Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: InyDJxFapYGlUeVOY7c/+vf6FRRKT6SGp9JgXujzpA8=
Subject key identifier: E7:24:5C:13:90:A6:D3:A0:C9:4F:65:8E:12:88:B1:C0:CA:8B:63:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1F4790C00F05184AC3410DB00254AB568EC8114F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Wed 02 Sep 2026 04:20:17 +0000
ROA not before: Wed 02 Sep 2026 04:15:17 +0000
ROA not after: Wed 01 Sep 2027 04:20:17 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
140.150.224.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
147.79.8.0/23 maxlen: 24
150.241.130.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.70.0/24 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.90.0/24 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
162.141.184.0/21 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:47:90:c0:0f:05:18:4a:c3:41:0d:b0:02:54:ab:56:8e:c8:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 04:15:17 2026 GMT
Not After : Sep 1 04:20:17 2027 GMT
Subject: CN=E7245C1390A6D3A0C94F658E1288B1C0CA8B6319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:4c:24:23:9d:df:66:5d:4e:27:0d:5d:9d:
db:5d:f2:f5:6d:41:17:c6:b1:44:9b:99:9c:97:9b:
12:2a:73:ba:55:45:0b:de:01:6a:2b:fb:36:f6:d4:
42:fd:cf:e6:32:f9:4e:9f:03:15:e7:a0:33:08:f5:
23:a8:13:48:47:7b:ce:87:ea:a5:05:d9:a4:ba:3b:
a4:8a:58:5d:48:bc:29:76:79:c3:b7:c1:83:13:96:
bb:a1:cc:76:cd:35:e4:0c:62:6a:c1:68:2b:f8:50:
69:df:81:14:33:ea:4c:68:81:14:61:85:66:24:f4:
49:6c:22:85:54:0f:3b:5e:00:01:7e:73:f8:20:87:
40:e1:f4:f1:af:ba:bb:ed:5e:7d:9b:a1:9c:40:04:
a8:93:29:e0:cb:83:3d:c1:1c:de:8a:66:b7:a8:55:
4a:42:1e:31:9f:29:a0:5a:89:07:bc:4b:60:eb:79:
47:da:fe:d8:b6:59:f8:e5:20:6d:a8:45:6f:aa:44:
01:a7:9f:60:ec:9a:7b:2b:b3:6c:8b:6d:a1:9b:a9:
84:89:45:ae:9b:cf:52:bf:de:02:ef:1f:a5:a0:e5:
9e:64:e9:3c:3d:20:c3:1f:06:9e:41:cc:95:7e:27:
5f:3a:c6:8b:38:15:26:73:4f:52:88:bb:de:0b:bb:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:5C:13:90:A6:D3:A0:C9:4F:65:8E:12:88:B1:C0:CA:8B:63:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.147.0/24
96.62.156.0/22
96.62.172.0/24
96.62.229.0/24
140.150.224.0/24
140.233.184.0/24
143.14.35.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.144.0/24
143.14.196.0/23
143.14.214.0/24
143.14.222.0/24
146.103.35.0/24
147.79.8.0/23
150.241.130.0/24
150.241.242.0/24
162.141.13.0/24
162.141.19.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.70.0/24
162.141.72.0/22
162.141.90.0/24
162.141.101.0/24
162.141.105.0/24
162.141.126.0/24
162.141.144.0/21
162.141.168.0/21
162.141.181.0/24
162.141.184.0/21
167.148.12.0/24
167.148.16.0/21
167.148.30.0/24
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.88.0/21
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.176.0/24
167.148.208.0/24
168.222.40.0/24
168.222.70.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:65:5c:2a:d1:cf:c9:56:28:84:cf:cb:bc:d1:5e:d1:48:
72:41:d5:71:b9:03:0b:3d:0b:b7:39:dc:21:b3:57:4e:67:db:
3d:b9:5d:a9:7c:ff:19:da:b2:b6:a9:19:0a:ee:8e:06:ca:1d:
41:9c:47:91:10:81:b9:0e:e8:44:05:4e:a1:d0:67:dd:9c:72:
05:a9:8e:6f:0c:8c:4b:e9:da:f3:8e:ca:26:5a:9c:f2:6b:37:
dc:0e:2d:00:ea:00:ea:f9:39:d1:d6:ad:ab:0c:75:33:85:0f:
df:ef:be:6c:df:f0:a9:f1:3c:ce:57:5e:4d:74:90:6e:77:77:
f7:9e:59:ed:22:b5:27:ed:ed:55:76:2a:b9:e4:7f:64:f4:fb:
c2:e2:7e:23:50:48:89:17:3a:50:ad:6a:62:3c:12:a6:cd:38:
f9:98:ee:79:56:41:c5:c7:af:5d:57:38:7b:54:f1:bb:96:c0:
9a:09:29:42:ff:ce:e1:ae:14:41:0f:a2:94:4c:a7:f0:e7:f5:
36:b9:1c:71:81:ad:d9:08:ca:48:96:9e:e3:ef:a8:9b:d7:f1:
c7:29:aa:c2:15:da:89:3d:73:6d:30:63:0a:44:96:b2:a7:91:
bf:69:24:ad:a1:49:bf:20:63:f5:77:9c:81:86:c1:87:62:f6:
d8:d4:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:11 2026 by rpki-client