Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 6MtPdvXf4gUgCMdRWBcisfufB2W9J/Mb2ZuqXgGITPw=
Subject key identifier: 08:A4:B9:B4:0F:56:88:8B:B0:41:AF:7A:F0:B1:C5:D9:A8:9D:22:68
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4AB2736B9ACF443106EDA9BBA315EABF2B7ECD47
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Fri 09 Oct 2026 11:21:08 +0000
ROA not before: Fri 09 Oct 2026 11:16:08 +0000
ROA not after: Fri 08 Oct 2027 11:21:08 +0000
asID: 9304
IP address blocks: 143.20.77.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
143.20.116.0/23 maxlen: 24
143.20.144.0/24 maxlen: 24
143.20.188.0/24 maxlen: 24
143.20.189.0/24 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b2:73:6b:9a:cf:44:31:06:ed:a9:bb:a3:15:ea:bf:2b:7e:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 9 11:16:08 2026 GMT
Not After : Oct 8 11:21:08 2027 GMT
Subject: CN=08A4B9B40F56888BB041AF7AF0B1C5D9A89D2268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:9f:6e:a7:9a:9e:3a:48:3b:17:3f:b3:c5:
27:50:a8:c5:af:8f:a0:c8:f4:a9:1a:f8:9a:fc:62:
c8:f7:93:8e:5d:47:d3:c1:83:82:b1:46:e3:a9:aa:
73:9f:1e:f7:33:8d:4f:1d:b6:97:94:05:e6:d1:43:
fe:c5:7c:14:c1:90:38:98:8a:74:68:c1:66:08:19:
47:d3:f2:24:dd:e9:e9:3f:90:c7:4d:91:f4:2d:2e:
1e:b7:40:5b:46:e2:3b:cb:63:9d:a5:4a:e0:d4:74:
a2:9f:3d:45:a2:dc:73:5d:97:cb:fe:32:7e:2c:32:
0d:6e:20:73:72:f3:a1:ad:ac:4e:84:cb:11:68:ac:
57:bc:c6:52:17:3c:f9:c6:b5:4f:f5:3a:b2:87:58:
ae:a1:c3:b8:2e:e5:84:00:c4:bd:26:53:ba:a9:f4:
07:32:ed:27:b4:16:56:37:51:bf:00:75:d4:17:b9:
bd:a6:35:2a:62:70:35:e1:fd:8b:f6:49:34:9f:b5:
3c:0d:74:dd:05:d4:2a:c0:35:8f:50:4f:5b:b7:99:
18:5b:4c:0c:31:57:d4:a9:42:ff:b5:f9:0c:eb:5f:
30:e9:50:38:55:68:56:85:51:88:a1:44:d6:4e:2b:
fe:f9:29:9f:0d:3b:fb:75:d4:21:67:95:85:be:52:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:B9:B4:0F:56:88:8B:B0:41:AF:7A:F0:B1:C5:D9:A8:9D:22:68
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.77.0/24
143.20.84.0/24
143.20.116.0/23
143.20.144.0/24
143.20.188.0/23
143.20.192.0/24
143.20.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a3:16:0d:b9:5c:50:63:c9:47:00:b8:f0:7b:35:94:ff:7a:
e0:07:55:3a:4a:49:03:42:0e:5c:cd:84:bf:e0:b5:54:d3:38:
6a:2f:36:88:40:55:16:9d:db:35:3e:2a:04:28:24:30:91:7c:
de:0d:dd:81:51:a5:a7:94:ae:0f:37:51:8f:56:02:a3:d1:c0:
ce:3a:06:3f:4c:fb:cb:61:45:6d:65:a2:07:a9:64:9b:12:32:
77:b2:7e:f4:ff:bf:61:b1:e8:b1:00:14:7e:36:7a:52:fa:18:
01:52:f4:39:c1:be:e0:22:af:78:7c:0d:c5:21:bf:f6:48:a9:
7f:9a:1c:39:77:08:c2:65:e9:6e:f4:43:e5:ec:35:1a:c6:6f:
4a:7d:51:13:38:41:d2:1d:ae:72:2c:a7:2d:4a:6f:c6:df:32:
8b:14:4c:66:94:bf:5d:b3:fe:7f:02:11:be:df:24:c1:ba:f7:
65:bd:4b:3a:b4:9f:3a:e1:47:09:47:72:90:46:2c:0d:fa:cb:
e4:0b:f8:f4:fc:1e:90:54:5d:87:da:18:d1:f9:83:83:d4:9b:
3b:c5:4d:f5:29:dd:5f:28:2e:b5:0a:63:61:0c:47:d5:6f:2a:
60:df:28:bf:12:51:3f:2b:62:06:7d:f6:1b:37:54:49:f2:65:
67:8d:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:12 2026 by rpki-client