Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: wr+8ciSSCVSqT7vsSRzu7Vg9Ca8O3dZuQs5pre2/i9Y=
Subject key identifier: E8:BC:CF:F3:A1:CD:27:C0:39:23:45:C5:5D:DC:86:D8:49:D4:A2:16
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1372D3EBD9235363E089687DC71E520D490E346F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Tue 27 Oct 2026 14:34:30 +0000
ROA not before: Tue 27 Oct 2026 14:29:30 +0000
ROA not after: Tue 26 Oct 2027 14:34:30 +0000
asID: 9304
IP address blocks: 143.20.36.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.144.0/24 maxlen: 24
143.20.188.0/24 maxlen: 24
143.20.189.0/24 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:72:d3:eb:d9:23:53:63:e0:89:68:7d:c7:1e:52:0d:49:0e:34:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 27 14:29:30 2026 GMT
Not After : Oct 26 14:34:30 2027 GMT
Subject: CN=E8BCCFF3A1CD27C0392345C55DDC86D849D4A216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:d3:61:ea:c0:7e:e0:33:91:e5:5c:59:ee:
f0:fe:66:b3:30:f6:8a:8f:da:4e:5a:44:a4:a1:19:
1a:e9:90:fc:bb:a0:02:65:32:33:64:7f:99:59:92:
8b:c8:73:e1:46:b8:ff:cc:45:4c:6f:ec:6e:43:f6:
d6:0b:01:76:08:99:cf:f6:08:aa:20:72:82:85:a5:
3c:41:b5:cc:c7:05:ab:cb:53:b0:e8:9b:ce:c9:8f:
02:15:87:8b:12:24:8c:08:05:36:50:25:3a:1c:e6:
cd:bf:83:9f:28:0b:ae:f1:38:96:d0:75:68:15:4e:
3b:6a:36:88:9d:0f:77:3c:ec:0e:7f:90:b7:08:11:
9b:c2:17:cc:49:58:85:54:68:10:3c:20:ba:6c:6d:
7f:86:a5:5c:30:d8:2a:9e:90:55:1f:13:84:c4:c1:
a6:1d:db:de:a6:14:6f:5b:b4:0e:76:65:9d:0e:59:
30:a1:79:f4:bc:83:f6:a4:36:ad:90:66:da:5b:bd:
32:a9:96:b7:34:64:2d:ee:b5:12:f9:f9:38:da:d8:
1b:d9:39:c0:7b:55:22:98:1e:93:b2:7b:f9:03:28:
8e:a5:bb:59:e9:d2:64:3d:28:e3:f6:fc:51:02:39:
bf:c5:a6:ff:cd:3b:23:78:86:b1:7e:5e:7d:a2:72:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:CF:F3:A1:CD:27:C0:39:23:45:C5:5D:DC:86:D8:49:D4:A2:16
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.36.0/24
143.20.65.0/24
143.20.74.0/24
143.20.77.0/24
143.20.84.0/24
143.20.116.0-143.20.118.255
143.20.144.0/24
143.20.188.0/23
143.20.192.0/24
143.20.231.0/24
Signature Algorithm: sha256WithRSAEncryption
57:25:09:c2:20:39:c2:d8:13:e9:67:6e:77:ca:b7:b7:bf:42:
57:a6:6f:b6:f2:bc:a0:4f:2d:ed:93:33:ca:f1:16:64:c2:26:
3e:4f:76:3b:17:ec:86:36:17:d9:e3:1a:93:42:58:5f:fd:2f:
fd:9a:7e:63:c2:13:11:cb:4b:70:49:00:72:46:6e:54:f6:66:
10:88:30:a8:0d:2d:22:cb:f4:df:73:25:c1:aa:70:b6:ed:22:
37:b8:74:80:ea:a5:90:20:8f:c7:c3:46:fd:0d:bf:9b:61:42:
c7:39:e7:18:56:95:33:f9:ba:c3:7c:5b:7d:9e:75:bc:6b:58:
d6:cc:1b:43:2c:23:24:77:da:75:8e:54:d8:4a:06:a5:7e:80:
bc:5d:c8:3a:00:ac:61:42:92:f5:32:7c:01:06:dc:ed:0f:09:
28:81:68:d5:da:1d:e0:e0:5c:3d:93:c7:e6:63:44:d9:f3:4a:
09:94:76:0f:56:31:c5:fc:4c:ed:b9:23:5c:e2:f3:a4:ea:41:
bf:e4:c0:e0:3c:e0:ed:3f:d8:66:26:e5:6f:80:7b:cc:d2:6c:
e9:89:6d:26:ff:9b:ec:da:37:d8:48:6a:a6:c4:d6:30:2b:f4:
ce:ec:99:81:a3:ef:66:b6:6c:4c:2e:1d:5e:d8:7b:00:ba:28:
de:cc:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:04:16 2026 by rpki-client