Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: u0HHqbVGK0HG59OfxuqGbPEFL4GiFNdGpNxgOQb5NVo=
Subject key identifier: 18:E5:96:F3:2C:38:8D:D4:51:CB:56:1C:59:D8:F0:98:32:C0:E4:FA
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 0DD97057876985D3B02D13301D0E3914722A2829
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Wed 19 Aug 2026 06:58:20 +0000
ROA not before: Wed 19 Aug 2026 06:53:20 +0000
ROA not after: Wed 18 Aug 2027 06:58:20 +0000
asID: 9304
IP address blocks: 82.139.205.0/24 maxlen: 24
212.60.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d9:70:57:87:69:85:d3:b0:2d:13:30:1d:0e:39:14:72:2a:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 19 06:53:20 2026 GMT
Not After : Aug 18 06:58:20 2027 GMT
Subject: CN=18E596F32C388DD451CB561C59D8F09832C0E4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:2e:a8:fc:0b:2f:80:b8:42:7f:42:0e:03:
7f:0f:5e:d8:a1:26:3f:06:36:d7:d7:44:9d:3b:8c:
f3:a7:5f:37:e5:50:bd:56:31:37:6f:bc:06:38:6f:
36:9c:40:79:7d:e7:c1:11:eb:6c:8f:9f:47:21:34:
a8:bd:67:be:4c:7f:62:bb:3a:44:ea:a0:24:2a:6a:
1d:52:4b:ce:da:45:dc:79:b3:56:62:af:77:c6:6c:
6e:fa:39:9d:8d:19:8b:f3:4a:5b:d7:06:77:48:22:
8f:49:e1:d3:da:66:e7:cb:66:48:f8:fc:6d:99:bf:
a5:10:28:eb:54:df:47:a9:72:4a:20:67:fe:86:ba:
a2:5a:85:83:24:29:d2:45:6e:04:0a:d1:3f:d5:57:
6e:24:d6:12:d1:e7:c7:30:84:d5:7b:f8:cf:39:d3:
fb:42:14:52:27:fb:ac:f8:2b:55:aa:d4:23:0a:fc:
dd:2d:42:53:2e:27:d6:e2:0a:2f:63:17:ff:eb:90:
a9:f2:c0:a8:c6:9a:65:ee:a8:14:88:ec:43:dc:be:
be:9c:cc:30:82:31:b5:be:d8:37:6c:02:62:8a:15:
eb:60:b8:01:4f:80:6e:6b:1a:e2:ec:21:43:99:ec:
13:7c:f7:d1:91:c8:b4:1a:49:93:17:af:26:ac:83:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:96:F3:2C:38:8D:D4:51:CB:56:1C:59:D8:F0:98:32:C0:E4:FA
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
212.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
01:82:cf:66:e1:1c:0f:b9:d4:72:29:bb:3e:78:9c:f3:d3:11:
42:4b:30:17:aa:7e:4a:a1:5e:a2:e9:06:6c:16:c2:7f:67:8e:
94:d7:79:1b:23:3d:7c:60:d0:d1:37:83:d6:1d:1b:a8:ad:17:
c0:0d:77:47:6c:eb:79:c8:13:2a:85:04:21:69:e7:7d:21:e8:
98:55:17:e8:39:39:9c:03:1b:a4:70:e7:32:c0:16:8f:02:2d:
ab:0e:cb:d5:9a:3b:c7:f0:64:76:19:d2:3d:bb:1e:59:f6:d4:
d4:29:fb:34:f5:1b:cc:c0:d8:fb:f1:95:d5:e8:7b:2f:c0:04:
bc:d3:d8:2d:6d:72:8f:ef:de:ce:f7:a9:9e:52:c3:88:4c:b9:
96:c2:01:a0:3c:04:71:71:e9:17:38:56:48:5a:64:10:30:54:
fc:77:da:f9:2b:23:b9:af:df:5a:16:08:a0:2b:6a:4f:ed:50:
1d:8b:df:7a:9f:33:68:12:a4:82:f6:73:99:72:4a:01:73:be:
7d:9c:ad:8e:99:e4:ef:bd:10:c0:6b:fd:06:d0:e9:74:38:d7:
aa:cd:6f:74:1a:b3:9c:d4:df:85:89:94:e7:57:a4:fa:6b:bd:
2b:cb:84:0f:09:81:d2:aa:99:83:fa:10:d7:de:0e:9e:9d:0e:
74:1e:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:54 2026 by rpki-client