Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9302.roa
File: AS9302.roa (raw, json)
Hash identifier: bD6k0inxZoFp4zWGMvGAHiWeh9Rr0iPrb9gpgUBfTRY=
Subject key identifier: 9B:B9:20:45:63:27:53:F7:BB:C5:7B:C9:9E:BC:7B:DB:AE:A5:A9:5E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 739E2CDBB4E3A91A91AB88480970EFFB167EB3A0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9302.roa
Signing time: Thu 02 Oct 2025 08:22:33 +0000
ROA not before: Thu 02 Oct 2025 08:17:33 +0000
ROA not after: Thu 01 Oct 2026 08:22:33 +0000
asID: 9302
IP address blocks: 82.24.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9e:2c:db:b4:e3:a9:1a:91:ab:88:48:09:70:ef:fb:16:7e:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 08:17:33 2025 GMT
Not After : Oct 1 08:22:33 2026 GMT
Subject: CN=9BB92045632753F7BBC57BC99EBC7BDBAEA5A95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:e8:7c:b1:99:c6:7e:f4:8d:2f:c1:d3:ca:
55:04:51:94:ae:61:bb:62:95:66:de:68:4c:46:62:
e6:af:42:fa:5e:6a:34:7a:01:d5:b1:15:b3:79:f9:
87:4a:66:fb:da:64:c2:96:43:44:af:29:7e:73:3a:
40:97:9d:ff:29:7d:8b:28:0e:b9:0a:69:6a:8b:91:
0a:bc:d6:93:3c:b8:67:cb:8b:d6:4d:08:a4:56:ab:
c5:9a:b1:3b:99:41:68:0f:3c:d8:8a:ca:bf:35:7d:
d5:94:d5:34:9f:6e:9a:1b:e9:3a:77:07:d9:a7:10:
22:5d:05:20:a0:e4:01:c7:84:cb:4c:da:75:44:6f:
f6:e2:8a:3a:eb:1c:f6:66:20:0c:6a:8d:34:4d:a2:
60:dc:3e:06:f8:02:90:72:ad:b7:b4:19:26:4f:d7:
82:ae:25:d5:05:23:85:ee:b3:38:c2:c0:dc:92:2e:
20:ac:63:24:94:6c:89:7c:18:b7:7b:a5:65:f7:2b:
51:f2:65:4c:35:d4:cb:15:c1:c6:82:59:68:d3:fa:
19:2e:d4:a3:68:b1:f3:60:74:a7:a4:00:09:a5:09:
b4:26:06:52:4d:30:83:8d:aa:1a:6b:1f:8c:86:e6:
b9:05:ff:37:b7:89:9b:56:d1:2f:6e:5d:3d:71:4d:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:20:45:63:27:53:F7:BB:C5:7B:C9:9E:BC:7B:DB:AE:A5:A9:5E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.145.0/24
Signature Algorithm: sha256WithRSAEncryption
04:60:fd:42:f2:bd:97:df:51:2d:72:1a:29:c7:76:b4:2c:8b:
a1:cf:6e:ba:22:4f:8f:a2:08:61:e5:34:a2:b9:74:67:e2:75:
6e:21:97:9a:0d:4a:32:2a:f5:68:01:e0:74:3b:4b:46:79:aa:
ec:7c:30:b6:ad:62:11:60:3c:d7:ef:1d:fa:11:b5:e6:20:e8:
48:7c:e0:e0:12:36:be:df:00:a0:5d:e4:e2:b3:2b:b1:2d:f3:
64:44:e7:e7:65:da:a9:6a:c5:b5:4b:f4:4c:5a:40:49:7a:20:
8d:eb:4f:b3:0e:00:de:25:d9:9b:df:1c:7c:37:81:d3:d2:f3:
5f:bc:34:60:f1:98:d1:c0:35:05:82:ce:a9:fc:d0:f1:03:e0:
f7:54:54:d3:c5:8a:e2:61:42:2b:98:f1:4b:58:7f:65:e6:88:
4f:22:84:56:58:da:15:12:f9:eb:35:03:cb:2f:d8:a0:58:bf:
b0:c3:a5:0e:1c:ff:0c:da:28:08:20:0d:c7:c3:93:d0:ff:e1:
9d:35:f3:03:9e:e7:dd:5e:8d:a3:99:5b:1e:3e:c6:9a:dd:2d:
15:07:3a:1a:d6:03:32:00:2b:05:d3:4a:d5:69:f9:b0:da:05:
e1:fd:b9:fe:47:c2:11:08:4f:d0:2c:d2:52:7b:dc:89:f3:56:
b4:c6:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:31 2025 by rpki-client