Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: wzKGLhlN3ACWOUXH/hbqJZQ96pwBrZDb4EZnvVtFgto=
Subject key identifier: A8:EE:9A:D9:E2:2F:80:79:45:D3:9B:5E:4F:64:1C:8F:C1:90:BB:10
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5C324DF3337A7DABE13051500B395FBCFC1160C1
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Sun 19 Oct 2025 12:54:44 +0000
ROA not before: Sun 19 Oct 2025 12:49:44 +0000
ROA not after: Sun 18 Oct 2026 12:54:44 +0000
asID: 9304
IP address blocks: 46.236.209.0/24 maxlen: 24
46.236.216.0/24 maxlen: 24
46.236.217.0/24 maxlen: 24
46.236.254.0/23 maxlen: 24
82.139.204.0/24 maxlen: 24
82.139.210.0/23 maxlen: 24
82.139.212.0/23 maxlen: 24
82.139.227.0/24 maxlen: 24
82.139.228.0/24 maxlen: 24
82.139.229.0/24 maxlen: 24
82.139.232.0/24 maxlen: 24
82.139.233.0/24 maxlen: 24
82.139.240.0/23 maxlen: 24
82.139.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:32:4d:f3:33:7a:7d:ab:e1:30:51:50:0b:39:5f:bc:fc:11:60:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 19 12:49:44 2025 GMT
Not After : Oct 18 12:54:44 2026 GMT
Subject: CN=A8EE9AD9E22F807945D39B5E4F641C8FC190BB10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:88:bf:35:a0:96:a8:f9:e5:b5:4c:7c:33:
93:5e:78:ff:54:4a:fc:53:7b:86:7e:5a:12:85:dc:
33:bf:3f:2e:c7:fc:d1:dc:2b:60:9d:63:ac:b3:39:
bc:04:73:fd:94:94:57:8e:3c:47:30:db:a5:3d:63:
82:a7:79:41:b3:d0:84:50:f1:8b:aa:20:be:26:f5:
bc:79:17:cd:2b:a3:3c:6c:68:18:9d:c4:a6:e9:e7:
97:3e:12:74:e3:b6:5a:95:ff:17:37:7c:78:b2:80:
3e:cb:d4:9a:2f:bf:bd:51:fd:9a:fb:e8:a2:5c:26:
97:ec:bf:cf:59:8d:8c:e3:98:cd:42:11:de:de:28:
87:84:ad:00:ad:85:7b:ff:af:ca:b8:4b:91:35:96:
0c:92:de:ca:c9:3c:28:b4:f7:fb:a8:f0:ee:8d:9a:
c1:ed:7e:33:18:61:ea:70:68:26:6d:f4:7f:32:d5:
bc:18:ce:94:13:bd:91:3a:6c:bc:e2:98:c8:bc:32:
08:41:f5:c0:30:c7:96:4f:9f:6b:6c:db:1a:98:8d:
45:c3:bc:a3:6e:8b:d1:83:59:dc:82:12:be:77:32:
38:04:a9:66:37:a1:cb:73:b5:12:89:b7:78:11:f1:
79:cd:60:66:88:a9:c1:f5:88:29:bc:33:1d:2c:a5:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:9A:D9:E2:2F:80:79:45:D3:9B:5E:4F:64:1C:8F:C1:90:BB:10
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.209.0/24
46.236.216.0/23
46.236.254.0/23
82.139.204.0/24
82.139.210.0-82.139.213.255
82.139.227.0-82.139.229.255
82.139.232.0/23
82.139.240.0/23
82.139.248.0/23
Signature Algorithm: sha256WithRSAEncryption
57:6c:2e:9a:33:cd:4b:4a:72:5b:83:c4:13:e3:70:14:5a:60:
33:1a:ec:2c:b7:71:28:08:cd:ff:93:c1:37:e0:dd:eb:e8:2f:
cb:60:6b:41:8f:84:ae:24:62:e1:ee:c4:b5:93:50:7d:d2:a4:
13:d2:40:c9:eb:41:7b:8a:e4:69:ae:de:e3:e2:b6:e2:d8:45:
18:63:e1:26:bf:e4:7e:64:12:06:5d:23:a9:34:df:70:c7:e5:
6b:89:33:24:c5:0a:3a:31:52:ec:c2:0b:dc:81:b9:f3:6b:1b:
77:86:05:61:b8:f5:09:19:0b:d5:9c:bb:07:b2:ac:a7:53:38:
96:b2:9a:92:b3:dc:80:2c:e0:33:44:02:7c:5b:4b:61:cb:73:
b8:ab:80:59:f3:38:7e:56:c3:22:d0:83:e3:78:a2:a6:2b:da:
e7:0d:2f:d8:e0:77:e2:d1:77:8f:90:7f:57:34:80:78:7e:56:
89:ad:00:32:b0:3b:87:b0:aa:c7:86:a7:42:dd:00:07:89:02:
e6:a1:a4:c2:cb:c4:26:94:42:44:b9:bc:f4:dc:48:77:82:9e:
59:a3:b3:b1:96:77:b7:63:23:87:b7:5a:93:70:cd:e1:79:c5:
8b:33:90:20:a4:bd:f1:4f:30:aa:74:33:0a:27:e4:8f:5f:93:
4f:a9:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:05 2025 by rpki-client