Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: WyJfqvviOcl1syWI6XbqKMasxdySxFWFi9azNhKhXkA=
Subject key identifier: 0A:35:A9:94:60:62:78:65:E4:81:68:1A:A2:F5:5D:A1:97:23:E3:78
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5F4550B203A987AF10CA42CE39B659D344264A63
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Mon 12 Oct 2026 14:47:13 +0000
ROA not before: Mon 12 Oct 2026 14:42:13 +0000
ROA not after: Mon 11 Oct 2027 14:47:13 +0000
asID: 9304
IP address blocks: 194.104.156.0/24 maxlen: 24
212.80.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:45:50:b2:03:a9:87:af:10:ca:42:ce:39:b6:59:d3:44:26:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 12 14:42:13 2026 GMT
Not After : Oct 11 14:47:13 2027 GMT
Subject: CN=0A35A99460627865E481681AA2F55DA19723E378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:64:ec:73:65:16:5b:8f:13:96:ba:07:e4:
ce:51:47:d9:9b:fb:7d:00:56:76:8f:7f:cc:9b:f8:
9e:c9:0e:75:14:b1:ff:6f:54:82:4e:27:1f:46:e4:
6a:be:6f:61:d1:1e:87:1f:64:7a:16:0d:87:34:74:
fd:2b:20:e3:93:23:e6:7d:03:b1:47:1d:e2:e4:0f:
62:4e:8a:23:96:7f:50:17:85:97:7f:03:57:42:71:
f0:b7:4e:67:bd:c5:20:63:7b:f2:76:92:13:81:c9:
12:79:a3:8c:f7:8c:b9:c2:78:43:15:a1:56:1a:0e:
e1:7f:b7:c0:46:f9:a4:65:e0:b6:72:69:5e:b3:1d:
b2:1e:f8:ac:ec:b6:6c:72:27:75:0c:d3:45:61:94:
90:b2:77:bc:9c:14:e3:71:20:60:aa:66:0a:58:f8:
60:9c:22:1b:65:1a:89:5d:09:4e:66:16:0f:8b:c8:
e7:67:61:b9:48:55:31:13:6c:85:da:f3:5b:b5:ae:
87:60:2a:cd:51:16:7d:f3:e0:5e:bf:e6:57:1d:6b:
4b:3a:cb:93:a5:06:d9:18:d4:32:b1:65:42:35:3c:
22:96:6e:3e:9b:74:ae:ca:20:96:bb:1f:9a:4c:7d:
99:7d:b0:36:cf:cd:bf:4d:43:e9:ce:dd:1c:f7:1a:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:A9:94:60:62:78:65:E4:81:68:1A:A2:F5:5D:A1:97:23:E3:78
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.156.0/24
212.80.194.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:2d:6d:1b:86:fe:59:15:6f:11:37:62:0f:d3:ad:c4:76:f0:
9e:02:ac:30:9c:d5:f0:2c:88:5f:d5:a3:44:b2:47:ba:cf:c7:
93:11:09:97:de:0b:5e:fa:c3:13:6a:77:af:58:be:95:d4:45:
bf:2c:7e:3b:06:1f:ce:89:d1:e5:16:9c:5a:09:a3:ec:82:2f:
66:28:fd:57:f9:6d:b8:6b:33:ca:b8:99:db:e2:0d:bc:38:dc:
cc:1e:57:18:b2:5d:27:5e:49:7a:81:22:42:ec:ce:16:f6:48:
98:51:b6:07:80:70:bd:ed:fa:7e:c0:5c:05:81:b1:0d:7e:12:
7a:a2:4d:37:28:a0:50:18:04:6f:b2:6b:7d:4c:45:37:66:fa:
a3:6f:72:c6:a2:d1:2d:7c:b3:9f:7e:9e:ce:f0:d8:2c:40:02:
f8:6d:e8:69:37:da:a9:72:6e:6b:55:88:5e:f5:98:43:7e:8b:
bd:44:7d:9a:16:c5:3e:d7:77:79:7d:e8:12:eb:10:08:0e:f5:
1b:5f:48:38:dc:7e:b6:83:30:5f:d3:66:be:90:19:42:fd:43:
51:1f:25:b5:74:d0:67:45:71:da:84:83:ff:9f:19:08:20:09:
a6:8a:12:c9:d3:69:18:28:00:c4:3e:ca:e3:94:9c:b4:73:79:
c5:b7:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:54 2026 by rpki-client