$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: x0FqVbpb+Vpuj5oQTKCchRXyzKQHVfR1Xx3W3kED6Qg= Subject key identifier: 95:CF:8E:EE:78:06:2D:81:81:10:5E:15:E6:1A:DF:CA:1F:6D:DE:A9 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 652B92ACF29304DB6523C883D0305BDFC7DF9C36 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa Signing time: Thu 08 Oct 2026 07:52:45 +0000 ROA not before: Thu 08 Oct 2026 07:47:45 +0000 ROA not after: Thu 07 Oct 2027 07:52:45 +0000 asID: 9304 IP address blocks: 79.176.14.0/24 maxlen: 24 79.176.15.0/24 maxlen: 24 79.176.16.0/24 maxlen: 24 79.176.17.0/24 maxlen: 24 79.176.18.0/24 maxlen: 24 79.176.21.0/24 maxlen: 24 79.176.38.0/24 maxlen: 24 79.176.44.0/24 maxlen: 24 79.176.49.0/24 maxlen: 24 79.176.50.0/23 maxlen: 24 79.176.57.0/24 maxlen: 24 79.176.61.0/24 maxlen: 24 79.176.70.0/24 maxlen: 24 79.176.87.0/24 maxlen: 24 79.180.0.0/23 maxlen: 24 79.183.145.0/24 maxlen: 24 79.183.147.0/24 maxlen: 24 79.183.148.0/24 maxlen: 24 79.183.149.0/24 maxlen: 24 109.64.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2b:92:ac:f2:93:04:db:65:23:c8:83:d0:30:5b:df:c7:df:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 8 07:47:45 2026 GMT Not After : Oct 7 07:52:45 2027 GMT Subject: CN=95CF8EEE78062D8181105E15E61ADFCA1F6DDEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:d1:0e:da:24:cc:0b:b4:c5:8f:77:e2:ba: d3:0c:9e:c4:a2:01:b7:83:9a:0b:7a:54:0e:c7:50: f7:7e:84:5e:5c:92:d8:1b:13:8f:9e:ed:1d:25:a2: 04:92:66:1f:dd:c0:9c:e0:d7:79:92:2b:66:f5:20: 9d:ba:ea:14:0b:a5:90:19:bc:fa:f8:59:ef:0b:cb: 2e:30:02:73:d8:f1:1a:e6:e6:a9:73:c6:a3:bb:8a: 1f:1a:8c:58:97:8d:2d:d6:5a:d5:43:27:d8:ed:dd: 8e:04:9f:ff:fb:6b:05:47:8e:a5:52:95:93:f8:f5: 47:a4:04:bb:f5:b5:e1:a7:3f:eb:df:69:d0:72:1c: f2:ac:6a:d4:5e:c4:35:06:4d:9b:b7:05:19:bc:84: 35:bd:07:d0:41:04:5f:4b:c9:31:a6:fd:41:ed:f0: 74:4b:35:a2:ac:31:e0:57:3c:20:f9:e2:df:90:f5: c3:3c:a6:66:22:79:43:83:72:53:fa:f9:8e:17:81: 7c:96:0c:d8:2c:7e:3c:94:31:e9:cf:5e:cb:6a:21: 53:5b:7f:73:b0:c2:14:cd:a2:2e:10:f4:76:82:cb: 4d:63:c7:85:53:1d:3f:6f:91:84:65:23:c2:97:72: 5f:db:78:1d:0a:e3:27:f2:3e:7c:da:aa:7a:94:9e: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CF:8E:EE:78:06:2D:81:81:10:5E:15:E6:1A:DF:CA:1F:6D:DE:A9 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.14.0-79.176.18.255 79.176.21.0/24 79.176.38.0/24 79.176.44.0/24 79.176.49.0-79.176.51.255 79.176.57.0/24 79.176.61.0/24 79.176.70.0/24 79.176.87.0/24 79.180.0.0/23 79.183.145.0/24 79.183.147.0-79.183.149.255 109.64.2.0/23 Signature Algorithm: sha256WithRSAEncryption 26:7f:97:3e:24:41:65:b8:65:38:47:26:69:c0:8e:85:4c:e5: 76:5e:64:be:d7:4e:68:05:c2:6c:06:d7:df:25:a7:0f:10:a9: 7a:d7:80:a2:4b:6f:30:01:95:2e:f9:26:13:d1:2d:00:16:c4: 8a:bd:91:b8:00:32:a2:11:b7:1b:b6:01:38:26:79:ac:f1:2e: 89:26:36:0b:c5:bb:d6:ff:52:15:1b:43:78:8e:06:37:51:67: f9:77:41:ff:44:ff:cb:4f:19:b4:c6:6e:d0:90:6d:a4:6e:ac: 0e:9a:13:c6:4d:61:eb:00:d4:33:a8:34:23:4d:9f:4c:19:00: a5:d2:96:45:57:28:c8:1e:28:d0:f9:a8:5d:50:9f:8d:f2:59: af:0b:98:46:cb:9e:d2:c0:b8:f3:ac:40:2e:04:d3:6e:b8:ec: f2:56:d8:07:13:2a:5c:fe:6a:18:3f:49:ad:7a:39:19:e1:bb: b1:5f:ba:57:87:7a:5a:48:bb:b6:20:28:89:55:62:8d:1a:12: 20:0d:2b:3c:08:87:bc:e9:a9:3f:ad:a2:b5:bb:f5:b0:31:2e: 03:f2:79:92:f6:51:ff:92:72:d5:e5:3f:36:d6:78:5b:7e:55: 96:a9:b0:ad:68:c3:b2:f8:6d:fd:88:2f:bc:25:73:a8:25:a8: be:96:9c:3d -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUZSuSrPKTBNtlI8iD0DBb38ffnDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDgwNzQ3NDVaFw0yNzEwMDcwNzUyNDVaMDMxMTAvBgNV BAMTKDk1Q0Y4RUVFNzgwNjJEODE4MTEwNUUxNUU2MUFERkNBMUY2RERFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCritEO2iTMC7TFj3fiutMMnsSi AbeDmgt6VA7HUPd+hF5cktgbE4+e7R0logSSZh/dwJzg13mSK2b1IJ266hQLpZAZ vPr4We8Lyy4wAnPY8Rrm5qlzxqO7ih8ajFiXjS3WWtVDJ9jt3Y4En//7awVHjqVS lZP49UekBLv1teGnP+vfadByHPKsatRexDUGTZu3BRm8hDW9B9BBBF9LyTGm/UHt 8HRLNaKsMeBXPCD54t+Q9cM8pmYieUODclP6+Y4XgXyWDNgsfjyUMenPXstqIVNb f3OwwhTNoi4Q9HaCy01jx4VTHT9vkYRlI8KXcl/beB0K4yfyPnzaqnqUnmdjAgMB AAGjggKjMIICnzAdBgNVHQ4EFgQUlc+O7ngGLYGBEF4V5hrfyh9t3qkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIA ATBmMAwDBAFPsA4DBABPsBIDBABPsBUDBABPsCYDBABPsCwwDAMEAE+wMQMEAk+w MAMEAE+wOQMEAE+wPQMEAE+wRgMEAE+wVwMEAU+0AAMEAE+3kTAMAwQAT7eTAwQB T7eUAwQBbUACMA0GCSqGSIb3DQEBCwUAA4IBAQAmf5c+JEFluGU4RyZpwI6FTOV2 XmS+105oBcJsBtffJacPEKl614CiS28wAZUu+SYT0S0AFsSKvZG4ADKiEbcbtgE4 Jnms8S6JJjYLxbvW/1IVG0N4jgY3UWf5d0H/RP/LTxm0xm7QkG2kbqwOmhPGTWHr ANQzqDQjTZ9MGQCl0pZFVyjIHijQ+ahdUJ+N8lmvC5hGy57SwLjzrEAuBNNuuOzy VtgHEypc/moYP0mtejkZ4buxX7pXh3paSLu2ICiJVWKNGhIgDSs8CIe86ak/raK1 u/WwMS4D8nmS9lH/knLV5T821nhbflWWqbCtaMOy+G39iC+8JXOoJai+lpw9 -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:56 2026 by rpki-client