Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: ZJH0dK0Hy0y0i0/ljmaBZln1mstjXjNLuwhCtAY3yZY=
Subject key identifier: 16:75:3D:21:FF:09:57:97:B1:02:CC:98:97:6D:06:A3:58:C9:2B:71
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4A513E83F27401AF196F9501746CF7DBA6741740
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS9304.roa
Signing time: Wed 08 Apr 2026 06:51:58 +0000
ROA not before: Wed 08 Apr 2026 06:46:58 +0000
ROA not after: Wed 07 Apr 2027 06:51:58 +0000
asID: 9304
IP address blocks: 147.125.129.0/24 maxlen: 24
147.125.132.0/24 maxlen: 24
147.125.133.0/24 maxlen: 24
147.125.134.0/24 maxlen: 24
147.125.140.0/24 maxlen: 24
147.125.141.0/24 maxlen: 24
147.125.142.0/24 maxlen: 24
147.125.143.0/24 maxlen: 24
147.125.144.0/24 maxlen: 24
147.125.145.0/24 maxlen: 24
147.125.146.0/24 maxlen: 24
147.125.147.0/24 maxlen: 24
147.125.247.0/24 maxlen: 24
147.125.248.0/24 maxlen: 24
147.125.249.0/24 maxlen: 24
147.125.250.0/24 maxlen: 24
147.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:51:3e:83:f2:74:01:af:19:6f:95:01:74:6c:f7:db:a6:74:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 8 06:46:58 2026 GMT
Not After : Apr 7 06:51:58 2027 GMT
Subject: CN=16753D21FF095797B102CC98976D06A358C92B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:54:54:59:8b:3f:0d:31:df:38:50:36:3d:
f1:f1:b4:07:f7:3e:a6:3d:19:c9:89:c9:41:91:ec:
76:20:47:ac:15:42:50:5d:86:65:cc:b3:7a:45:09:
1d:a1:a9:49:62:57:f9:c6:09:ab:25:09:5f:50:0f:
f3:2f:e1:0e:7b:fc:5c:8b:d9:f3:13:ff:2e:dc:f0:
b8:d6:d7:7c:e5:8a:a8:3b:af:cf:7a:16:9f:aa:2d:
18:03:75:ea:c9:dd:54:81:46:bb:d9:c8:b7:11:52:
9f:58:64:5e:b9:92:13:66:03:e3:7b:51:2e:40:80:
8c:b9:62:46:4b:c7:38:86:6f:89:67:18:26:01:b5:
ac:99:41:12:e4:5a:0f:16:47:68:c4:04:65:62:2d:
6a:25:98:a4:5d:a8:4d:8a:51:e7:a0:bb:dd:35:8f:
2e:4c:a4:0d:9c:6d:28:2c:fd:40:9c:65:c1:fb:09:
b1:3f:ad:ee:9c:3e:ff:2a:f8:20:01:74:81:89:f7:
c5:7a:43:8b:e6:79:13:88:84:f4:14:65:fd:5d:e4:
49:ee:5d:8e:a8:53:e1:f9:b5:39:21:33:0d:7d:4d:
d1:bd:b5:da:24:80:cb:61:45:ba:52:b6:af:b6:df:
47:11:08:76:65:c3:c3:7d:98:e0:15:38:fc:bf:92:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:3D:21:FF:09:57:97:B1:02:CC:98:97:6D:06:A3:58:C9:2B:71
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.129.0/24
147.125.132.0-147.125.134.255
147.125.140.0-147.125.147.255
147.125.247.0-147.125.251.255
Signature Algorithm: sha256WithRSAEncryption
a4:2b:d1:aa:76:46:e5:ce:c6:c2:e4:19:0d:33:42:c0:4e:f2:
8e:b0:ac:ec:16:5b:51:7f:ec:5f:f0:83:0c:a5:5a:d0:a8:0a:
41:d4:47:7d:0b:59:c6:4f:53:a3:d7:26:c7:2e:e7:e9:08:77:
b7:bc:3a:f2:09:62:1e:9a:fb:ba:56:d1:18:e6:97:a9:cc:0f:
67:ac:1f:9b:2d:d3:2f:96:06:62:5d:4a:73:d7:92:49:0c:b3:
7e:0c:fb:90:e0:36:29:8f:20:94:f6:1a:ea:07:73:ac:cf:03:
2b:c7:7c:b0:7c:bb:a1:a2:ec:1d:3e:9c:8e:0f:a8:73:09:71:
f8:53:18:0b:79:25:eb:7a:84:6c:b9:dc:98:3f:7e:d8:b7:97:
4a:a6:65:c6:3c:f2:c5:31:a7:fd:42:1c:d7:70:a8:e0:f4:7d:
e0:2a:f5:8f:f1:dd:41:0c:d6:df:88:a3:34:e7:ff:37:f9:18:
b7:87:fe:68:40:5a:20:be:ff:43:87:42:aa:05:b0:a1:93:27:
09:b7:cd:53:7c:9e:b4:30:90:ad:ac:22:19:e8:2a:81:87:2e:
d6:c8:45:11:a3:3b:0f:26:38:af:05:fd:10:83:21:ec:81:5f:
2f:4e:c5:6f:28:e0:d6:f3:f9:b2:29:67:ae:c7:44:96:55:34:
83:f7:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:53:22 2026 by rpki-client