Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: ZJ47M9QgQugi7MRWcubcPpwrr1fR/FYJ82sZucOLF58=
Subject key identifier: B8:97:0F:F4:58:0A:33:58:55:7E:69:8F:29:E1:87:DF:76:B6:E5:10
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3378BC18A0A6037F46958AAB723B65E5255FD924
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
Signing time: Thu 27 Aug 2026 00:02:11 +0000
ROA not before: Wed 26 Aug 2026 23:57:11 +0000
ROA not after: Thu 26 Aug 2027 00:02:11 +0000
asID: 9304
IP address blocks: 51.194.154.0/24 maxlen: 24
51.194.160.0/23 maxlen: 24
51.194.162.0/24 maxlen: 24
51.194.167.0/24 maxlen: 24
51.241.16.0/23 maxlen: 24
51.241.42.0/24 maxlen: 24
51.241.43.0/24 maxlen: 24
51.241.60.0/23 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.103.0/24 maxlen: 24
188.220.4.0/24 maxlen: 24
188.220.6.0/24 maxlen: 24
188.220.9.0/24 maxlen: 24
188.220.18.0/23 maxlen: 24
188.220.60.0/23 maxlen: 24
188.220.98.0/23 maxlen: 24
188.221.12.0/24 maxlen: 24
188.221.18.0/24 maxlen: 24
188.221.21.0/24 maxlen: 24
188.221.60.0/23 maxlen: 24
188.221.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:78:bc:18:a0:a6:03:7f:46:95:8a:ab:72:3b:65:e5:25:5f:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 26 23:57:11 2026 GMT
Not After : Aug 26 00:02:11 2027 GMT
Subject: CN=B8970FF4580A3358557E698F29E187DF76B6E510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:14:46:2f:21:08:6d:42:74:24:d3:36:bb:
05:82:75:c3:24:a3:49:58:b4:77:4d:3a:c2:0a:5b:
b9:67:b1:49:bd:ce:f4:f0:0c:da:a9:40:45:ba:1e:
aa:0a:5d:fe:0d:a7:25:d1:64:c8:f7:4d:4a:e5:f9:
b9:52:6f:17:38:20:0d:a5:eb:0f:cf:2a:68:f3:7d:
56:09:9d:7a:60:ce:92:c9:2c:fa:0f:f5:4e:bd:d6:
17:84:b7:7b:64:32:b4:5e:01:d1:11:b8:ac:b3:1f:
71:72:7d:87:ae:d0:e5:84:60:96:69:f4:eb:96:a1:
c4:d9:a2:3a:76:23:66:f7:2b:89:97:1c:96:14:b8:
c0:eb:72:12:50:be:10:e1:04:bf:79:f0:9f:dd:6a:
b2:24:7b:57:0b:8e:ec:f1:f7:4b:9f:04:82:b0:e8:
83:0f:98:66:0b:3c:5e:34:ef:70:2c:fe:7e:d4:d6:
fc:73:d6:78:73:9b:88:aa:e4:9e:9a:a3:6b:32:fd:
f2:75:2b:65:a7:f4:45:0b:23:5f:29:28:5f:06:34:
96:fa:5c:7c:e8:af:e4:8a:c5:ea:80:02:75:f3:ce:
55:d4:a0:a4:47:68:1c:ce:12:ea:ec:93:c7:11:8b:
af:bf:31:34:32:00:a0:21:71:15:c0:87:53:14:dc:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:0F:F4:58:0A:33:58:55:7E:69:8F:29:E1:87:DF:76:B6:E5:10
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.154.0/24
51.194.160.0-51.194.162.255
51.194.167.0/24
51.241.16.0/23
51.241.42.0/23
51.241.60.0/23
78.105.100.0/24
78.105.103.0/24
188.220.4.0/24
188.220.6.0/24
188.220.9.0/24
188.220.18.0/23
188.220.60.0/23
188.220.98.0/23
188.221.12.0/24
188.221.18.0/24
188.221.21.0/24
188.221.60.0/23
188.221.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:4b:07:55:88:d7:d2:9f:42:45:4b:17:96:3e:2b:69:da:14:
3e:c1:e8:1d:47:52:10:bd:5f:ca:d8:62:e1:ae:7b:0a:a8:d4:
65:af:4a:c2:80:87:a4:dc:e2:39:d8:f3:53:1a:17:d0:7c:64:
2a:86:a5:0f:d9:6b:0a:f0:68:e9:57:20:d5:71:63:e2:97:cf:
03:5c:78:48:14:22:47:4a:81:ac:37:50:df:c3:34:17:17:de:
c7:73:9c:5d:60:08:40:20:25:da:79:37:d2:6f:1f:42:ec:65:
fe:87:10:43:2a:9b:0f:17:15:28:8b:11:b1:a3:6b:64:b8:1f:
c8:4e:33:43:01:9e:01:3c:82:ea:4d:4f:a4:52:dc:a9:5b:93:
b4:4c:1d:89:99:3b:ab:8c:ac:84:2f:83:60:05:08:df:37:d7:
5e:d3:ce:4a:32:2f:bb:36:8b:ad:79:40:fc:65:80:1c:8a:e7:
68:d1:e9:01:74:2a:e0:fb:14:08:4b:13:e5:12:b1:63:12:5f:
af:76:9e:9a:47:a4:c6:aa:9d:13:f6:d6:13:09:18:49:d9:74:
c4:c5:e3:0f:0f:a7:dc:6e:0a:67:e4:f5:36:0b:1f:ad:0d:8b:
95:9b:a9:33:ab:26:fd:e1:b4:31:80:70:c1:1f:de:23:be:dd:
35:71:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:18 2026 by rpki-client