Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: fCmcINT3HHBJBajlsbpoizG7UpYU63VM2RzhfqD9+PI=
Subject key identifier: 3D:B9:4D:A3:FF:BB:B7:1C:63:DE:79:15:A4:EB:74:EE:52:8E:6C:D4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 106526FB6750B77A76D7BB9C857B6E5330D7A74A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Tue 13 Oct 2026 09:28:09 +0000
ROA not before: Tue 13 Oct 2026 09:23:09 +0000
ROA not after: Tue 12 Oct 2027 09:28:09 +0000
asID: 9304
IP address blocks: 46.202.36.0/24 maxlen: 24
46.202.50.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.203.3.0/24 maxlen: 24
46.203.5.0/24 maxlen: 24
46.203.13.0/24 maxlen: 24
46.203.39.0/24 maxlen: 24
46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.12.0/24 maxlen: 24
91.124.35.0/24 maxlen: 24
91.124.49.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.86.0/24 maxlen: 24
91.124.124.0/23 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.95.5.0/24 maxlen: 24
178.95.75.0/24 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:65:26:fb:67:50:b7:7a:76:d7:bb:9c:85:7b:6e:53:30:d7:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 13 09:23:09 2026 GMT
Not After : Oct 12 09:28:09 2027 GMT
Subject: CN=3DB94DA3FFBBB71C63DE7915A4EB74EE528E6CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b5:58:6f:ab:a1:84:25:36:79:84:f7:4d:7e:
3e:88:cb:a9:ce:d0:3a:11:cf:c1:ff:10:64:bd:3c:
c0:3f:3c:45:a3:50:97:fa:c5:ae:d0:45:08:71:07:
65:1e:f2:13:10:43:09:a9:24:9a:52:4a:9d:1d:2f:
43:a3:b2:42:46:e8:f2:b5:43:72:03:d6:67:e7:74:
6d:d4:f2:81:61:cf:5d:d9:f6:21:4d:0d:31:fe:3f:
f9:70:17:5c:fc:e6:9d:17:37:63:37:75:41:e7:c1:
7d:3d:39:67:a2:f0:ed:eb:2f:ab:68:47:44:c1:1b:
5c:38:95:fd:da:59:22:93:e6:1f:b3:23:9a:19:31:
60:32:23:0c:96:ed:cc:1a:e8:6d:c2:f1:b5:2d:92:
15:67:ee:f3:9e:59:0a:6e:55:4d:b1:9e:55:96:35:
6b:b1:c3:48:b2:a9:46:28:5b:f8:d7:64:07:d7:4b:
fd:1c:15:30:cc:7f:a9:a3:d7:f8:f3:84:02:b5:9f:
89:85:e7:f5:fc:14:f7:33:73:e5:de:0e:19:d2:85:
fc:cc:21:ec:52:eb:c1:09:a4:8d:fe:7e:46:cc:5b:
a0:fd:11:a0:1c:5d:ac:96:6f:af:1d:6c:20:27:ec:
ff:35:0f:f9:16:0f:6f:be:75:9e:66:29:d1:43:d4:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:4D:A3:FF:BB:B7:1C:63:DE:79:15:A4:EB:74:EE:52:8E:6C:D4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.36.0/24
46.202.50.0/24
46.202.70.0/24
46.203.3.0/24
46.203.5.0/24
46.203.13.0/24
46.203.39.0/24
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.12.0/24
91.124.35.0/24
91.124.49.0/24
91.124.64.0/24
91.124.86.0/24
91.124.124.0/23
92.113.249.0/24
95.134.68.0/24
95.134.84.0/23
95.134.133.0/24
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.40.0/24
95.135.70.0/24
178.92.15.0/24
178.92.21.0/24
178.92.36.0/24
178.92.39.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.93.0.0/23
178.93.76.0/24
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.241.0/24
178.94.17.0/24
178.94.169.0/24
178.94.190.0/24
178.95.5.0/24
178.95.75.0/24
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b5:7f:11:e9:e0:42:c7:cd:d7:86:87:a7:f4:6c:33:a5:55:
6c:b8:b3:ed:f6:2b:c4:61:d9:71:46:12:a5:c3:df:36:11:3e:
44:68:0a:b5:3f:60:6f:60:0c:27:c0:e6:41:23:54:95:3a:b7:
fc:0a:a4:78:b9:1e:70:24:c9:eb:43:e9:9b:b4:3b:21:fa:d8:
4d:55:5e:62:ef:a3:17:e3:a6:97:8b:6e:79:d3:a8:c5:aa:79:
cc:06:d5:e4:c2:79:5f:9f:d1:9b:68:e6:51:96:b6:79:15:37:
de:f0:f8:a6:ee:dd:4d:40:6d:fd:fa:fd:18:14:eb:40:84:ac:
30:4c:c2:67:9a:af:31:95:05:e9:15:e7:a3:09:8e:12:04:44:
7f:0f:00:21:6a:41:05:4b:c1:2e:13:eb:55:dc:55:06:27:17:
5a:c7:0d:89:1b:2a:bb:67:ee:a0:b6:16:89:4b:e9:c4:96:e8:
c2:fd:4d:71:50:fe:ec:aa:1c:ca:b6:3a:2d:44:82:aa:dd:6d:
b7:f7:6d:93:bd:16:01:9b:42:4d:f3:39:34:98:1b:3e:50:df:
7e:80:b3:7d:fb:0a:4a:69:cd:c4:fa:d2:e3:f9:bf:b0:eb:4f:
45:b0:bc:27:e9:fc:f6:20:f0:11:3b:81:9d:9c:30:7d:05:78:
71:dd:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:17:34 2026 by rpki-client