Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: EE1DBlRc/H98QdRqozXZ0TKkyUsbJZYtI/sa64bHb4U=
Subject key identifier: 2C:A0:5B:C4:6E:85:1F:B1:EE:6E:C7:D3:2A:45:3E:43:67:E2:8E:45
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6FECCA6E8220924BDE0BA08527B2CA5B6402C3BB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Thu 25 Jun 2026 12:03:49 +0000
ROA not before: Thu 25 Jun 2026 11:58:49 +0000
ROA not after: Thu 24 Jun 2027 12:03:49 +0000
asID: 9304
IP address blocks: 82.139.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ec:ca:6e:82:20:92:4b:de:0b:a0:85:27:b2:ca:5b:64:02:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jun 25 11:58:49 2026 GMT
Not After : Jun 24 12:03:49 2027 GMT
Subject: CN=2CA05BC46E851FB1EE6EC7D32A453E4367E28E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:91:db:d4:25:88:ac:c3:a3:1b:9f:5b:1d:
c1:82:50:ef:41:9b:2b:80:0f:6c:bb:08:ca:29:aa:
4f:79:6c:cf:47:13:79:a2:69:89:16:8f:2c:d0:25:
9f:25:5b:7a:97:3d:dd:87:e0:64:06:90:c3:a4:98:
24:5b:62:43:80:91:90:c6:1c:16:8c:93:4b:d5:41:
40:72:04:66:30:0a:e5:9c:6b:49:e0:b7:3b:17:17:
8a:11:25:bb:ad:3f:24:c3:ec:9b:78:b4:7e:1b:26:
76:e2:b0:33:1d:55:6d:8f:df:e3:98:6e:dd:bc:39:
77:1f:ac:63:8c:77:cc:f9:35:a1:72:d0:50:06:25:
0f:b4:f5:4c:75:31:be:ba:74:3b:60:91:43:7f:6e:
c4:f6:7a:a5:91:cd:9e:69:70:c7:df:7a:c0:17:90:
ad:5e:20:46:2a:a6:57:7a:d6:c9:22:ce:96:cb:a8:
5b:fd:62:9e:e2:61:63:01:43:02:35:0d:24:ba:7c:
6a:d3:f6:2a:c9:62:bf:b4:ed:c8:74:4d:99:cc:34:
fd:0c:33:10:cc:00:d6:18:82:ad:20:54:3c:0d:1b:
37:81:24:71:aa:9a:cf:04:7b:15:b1:dd:2b:2a:6f:
1c:33:27:48:23:0f:3f:64:2e:dc:15:9b:41:87:8b:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:5B:C4:6E:85:1F:B1:EE:6E:C7:D3:2A:45:3E:43:67:E2:8E:45
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:07:bc:d4:d1:21:17:74:da:1c:e9:8e:e8:35:ce:43:53:4d:
5a:19:d9:a2:a7:94:d7:05:7b:89:a8:08:b2:e0:3e:43:bf:8c:
cc:f9:ab:d7:05:a8:0c:9f:d9:b1:c9:ea:f9:67:6a:98:7a:ea:
bb:f1:cf:9e:4a:7a:dc:25:9c:09:3b:da:c9:01:f5:99:60:75:
64:cd:cb:56:57:14:f4:b8:e4:98:4b:7b:46:56:1a:f5:92:e9:
9d:f4:d3:b1:ff:b6:63:34:31:5f:f6:8f:1b:ea:a6:85:5d:de:
cd:99:54:80:c7:d9:b1:9c:15:d1:6b:f9:4f:23:8a:c4:31:ea:
00:aa:a8:42:70:de:77:93:f4:a0:90:2f:34:72:32:29:23:ad:
b8:8f:ba:dd:f5:a8:cc:ca:26:1c:64:95:95:19:84:7d:6e:9f:
b5:1b:70:b6:10:d6:34:ce:d8:bb:a2:9a:79:88:77:a6:fa:68:
21:a7:f5:6b:04:90:a9:6a:6c:29:3d:0f:e2:99:b3:c8:c2:52:
92:50:0e:b2:22:11:7a:09:9a:2f:25:84:f4:9e:e8:66:ce:bb:
45:54:70:8a:c0:6f:58:0c:18:36:06:ad:3e:d6:04:d2:b5:de:
a1:28:e0:21:a6:50:ca:af:bf:a2:e6:cf:63:d0:0e:08:3a:65:
d6:41:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:44 2026 by rpki-client