Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: KAC1A9LgzgZchbNPwzXJZw+UUEOKbBgC44axrQvohcA=
Subject key identifier: 0E:8B:D0:7F:68:85:87:BE:62:10:56:96:3C:F0:31:FB:B4:25:7D:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 754B9F7122AD16AFE88AD19819F7F4F1F42173AF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Mon 01 Jun 2026 14:57:09 +0000
ROA not before: Mon 01 Jun 2026 14:52:09 +0000
ROA not after: Mon 31 May 2027 14:57:09 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.224.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
96.62.255.0/24 maxlen: 24
140.150.238.0/24 maxlen: 24
143.14.12.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.36.0/24 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.120.0/24 maxlen: 24
143.14.121.0/24 maxlen: 24
143.14.129.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.217.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
146.103.25.0/24 maxlen: 24
146.103.29.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
147.79.8.0/23 maxlen: 24
147.79.19.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.184.0/23 maxlen: 24
148.135.202.0/23 maxlen: 24
150.241.130.0/24 maxlen: 24
150.241.208.0/24 maxlen: 24
150.241.228.0/24 maxlen: 24
150.241.239.0/24 maxlen: 24
150.241.240.0/24 maxlen: 24
150.241.242.0/24 maxlen: 24
155.117.4.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.63.0/24 maxlen: 24
155.117.79.0/24 maxlen: 24
155.117.112.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.119.0/24 maxlen: 24
155.117.138.0/24 maxlen: 24
155.117.139.0/24 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.179.0/24 maxlen: 24
155.117.220.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
155.117.245.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.78.0/24 maxlen: 24
162.141.93.0/24 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
162.141.184.0/21 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.156.0/24 maxlen: 24
167.148.170.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
167.148.194.0/24 maxlen: 24
167.148.200.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
167.148.209.0/24 maxlen: 24
167.148.223.0/24 maxlen: 24
168.222.5.0/24 maxlen: 24
168.222.9.0/24 maxlen: 24
168.222.12.0/24 maxlen: 24
168.222.14.0/24 maxlen: 24
168.222.15.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
168.222.19.0/24 maxlen: 24
168.222.23.0/24 maxlen: 24
168.222.31.0/24 maxlen: 24
168.222.32.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.38.0/24 maxlen: 24
168.222.39.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.46.0/24 maxlen: 24
168.222.50.0/24 maxlen: 24
168.222.61.0/24 maxlen: 24
168.222.86.0/24 maxlen: 24
168.222.88.0/24 maxlen: 24
168.222.94.0/24 maxlen: 24
168.222.95.0/24 maxlen: 24
168.222.98.0/23 maxlen: 24
168.222.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4b:9f:71:22:ad:16:af:e8:8a:d1:98:19:f7:f4:f1:f4:21:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 1 14:52:09 2026 GMT
Not After : May 31 14:57:09 2027 GMT
Subject: CN=0E8BD07F688587BE621056963CF031FBB4257D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:af:49:f3:ba:09:59:5a:67:72:c7:e5:96:
33:20:42:a7:91:f4:88:52:48:80:c7:b8:45:17:6b:
2a:32:ef:4b:31:6c:c5:01:d0:8c:ca:6d:67:7a:0c:
0a:2c:b5:21:5f:de:19:2f:64:fe:77:cf:1c:47:14:
e9:0a:3d:54:6b:7f:7d:44:70:a5:be:2a:0b:49:26:
03:b4:6f:1c:5e:70:21:65:b1:ec:3f:71:bd:1c:9b:
9c:e6:4c:11:d5:87:37:76:b2:0b:91:75:47:df:ac:
86:26:15:59:60:7e:90:4d:60:ec:cf:eb:d1:b1:bb:
54:f3:b7:b1:dd:7b:a8:1b:55:91:07:7d:f8:1b:25:
e7:49:35:e5:2e:44:7e:a4:5e:5a:b9:9a:9e:39:b3:
f0:22:26:e2:49:20:7c:ac:9e:d9:c2:28:6e:d7:ad:
ff:b0:af:56:4b:69:9a:1f:a3:93:85:42:19:1f:b1:
4a:7e:f0:b8:df:95:97:8b:58:4b:24:56:1f:02:a3:
b5:5a:a4:2d:aa:cc:23:94:46:8b:69:61:34:51:4d:
2c:58:7a:83:f6:96:09:7c:ca:77:fd:56:78:ce:55:
ed:26:3e:ab:0b:98:46:27:8a:47:53:1f:a1:8a:76:
e8:5f:62:04:78:ab:9f:15:27:e1:04:89:5d:6f:d4:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:D0:7F:68:85:87:BE:62:10:56:96:3C:F0:31:FB:B4:25:7D:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.156.0/22
96.62.224.0/24
96.62.229.0/24
96.62.255.0/24
140.150.238.0/24
143.14.12.0/24
143.14.35.0-143.14.36.255
143.14.47.0/24
143.14.51.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.120.0/23
143.14.129.0/24
143.14.144.0/24
143.14.196.0/23
143.14.214.0/24
143.14.217.0/24
143.14.222.0/24
146.103.25.0/24
146.103.29.0/24
146.103.35.0/24
147.79.8.0/23
147.79.19.0/24
148.135.175.0/24
148.135.184.0/23
148.135.202.0/23
150.241.130.0/24
150.241.208.0/24
150.241.228.0/24
150.241.239.0-150.241.240.255
150.241.242.0/24
155.117.4.0/24
155.117.23.0/24
155.117.38.0/24
155.117.63.0/24
155.117.79.0/24
155.117.112.0/24
155.117.118.0/23
155.117.138.0/23
155.117.171.0/24
155.117.179.0/24
155.117.220.0/24
155.117.240.0/24
155.117.245.0/24
162.141.19.0-162.141.20.255
162.141.24.0-162.141.35.255
162.141.40.0-162.141.44.255
162.141.50.0/24
162.141.56.0/21
162.141.72.0/22
162.141.78.0/24
162.141.93.0/24
162.141.101.0/24
162.141.144.0/21
162.141.168.0/21
162.141.181.0/24
162.141.184.0/21
167.148.8.0/24
167.148.16.0/21
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.88.0/21
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.156.0/24
167.148.170.0/24
167.148.176.0/24
167.148.188.0/24
167.148.194.0/24
167.148.200.0/24
167.148.208.0/23
167.148.223.0/24
168.222.5.0/24
168.222.9.0/24
168.222.12.0/24
168.222.14.0/23
168.222.18.0/23
168.222.23.0/24
168.222.31.0-168.222.32.255
168.222.34.0/24
168.222.38.0-168.222.40.255
168.222.46.0/24
168.222.50.0/24
168.222.61.0/24
168.222.86.0/24
168.222.88.0/24
168.222.94.0/23
168.222.98.0/23
168.222.107.0/24
Signature Algorithm: sha256WithRSAEncryption
37:93:ae:94:12:0e:f0:00:ed:1a:ab:9e:16:2c:99:53:77:c3:
11:7d:25:f0:fa:e3:7b:16:cf:1a:71:a9:9b:33:76:d5:5a:5a:
10:02:ae:a3:5b:f7:42:cf:c1:bf:60:e8:42:9f:12:da:7d:b3:
8f:1c:3b:21:9e:66:34:fb:1b:15:61:51:65:41:ef:76:c9:a2:
3f:09:81:50:88:60:69:46:ad:df:a1:7f:91:f8:da:c0:7f:01:
a5:54:c7:10:4a:a6:a5:ee:65:13:d6:b5:70:75:8c:eb:62:9c:
33:05:76:f8:e5:2a:6f:52:4e:96:e3:64:15:40:31:b6:c9:a4:
15:7f:69:58:33:bd:6a:7a:ab:90:98:12:ba:2c:19:8f:31:c4:
e8:8d:04:63:92:6d:77:03:d8:1c:6b:8a:88:ca:63:47:70:1f:
ab:5f:d2:e1:ee:c7:f7:37:2e:cf:9f:0e:0e:f2:80:b1:fa:87:
5f:35:fa:43:b9:d1:8d:3e:49:0e:d0:a7:b0:1a:d3:2c:c0:da:
18:3a:c3:27:f5:4b:37:3a:18:dc:6b:8a:74:0a:27:ca:a2:17:
ee:a6:9c:04:e3:95:ae:40:33:27:2f:e8:35:bf:80:20:4f:e5:
eb:67:b2:e6:be:94:d8:ce:71:92:3d:31:d5:87:c9:89:36:d7:
c5:0a:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:29 2026 by rpki-client