Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: m2Yf/IY+h1euF+KA7zZcjB4ocwAx3XL+8hB6vQN7cQ8=
Subject key identifier: 19:69:11:8A:04:1C:59:F2:D3:81:2E:31:A5:A1:00:B3:E7:BF:FD:F3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3EF7160042F3B467A5381FD619DA8A54704E6F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Tue 13 Oct 2026 00:00:20 +0000
ROA not before: Mon 12 Oct 2026 23:55:20 +0000
ROA not after: Tue 12 Oct 2027 00:00:20 +0000
asID: 9304
IP address blocks: 82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.27.43.0/24 maxlen: 24
82.27.105.0/24 maxlen: 24
82.29.45.0/24 maxlen: 24
82.29.112.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.65.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
82.41.139.0/24 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.51.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.58.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.99.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
82.47.108.0/24 maxlen: 24
84.75.19.0/24 maxlen: 24
84.75.25.0/24 maxlen: 24
84.75.27.0/24 maxlen: 24
84.75.34.0/24 maxlen: 24
84.75.151.0/24 maxlen: 24
178.83.146.0/23 maxlen: 24
178.83.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f7:16:00:42:f3:b4:67:a5:38:1f:d6:19:da:8a:54:70:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 12 23:55:20 2026 GMT
Not After : Oct 12 00:00:20 2027 GMT
Subject: CN=1969118A041C59F2D3812E31A5A100B3E7BFFDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:f0:29:dc:22:ec:da:25:8f:44:f3:b7:20:
03:b6:b9:e8:70:e5:9e:28:65:f6:1c:76:07:05:e2:
1e:e1:31:fb:31:d5:47:b0:ff:bb:16:dd:9a:7f:d7:
53:41:20:90:b8:75:27:84:9c:41:6e:06:5c:91:48:
ef:05:78:1e:0b:b3:28:81:b6:8b:a8:8b:55:aa:b4:
db:22:85:b8:40:b2:f7:7e:4b:2d:9e:da:82:e2:f6:
cf:41:8b:9c:65:89:97:00:43:03:b8:02:67:a1:b3:
ae:3d:b6:59:b8:6f:ac:95:7a:59:bf:bd:da:7e:89:
91:c8:3d:b0:a6:dd:27:29:88:bf:d2:6a:03:89:b0:
04:0b:aa:96:7a:b5:81:56:30:0d:8f:fa:81:21:13:
a0:9c:eb:b9:33:32:f2:0c:34:aa:e7:03:59:ec:5f:
01:63:ee:4c:bd:2e:40:f8:65:d7:66:0d:07:5d:47:
73:3b:d2:6d:2a:81:9e:bc:c0:24:8a:48:83:d4:8d:
df:ef:9d:43:83:98:4c:55:51:71:8c:39:91:cd:f7:
f4:34:7d:31:e1:7b:cb:4d:e5:97:ff:b3:c5:0a:58:
69:87:02:5b:52:49:9f:05:a9:c6:71:3b:b6:d8:c8:
1b:8b:71:2a:fe:e9:4b:78:44:77:6f:e8:b7:e5:fa:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:69:11:8A:04:1C:59:F2:D3:81:2E:31:A5:A1:00:B3:E7:BF:FD:F3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.27.43.0/24
82.27.105.0/24
82.29.45.0/24
82.29.112.0/24
82.38.38.0/23
82.38.76.0/22
82.39.65.0/24
82.41.75.0/24
82.41.139.0/24
82.47.23.0/24
82.47.51.0-82.47.52.255
82.47.56.0/24
82.47.58.0/24
82.47.96.0/24
82.47.99.0-82.47.100.255
82.47.103.0/24
82.47.108.0/24
84.75.19.0/24
84.75.25.0/24
84.75.27.0/24
84.75.34.0/24
84.75.151.0/24
178.83.146.0/23
178.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c2:7a:65:58:8c:16:bf:34:ee:ff:83:68:2c:3d:da:ee:f3:
07:fa:a1:ec:83:29:e8:7e:94:23:b2:bd:0d:d7:37:2a:c5:ca:
6d:44:d1:2a:ff:07:80:db:84:0f:c3:33:df:e1:f2:e5:f6:8f:
52:fe:91:7f:92:a9:ec:14:f5:9e:a2:43:5a:e0:63:8d:23:ec:
25:44:0f:86:2c:49:d5:72:9f:45:42:e6:68:23:0a:be:5f:1e:
6c:21:ad:70:be:10:77:75:de:46:c4:31:7e:a5:ef:d0:6e:e5:
22:3b:66:9f:40:f7:7e:5d:b9:7e:e4:72:50:6f:44:a7:42:d7:
16:5c:db:fb:3d:a9:d1:72:a4:ac:17:37:e9:95:c9:07:79:3b:
90:62:e4:1b:f1:db:c2:c5:e1:91:fa:c1:3a:f4:de:e8:bd:58:
fe:08:61:98:85:86:85:fc:4a:46:bb:77:c1:7e:e1:0a:73:ce:
78:04:66:0e:29:b0:d6:d1:e4:f8:08:25:ea:64:39:07:ac:18:
75:bd:ce:8a:b4:ab:c9:09:38:bd:0a:4d:aa:63:53:ca:19:d6:
60:ff:f9:9a:61:be:68:2f:c4:c4:c0:57:50:5c:77:4d:b7:ab:
d8:84:73:4a:d3:69:63:d2:49:6f:df:74:44:1b:2f:68:f6:a9:
d6:ea:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:55:38 2026 by rpki-client