Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: aCNIPYW7x+jT3kjkz8nCzns31h1UHWvD1LxGKstnxjo=
Subject key identifier: 6E:86:C7:FF:40:7A:25:88:C2:73:CC:DA:C7:2C:A3:DA:D1:04:B2:45
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B3E24B5FA09E8DC2962D113D5EEC5809382A56F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Sat 01 Aug 2026 00:11:50 +0000
ROA not before: Sat 01 Aug 2026 00:06:50 +0000
ROA not after: Sat 31 Jul 2027 00:11:50 +0000
asID: 9304
IP address blocks: 82.22.14.0/24 maxlen: 24
82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.194.0/23 maxlen: 24
82.40.52.0/24 maxlen: 24
82.40.53.0/24 maxlen: 24
82.40.54.0/24 maxlen: 24
82.41.128.0/23 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
84.75.151.0/24 maxlen: 24
178.83.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3e:24:b5:fa:09:e8:dc:29:62:d1:13:d5:ee:c5:80:93:82:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 1 00:06:50 2026 GMT
Not After : Jul 31 00:11:50 2027 GMT
Subject: CN=6E86C7FF407A2588C273CCDAC72CA3DAD104B245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:77:76:73:02:2f:e6:a4:6f:2c:2a:8c:58:
67:41:9c:c6:9a:a7:d7:84:13:98:11:2e:7a:cc:0d:
8a:b1:5a:dc:66:c8:7f:57:1f:dc:a5:ff:ff:f4:ff:
c9:57:01:49:94:f0:82:1f:fe:f6:75:02:16:03:42:
8f:71:b7:b8:78:6b:7d:8f:cf:9a:7b:cf:0b:98:62:
ad:01:95:bd:28:d5:12:8b:0c:ed:e2:70:d9:82:b2:
75:dd:02:01:71:13:36:d8:1f:6d:d2:07:4a:9c:fa:
2d:6a:ed:d7:d1:92:08:82:a7:b3:be:fb:8f:d6:f6:
95:01:7a:c2:03:45:a1:0f:2c:7b:e2:41:2f:8f:dd:
87:a5:33:1e:90:db:01:bc:81:31:b0:20:16:f6:1b:
47:b4:86:ce:90:52:1c:4a:ce:06:d1:30:2a:28:ba:
a6:55:53:f5:42:9e:a7:92:e5:f9:53:36:c1:5b:89:
51:bf:7e:d8:d8:03:cf:02:c0:e8:75:f1:c8:16:61:
60:f0:85:97:4a:14:df:e1:96:c6:19:5c:f0:7c:b0:
8b:c5:7b:53:c6:27:c6:f0:8c:c3:21:75:0e:b1:c3:
83:9f:39:e3:dd:ce:ab:6f:e9:86:71:69:d1:20:af:
45:f4:6b:02:36:4d:37:ca:fb:cf:af:56:94:fc:be:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:C7:FF:40:7A:25:88:C2:73:CC:DA:C7:2C:A3:DA:D1:04:B2:45
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.14.0/24
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.38.38.0/23
82.38.76.0/22
82.39.194.0/23
82.40.52.0-82.40.54.255
82.41.128.0/23
82.47.23.0/24
82.47.52.0/24
82.47.56.0/24
82.47.96.0/24
82.47.100.0/24
82.47.103.0/24
84.75.151.0/24
178.83.146.0/23
Signature Algorithm: sha256WithRSAEncryption
42:80:a1:34:44:31:44:f4:8a:d4:7a:b3:1c:22:ae:86:8d:5e:
ff:c5:68:a8:37:07:33:30:29:be:c0:41:45:fc:7e:8c:2c:c0:
51:53:a0:be:05:9e:69:c4:be:59:f1:f6:c5:ee:0c:35:38:48:
f0:06:e5:89:c9:83:c4:3a:80:cf:5e:a5:aa:b7:4b:28:78:fd:
6a:8d:8a:97:b5:0d:eb:1e:6e:fb:ce:98:b0:2d:c9:0e:e6:a4:
ce:1a:d9:69:d4:c4:28:6e:d8:59:53:c8:6b:c7:29:71:da:0e:
bf:38:f5:df:23:78:71:65:44:8e:66:5d:12:cf:38:01:4f:1a:
b6:5d:de:e5:dc:07:8d:f1:a9:73:1c:a6:1f:1a:53:3b:2a:23:
4e:44:26:8a:d3:1f:a9:40:1d:7a:ca:df:34:24:e4:18:52:e5:
b6:cb:6c:bf:bb:63:61:3f:21:3b:66:4a:b8:ac:64:4e:95:21:
ae:fa:d9:cc:23:3e:39:f4:09:6b:73:11:22:d0:83:1a:6b:d9:
b7:e0:7d:8a:48:2a:5e:c4:a3:0b:fa:d0:b5:cc:46:29:4e:1c:
a2:f4:3c:85:e9:49:55:49:7a:c5:30:46:7d:0b:23:cd:37:ef:
c1:44:5f:0d:e0:3b:94:31:90:c3:5e:b4:f0:0c:82:e4:33:13:
35:8c:28:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUKz4ktfoJ6NwpYtET1e7FgJOCpW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDEwMDA2NTBaFw0yNzA3MzEwMDExNTBaMDMxMTAvBgNV
BAMTKDZFODZDN0ZGNDA3QTI1ODhDMjczQ0NEQUM3MkNBM0RBRDEwNEIyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgXd2cwIv5qRvLCqMWGdBnMaa
p9eEE5gRLnrMDYqxWtxmyH9XH9yl///0/8lXAUmU8IIf/vZ1AhYDQo9xt7h4a32P
z5p7zwuYYq0Blb0o1RKLDO3icNmCsnXdAgFxEzbYH23SB0qc+i1q7dfRkgiCp7O+
+4/W9pUBesIDRaEPLHviQS+P3YelMx6Q2wG8gTGwIBb2G0e0hs6QUhxKzgbRMCoo
uqZVU/VCnqeS5flTNsFbiVG/ftjYA88CwOh18cgWYWDwhZdKFN/hlsYZXPB8sIvF
e1PGJ8bwjMMhdQ6xw4OfOePdzqtv6YZxadEgr0X0awI2TTfK+8+vVpT8viDBAgMB
AAGjggKNMIICiTAdBgNVHQ4EFgQUbobH/0B6JYjCc8zaxyyj2tEEskUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBowYIKwYBBQUHAQcBAf8EgZMwgZAwgY0EAgABMIGGAwQA
UhYOAwQAUheQAwQAUheTAwQCUhgAAwQAUhpzAwQAUhp2AwQAUhp9AwQAUhqCAwQB
UiYmAwQCUiZMAwQBUifCMAwDBAJSKDQDBABSKDYDBAFSKYADBABSLxcDBABSLzQD
BABSLzgDBABSL2ADBABSL2QDBABSL2cDBABUS5cDBAGyU5IwDQYJKoZIhvcNAQEL
BQADggEBAEKAoTREMUT0itR6sxwiroaNXv/FaKg3BzMwKb7AQUX8fowswFFToL4F
nmnEvlnx9sXuDDU4SPAG5YnJg8Q6gM9epaq3Syh4/WqNipe1DesebvvOmLAtyQ7m
pM4a2WnUxChu2FlTyGvHKXHaDr849d8jeHFlRI5mXRLPOAFPGrZd3uXcB43xqXMc
ph8aUzsqI05EJorTH6lAHXrK3zQk5BhS5bbLbL+7Y2E/ITtmSrisZE6VIa762cwj
Pjn0CWtzESLQgxpr2bfgfYpIKl7Eowv60LXMRilOHKL0PIXpSVVJesUwRn0LI803
78FEXw3gO5QxkMNetPAMguQzEzWMKDA=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:36 2026 by rpki-client