$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: OgmqjQxMZZdWWbYox53iYF39zmtFiM24mYoIWEe6V5Q= Subject key identifier: 55:D9:D4:41:C4:04:F8:7A:B8:29:6B:BD:6A:EA:01:FD:C9:1B:0F:24 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 553E5369CB3B8659B057AD717201390625042AD0 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa Signing time: Sat 03 Oct 2026 14:01:00 +0000 ROA not before: Sat 03 Oct 2026 13:56:00 +0000 ROA not after: Sat 02 Oct 2027 14:01:00 +0000 asID: 9304 IP address blocks: 152.237.241.0/24 maxlen: 24 152.237.242.0/24 maxlen: 24 152.237.243.0/24 maxlen: 24 186.241.160.0/24 maxlen: 24 186.241.166.0/24 maxlen: 24 186.241.168.0/24 maxlen: 24 186.241.169.0/24 maxlen: 24 186.241.171.0/24 maxlen: 24 186.241.172.0/24 maxlen: 24 186.241.173.0/24 maxlen: 24 201.4.19.0/24 maxlen: 24 201.4.20.0/24 maxlen: 24 201.4.23.0/24 maxlen: 24 201.4.24.0/24 maxlen: 24 201.4.25.0/24 maxlen: 24 201.4.26.0/24 maxlen: 24 201.4.27.0/24 maxlen: 24 201.4.28.0/24 maxlen: 24 201.4.29.0/24 maxlen: 24 201.50.16.0/24 maxlen: 24 201.50.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 10:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3e:53:69:cb:3b:86:59:b0:57:ad:71:72:01:39:06:25:04:2a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 3 13:56:00 2026 GMT Not After : Oct 2 14:01:00 2027 GMT Subject: CN=55D9D441C404F87AB8296BBD6AEA01FDC91B0F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:b8:79:1e:5e:e0:d7:de:68:00:1a:f5:4a: 65:68:1e:97:f8:03:6c:e8:73:6c:5b:f9:78:7f:60: 6e:69:5e:dd:8d:d7:ba:ca:32:0c:de:bb:8d:86:da: 60:7b:37:30:f5:03:ee:a5:79:bf:58:9f:70:31:e0: ae:95:83:79:09:a9:de:c1:9e:2b:db:0e:45:fd:b8: a8:2b:a2:35:a3:1d:4c:47:86:72:71:55:6e:e1:61: cf:18:78:e7:26:23:85:90:3f:71:8d:40:f9:27:de: de:ef:0d:48:69:ef:f4:ac:c4:18:d3:e4:6e:a4:01: e3:a4:e6:46:ee:0e:d5:c5:3d:e2:b4:5b:c7:ee:94: 24:30:be:86:10:ef:52:4b:ef:e2:bc:e8:74:84:07: 51:22:7a:fd:66:21:ed:ee:ee:ec:b3:a1:6d:a3:f8: 01:c9:a5:04:90:bb:9a:61:48:bd:7e:a3:c5:40:f0: d6:e2:ff:47:b4:f5:2e:1f:d7:5b:a9:ef:54:53:ae: f4:7e:a8:35:76:63:6d:4d:a9:8a:65:ce:a1:3f:60: ef:41:e4:18:ba:b8:e2:2f:75:89:a0:02:14:47:9a: a6:0c:00:1b:3d:ad:48:7e:e4:b7:5a:59:11:50:0d: f0:fa:2f:26:9e:7d:5b:11:76:7d:e3:8c:81:70:d0: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D9:D4:41:C4:04:F8:7A:B8:29:6B:BD:6A:EA:01:FD:C9:1B:0F:24 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.241.0-152.237.243.255 186.241.160.0/24 186.241.166.0/24 186.241.168.0/23 186.241.171.0-186.241.173.255 201.4.19.0-201.4.20.255 201.4.23.0-201.4.29.255 201.50.16.0/23 Signature Algorithm: sha256WithRSAEncryption 44:4b:78:4a:1e:9f:fe:8e:d8:fe:f0:67:3d:f7:1b:a2:81:2a: 67:bd:1f:6a:1e:df:53:6c:0a:8b:6e:59:23:d7:ff:3c:8c:13: b8:ff:98:04:97:7d:ca:ce:71:c0:33:a0:db:1e:4d:a4:18:5f: be:f7:63:79:78:a9:4d:16:08:a7:2e:66:8c:76:5a:f2:59:62: 35:5b:49:02:e1:24:bb:ca:e0:16:6c:11:26:3f:ad:b9:0a:04: f7:d0:0a:e1:ae:e1:5d:a8:79:0d:d2:2a:39:bd:ef:a8:d6:4a: e8:29:59:a1:8c:c7:b6:d4:ef:d1:c9:ac:15:3e:3d:9a:45:0c: 6d:67:16:fc:65:fe:88:cd:e7:da:a7:e1:c4:32:f1:99:1a:d7: 9e:4a:fc:0a:96:f1:04:a4:be:94:c4:3b:d9:04:c9:f9:5f:83: 16:99:1a:f0:be:89:47:00:2c:fe:88:e2:c1:c6:02:23:93:d8: 53:fb:51:05:0a:9d:47:59:28:2d:b5:64:c9:34:13:1b:91:2e: d0:ee:aa:82:f1:96:8b:b4:5e:67:55:89:e9:78:b0:5b:ea:f4: 0a:37:94:bd:12:dc:2f:56:76:a3:d9:56:ee:42:38:de:d1:37: 0a:27:cb:a5:ca:87:d5:e7:25:ef:e1:4b:46:6f:24:72:cc:3e: ac:56:6f:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUVT5Tacs7hlmwV61xcgE5BiUEKtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMDMxMzU2MDBaFw0yNzEwMDIxNDAxMDBaMDMxMTAvBgNV BAMTKDU1RDlENDQxQzQwNEY4N0FCODI5NkJCRDZBRUEwMUZEQzkxQjBGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa77h5Hl7g195oABr1SmVoHpf4 A2zoc2xb+Xh/YG5pXt2N17rKMgzeu42G2mB7NzD1A+6leb9Yn3Ax4K6Vg3kJqd7B nivbDkX9uKgrojWjHUxHhnJxVW7hYc8YeOcmI4WQP3GNQPkn3t7vDUhp7/SsxBjT 5G6kAeOk5kbuDtXFPeK0W8fulCQwvoYQ71JL7+K86HSEB1Eiev1mIe3u7uyzoW2j +AHJpQSQu5phSL1+o8VA8Nbi/0e09S4f11up71RTrvR+qDV2Y21NqYplzqE/YO9B 5Bi6uOIvdYmgAhRHmqYMABs9rUh+5LdaWRFQDfD6LyaefVsRdn3jjIFw0FvxAgMB AAGjggKNMIICiTAdBgNVHQ4EFgQUVdnUQcQE+Hq4KWu9auoB/ckbDyQwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIA ATBQMAwDBACY7fEDBAKY7fADBAC68aADBAC68aYDBAG68agwDAMEALrxqwMEAbrx rDAMAwQAyQQTAwQAyQQUMAwDBADJBBcDBAHJBBwDBAHJMhAwDQYJKoZIhvcNAQEL BQADggEBAERLeEoen/6O2P7wZz33G6KBKme9H2oe31NsCotuWSPX/zyME7j/mASX fcrOccAzoNseTaQYX773Y3l4qU0WCKcuZox2WvJZYjVbSQLhJLvK4BZsESY/rbkK BPfQCuGu4V2oeQ3SKjm976jWSugpWaGMx7bU79HJrBU+PZpFDG1nFvxl/ojN59qn 4cQy8Zka155K/AqW8QSkvpTEO9kEyflfgxaZGvC+iUcALP6I4sHGAiOT2FP7UQUK nUdZKC21ZMk0ExuRLtDuqoLxlou0XmdViel4sFvq9Ao3lL0S3C9WdqPZVu5CON7R Nwony6XKh9XnJe/hS0ZvJHLMPqxWb8E= -----END CERTIFICATE-----Generated at Sat Oct 3 19:22:39 2026 by rpki-client