Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: iniXb5i2sLylG1V/Y/hGXknvWVQ5Y9pjaCExKeRg7E8=
Subject key identifier: 1C:D3:87:61:9B:4A:58:CA:0B:6B:57:7F:3B:62:DE:56:B9:BF:37:99
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5AE03DCB1EEE964F3D0840A742D4F46BEF3BE94E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9304.roa
Signing time: Thu 27 Aug 2026 00:02:59 +0000
ROA not before: Wed 26 Aug 2026 23:57:59 +0000
ROA not after: Thu 26 Aug 2027 00:02:59 +0000
asID: 9304
IP address blocks: 5.252.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e0:3d:cb:1e:ee:96:4f:3d:08:40:a7:42:d4:f4:6b:ef:3b:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 26 23:57:59 2026 GMT
Not After : Aug 26 00:02:59 2027 GMT
Subject: CN=1CD387619B4A58CA0B6B577F3B62DE56B9BF3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:f9:b3:c6:6a:b7:a6:38:94:7a:50:e3:9b:
8c:df:d0:8f:e2:1c:ee:ce:fe:8b:dd:57:9d:4d:c1:
c7:56:b0:fe:16:13:af:70:4a:49:23:55:4f:52:da:
3a:0c:69:c2:b7:4f:24:ff:0e:33:72:99:b5:fa:ee:
9d:b4:54:bf:f5:69:0d:e6:4c:26:da:ea:69:fd:f4:
6a:0b:96:a9:17:8d:de:bb:e6:b8:a9:ff:fd:09:fe:
9e:f3:b2:3d:e4:e7:01:d4:12:b6:ef:ad:60:74:79:
d6:14:d1:62:39:f2:79:cf:df:04:55:5c:2b:7a:55:
86:61:f3:80:a9:fa:6a:0f:2e:fa:0e:c4:04:ef:44:
61:d9:52:b2:b0:78:0d:45:13:4b:37:d2:0d:41:08:
6b:27:27:3b:0c:9b:6d:32:b1:9d:6f:f6:3a:4d:5a:
84:c2:9f:da:90:fa:7a:a6:da:a9:62:d9:c2:9c:f8:
0f:e5:f9:b2:67:02:4c:0a:f4:ac:a6:8b:c2:be:2c:
90:5d:16:89:72:38:79:63:83:50:a0:73:13:8b:11:
dd:f0:1f:82:7f:ad:91:01:3b:bb:7c:06:96:cc:a7:
b7:61:98:43:17:e2:1d:ee:8f:75:9d:9a:56:62:7b:
30:d7:c2:c8:40:3f:59:88:a9:1f:71:1d:3d:7a:a1:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:87:61:9B:4A:58:CA:0B:6B:57:7F:3B:62:DE:56:B9:BF:37:99
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5f:ea:6a:49:80:3b:09:73:f2:4f:41:2b:5d:37:06:dc:2c:
98:ce:54:5e:88:2b:5e:6a:7e:ec:15:3b:a0:79:c8:f3:fb:0e:
3f:62:f7:dd:ce:b0:24:d4:ff:cf:a9:ba:6d:00:d7:7d:e1:d3:
ca:b3:55:fe:47:63:5b:1b:2e:b4:cf:31:92:c8:53:f4:5b:86:
62:0f:04:05:4f:06:4f:74:32:05:b7:87:fe:49:91:34:85:a6:
c8:e7:e0:31:fb:37:bc:68:9a:95:96:51:5c:8e:7d:64:0f:b8:
8a:a2:57:1b:a3:ea:4e:a7:87:b6:39:7b:2e:a1:cd:5a:a2:b0:
b2:8d:46:06:10:6a:85:f7:17:35:49:1c:52:e9:03:67:2c:1e:
80:33:29:b0:4c:66:38:ec:c7:d8:1c:1e:55:fd:7a:93:91:53:
c9:0f:6c:e7:51:b9:15:4a:e2:b4:91:71:1d:94:e0:10:39:7a:
9f:5d:17:91:f5:91:6b:e4:b3:ac:6e:83:68:71:2d:6a:59:ef:
55:8e:f1:82:7f:90:10:b6:be:de:14:c8:8e:29:55:37:00:08:
63:d3:d5:5b:b1:37:e1:2e:f1:e9:c7:bd:7d:6e:ec:f0:19:1a:
13:81:4a:f2:ff:c2:89:e9:f0:a0:89:74:e4:37:a3:78:66:b9:
d8:6a:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:35:18 2026 by rpki-client