Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 16eI1Sli8QlladwAklukook5cbDi9/bwdNblfs4sg8E=
Subject key identifier: 5D:C0:91:8A:E7:6F:3B:9F:2F:BC:BD:B6:0F:73:58:44:91:02:8F:C8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 625EDD77A71D959B3A2AFC6FAEFDA6D7B28A662E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Sun 13 Sep 2026 10:19:39 +0000
ROA not before: Sun 13 Sep 2026 10:14:39 +0000
ROA not after: Sun 12 Sep 2027 10:19:39 +0000
asID: 9304
IP address blocks: 46.202.36.0/24 maxlen: 24
46.202.50.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.203.3.0/24 maxlen: 24
46.203.5.0/24 maxlen: 24
46.203.13.0/24 maxlen: 24
46.203.39.0/24 maxlen: 24
46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.35.0/24 maxlen: 24
91.124.49.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.84.0/22 maxlen: 24
91.124.124.0/23 maxlen: 24
92.112.9.0/24 maxlen: 24
92.112.104.0/24 maxlen: 24
92.113.56.0/22 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.95.5.0/24 maxlen: 24
178.95.24.0/24 maxlen: 24
178.95.68.0/22 maxlen: 24
178.95.75.0/24 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5e:dd:77:a7:1d:95:9b:3a:2a:fc:6f:ae:fd:a6:d7:b2:8a:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 13 10:14:39 2026 GMT
Not After : Sep 12 10:19:39 2027 GMT
Subject: CN=5DC0918AE76F3B9F2FBCBDB60F73584491028FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:3f:1d:89:9b:d0:2e:91:53:8a:82:fd:dd:
ea:92:cf:60:c1:9b:5d:e4:07:0e:9a:8c:25:bb:b2:
51:1c:cf:67:f8:ed:8f:23:15:0f:0d:7b:15:fe:22:
6d:35:e5:25:ff:de:93:da:43:c5:c8:a3:de:7e:4b:
b3:33:a4:73:01:9d:b6:92:5b:9f:d4:6e:b3:c9:4c:
d8:27:5d:30:7b:1b:0f:40:9d:8c:c4:f1:f2:52:25:
31:0c:16:e5:d1:3d:e9:e2:ba:ee:93:d7:da:b9:f3:
de:bb:04:18:a6:95:db:7c:b6:85:87:36:9a:7d:8e:
b5:db:47:b3:f7:c3:bf:e0:08:76:5e:cd:b8:c7:28:
7e:e3:c6:94:80:83:f8:c9:2f:91:c8:4e:c3:b3:0a:
fc:61:54:40:00:3c:d3:20:0b:82:83:ea:2e:a2:a3:
2d:92:18:3a:bb:26:cf:7e:de:d7:2b:fc:f1:73:a6:
1a:c2:3d:b1:3d:9f:4a:3d:8d:7b:28:b9:90:1b:88:
4b:c5:78:31:f4:7e:b5:7f:39:f4:14:85:f9:29:f2:
41:43:42:a9:62:79:fc:39:3a:cf:d7:ce:2f:6f:ca:
08:52:17:ec:0c:1c:1a:fd:cd:56:ab:31:eb:d9:08:
81:9c:55:f5:2c:8a:14:58:2a:81:17:56:d3:2b:8d:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:91:8A:E7:6F:3B:9F:2F:BC:BD:B6:0F:73:58:44:91:02:8F:C8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.36.0/24
46.202.50.0/24
46.202.70.0/24
46.203.3.0/24
46.203.5.0/24
46.203.13.0/24
46.203.39.0/24
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.35.0/24
91.124.49.0/24
91.124.64.0/24
91.124.84.0/22
91.124.124.0/23
92.112.9.0/24
92.112.104.0/24
92.113.56.0/22
92.113.249.0/24
95.134.68.0/24
95.134.84.0/23
95.134.133.0/24
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.6.0/24
95.135.40.0/24
95.135.70.0/24
178.92.15.0/24
178.92.21.0/24
178.92.36.0/24
178.92.39.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.93.0.0/23
178.93.76.0/24
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.241.0/24
178.94.1.0/24
178.94.17.0/24
178.94.169.0/24
178.94.190.0/24
178.95.5.0/24
178.95.24.0/24
178.95.68.0/22
178.95.75.0/24
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cf:35:3d:3f:b8:1c:bb:da:d3:a6:54:59:44:25:74:01:f6:
ac:b2:f4:d9:f9:cc:04:5d:ad:c0:f1:15:a8:56:3a:4e:ca:a9:
1d:fa:52:55:45:9a:cd:7a:60:75:38:96:dc:1f:ea:bf:1d:9a:
19:d1:3d:8b:d2:11:38:c1:0b:61:37:d8:a3:cf:a2:59:f5:5d:
4e:08:73:e9:7c:e0:2c:ab:08:58:2e:81:50:2f:7c:23:a1:ea:
3c:26:aa:e4:6b:98:34:98:3e:4f:a3:34:89:a3:f0:6d:7e:c3:
1e:88:bd:06:16:55:e0:5a:11:55:ee:e5:b7:a3:01:3b:b6:aa:
06:1d:49:3c:91:c4:57:4f:37:65:92:dc:49:56:79:90:0a:1d:
75:f8:28:7c:54:2d:fd:00:51:1c:ec:41:fc:0e:09:59:59:56:
47:34:1c:f7:a5:e2:ff:86:a4:67:e3:dd:f9:ec:ef:a7:ea:26:
e6:ef:88:3a:29:f1:52:44:be:93:7c:3a:bf:e9:15:f2:81:e6:
95:13:2c:d2:c2:3d:05:6a:48:aa:77:c4:41:b8:90:97:49:31:
09:de:68:c9:7f:dc:f4:01:41:af:2f:b8:55:1b:19:67:1a:85:
dc:34:07:58:55:d8:13:7e:c1:c4:9c:49:5b:ba:68:37:00:46:
f4:e1:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:31:54 2026 by rpki-client