Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 7XYNjjnANlzyMDeCMMT0/RquRpkVauXBqm78vZthU+c=
Subject key identifier: F1:43:0B:AC:22:05:CC:22:44:27:97:31:D3:B0:BB:25:41:27:0F:05
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4650E2255497D1ACEBB238D0827D9C3C79B4D71F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Mon 25 May 2026 12:16:52 +0000
ROA not before: Mon 25 May 2026 12:11:52 +0000
ROA not after: Mon 24 May 2027 12:16:52 +0000
asID: 9304
IP address blocks: 82.139.205.0/24 maxlen: 24
82.139.220.0/24 maxlen: 24
82.139.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:50:e2:25:54:97:d1:ac:eb:b2:38:d0:82:7d:9c:3c:79:b4:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 25 12:11:52 2026 GMT
Not After : May 24 12:16:52 2027 GMT
Subject: CN=F1430BAC2205CC2244279731D3B0BB2541270F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9a:36:4c:04:e3:74:29:06:6f:9c:00:55:4f:
54:05:c6:e8:c5:1d:42:16:d1:4e:15:2f:34:d7:ea:
34:98:2c:6a:52:1c:cd:d4:48:cd:c9:0a:9c:53:24:
1e:3a:b7:7c:a0:4f:ce:81:c5:e9:a1:d8:1c:bf:3b:
41:27:9c:7b:7d:58:0e:71:e3:5a:df:2e:90:7d:c6:
52:ac:9d:3d:ca:11:40:c9:f8:45:4f:b5:39:12:81:
3e:ae:28:d4:71:b2:96:dd:6d:5c:ee:37:3d:db:c4:
2b:59:4a:4d:12:3c:b7:06:50:24:20:82:e4:91:16:
0b:52:f2:ec:80:1f:3b:d1:21:8f:77:30:8e:a7:73:
b6:1f:4b:02:c4:99:13:59:89:7d:d8:34:35:23:ff:
16:87:e0:23:6a:71:cf:61:2d:47:37:4a:0e:ad:68:
19:ef:81:e0:0e:07:4e:a6:a7:39:4a:ee:7e:1f:f9:
73:1a:8a:5b:69:6b:4c:8a:5c:8e:58:23:af:86:5f:
41:fd:71:e8:f2:cf:6d:38:c9:e2:31:29:a0:8a:bf:
c0:6a:3f:01:67:0e:36:ab:bc:40:64:bd:50:d2:9b:
bb:26:c6:f9:52:9b:e1:78:f7:d7:4f:ee:50:05:29:
c3:b9:e4:ea:d6:67:bb:7c:83:b9:25:5d:d0:55:a0:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:0B:AC:22:05:CC:22:44:27:97:31:D3:B0:BB:25:41:27:0F:05
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
82.139.220.0/24
82.139.247.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d2:81:ca:11:f6:64:53:7b:d9:e7:ac:d1:3b:0d:6e:13:18:
a8:a4:2f:bf:04:c4:7f:95:79:72:e3:bb:04:e1:83:bd:76:6f:
29:79:e4:61:7b:7c:a1:2a:97:23:ca:3c:dd:21:15:e7:ce:4a:
12:b2:c4:5b:e5:37:2e:82:7e:89:f7:7c:86:35:c8:ee:73:38:
b8:58:b8:a4:07:ab:2e:9d:78:2c:90:00:3e:23:e5:b5:5e:3e:
10:73:07:e0:8e:ec:40:f7:f5:34:11:7f:79:67:99:86:79:de:
15:2d:74:9c:4a:a5:f1:be:90:e9:d8:36:aa:3e:eb:0c:ee:8e:
84:01:69:e7:a0:15:73:4c:b0:d5:e8:35:ab:a0:6f:85:f2:51:
9f:ef:9c:e5:dc:c5:2d:3d:5e:7a:84:1a:eb:d8:0c:52:6e:30:
6f:64:61:f3:f7:dc:bb:12:26:88:cf:0c:42:d2:8d:a9:95:9d:
1b:ee:f3:13:2f:aa:bf:6a:05:12:1d:a2:c3:70:7e:11:f2:2d:
8a:eb:80:82:23:ab:dd:1c:3f:e7:c2:f3:67:3b:9c:8c:b9:e7:
56:28:8e:e2:05:90:6c:67:29:26:44:7c:e3:60:bf:d3:2b:83:
ff:aa:78:d4:1f:b4:fc:41:9a:55:5a:9a:37:27:d9:65:1f:3a:
d4:a1:06:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:29 2026 by rpki-client