:2e:19:dd:
85:2f:c0:8d:3b:f8:74:3b:25:46:0e:9b:a9:5b:6d:03:72:58:
01:dd:c0:61:69:7c:cb:14:0e:bb:a9:a6:1d:b9:d2:2e:a6:77:
2b:76:4d:89:7c:cc:91:a9:a2:2f:a9:14:a9:ce:36:a4:06:d6:
fd:89:6f:da:dd:37:c1:99:57:ac:82:f5:21:2b:c8:ba:d6:a4:
57:21:31:5e:de:15:2f:7d:59:e7:1d:52:6d:de:ed:b6:50:84:
7b:50:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:57:06 2026 by rpki-client