Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 1zwx+zrpfhJLztITUVtdfhTv5obxen7p/OnFrH6SHuc=
Subject key identifier: 25:66:EC:08:12:FC:6E:70:B2:78:F6:6A:61:32:33:9C:C4:AC:FB:20
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3CED648E021AE0F053A07CCA8F71F6E730C7E54E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Mon 25 May 2026 12:16:20 +0000
ROA not before: Mon 25 May 2026 12:11:20 +0000
ROA not after: Mon 24 May 2027 12:16:20 +0000
asID: 9304
IP address blocks: 193.5.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ed:64:8e:02:1a:e0:f0:53:a0:7c:ca:8f:71:f6:e7:30:c7:e5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 25 12:11:20 2026 GMT
Not After : May 24 12:16:20 2027 GMT
Subject: CN=2566EC0812FC6E70B278F66A6132339CC4ACFB20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:7b:6c:0c:1b:91:aa:7c:0a:99:bb:a4:ef:
cc:86:16:6d:a0:3f:0a:97:49:4c:4b:2a:41:88:67:
75:09:37:60:54:b5:66:cf:51:a6:5b:39:d1:77:b5:
98:a6:29:43:82:dd:10:1c:e9:d3:3e:05:93:3f:22:
6c:4c:93:a1:be:96:f9:d2:a9:3f:9d:1d:5e:a7:db:
8a:a7:f2:8e:2b:3b:04:67:27:fc:87:b4:1a:54:7a:
00:4a:16:d1:df:ae:03:d7:3c:7d:ec:f7:d0:69:49:
2c:d8:f1:ac:cb:4b:f0:4e:8b:4b:b4:d0:dd:30:1d:
10:d7:45:5d:1b:ed:a0:81:5e:52:33:f5:6e:08:45:
27:ab:75:e5:35:73:8c:5d:12:bb:4d:f8:10:95:e6:
2f:8c:26:2e:6e:19:16:54:cb:43:4c:69:33:df:92:
89:14:a2:7f:6b:94:1b:b6:8b:28:7c:7f:7b:5e:45:
a0:15:2a:d2:eb:15:c0:8b:a4:7a:02:69:2b:bf:28:
69:cf:d2:65:1b:3c:44:39:af:37:d2:3a:a9:83:f1:
67:74:a6:36:4e:2d:ca:96:15:d9:d4:f3:ad:11:d7:
bd:e0:f7:e9:97:ad:ba:34:38:1d:f2:3d:c4:53:9a:
52:be:3c:50:44:e9:6d:9b:d7:13:6f:eb:d7:e4:1a:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:EC:08:12:FC:6E:70:B2:78:F6:6A:61:32:33:9C:C4:AC:FB:20
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:aa:c5:96:7e:9f:79:04:80:00:8d:51:31:32:69:12:5f:f6:
61:eb:30:b0:87:29:58:38:0b:4f:20:19:b5:10:c0:3f:af:45:
73:cd:25:fd:21:97:a3:20:80:8c:3b:d8:1b:f9:d5:19:de:87:
98:1e:81:27:66:1e:67:02:cd:be:bb:dd:a2:dc:94:fb:24:94:
5e:ff:ce:d6:89:b2:7c:65:29:da:77:ba:ce:ec:51:da:fb:b0:
29:e4:df:a6:a7:d4:93:c6:45:73:f9:59:f6:b0:64:d7:3c:15:
1c:cf:48:5b:90:81:81:51:21:d6:c9:a3:ae:91:7e:7d:d2:5b:
f3:29:ab:42:e6:2c:dd:7f:7e:d1:bd:4a:7e:cf:97:0a:7c:b1:
77:6a:bf:a6:38:50:85:0a:54:61:2d:dc:f4:39:39:ce:52:45:
2b:92:9e:85:44:df:ab:6d:94:82:39:9e:f6:6a:43:e4:8e:c1:
23:2e:f3:7d:5e:b1:ad:01:c4:56:3a:d6:d6:ab:b8:ca:7a:b3:
ee:f0:b1:d4:8e:d4:1f:6f:47:eb:6b:36:07:c2:ea:5a:d7:c3:
33:a7:6e:17:4b:a3:2c:31:db:a5:84:db:58:bc:00:ff:7f:08:
2c:72:3d:02:99:ea:58:4d:25:44:d4:45:d0:0b:5b:4a:7a:3d:
e7:f5:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:30 2026 by rpki-client