Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: fUakETsvjjfpcM4kdaTP9pEXCz2GdbIcMnTB+LUu1nU=
Subject key identifier: EE:9B:F5:7E:E6:26:FB:DB:97:AC:FC:69:BF:20:7D:7C:C7:3E:A8:7B
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 291D7E25FA056F1423A53744888258540AE9D0AB
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
Signing time: Tue 21 Oct 2025 14:36:38 +0000
ROA not before: Tue 21 Oct 2025 14:31:38 +0000
ROA not after: Tue 20 Oct 2026 14:36:38 +0000
asID: 9304
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
139.28.48.0/24 maxlen: 24
139.28.49.0/24 maxlen: 24
188.119.69.0/24 maxlen: 24
193.32.205.0/24 maxlen: 24
194.93.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1d:7e:25:fa:05:6f:14:23:a5:37:44:88:82:58:54:0a:e9:d0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 21 14:31:38 2025 GMT
Not After : Oct 20 14:36:38 2026 GMT
Subject: CN=EE9BF57EE626FBDB97ACFC69BF207D7CC73EA87B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:a6:1f:a1:13:5f:74:2b:e0:7c:6f:de:e9:
84:c9:81:1b:4f:74:3b:d1:e4:a8:91:3f:5c:6f:6e:
f8:d5:1a:e6:a5:0e:e2:3a:d5:aa:5e:d6:89:68:8b:
df:7b:89:5a:29:f6:65:57:1f:12:db:7c:fa:1e:54:
8f:95:8d:54:e7:41:2f:b5:86:25:59:65:5f:ee:25:
e9:11:d3:a4:8a:d0:ca:73:64:33:f7:e6:e9:41:20:
b5:5a:7b:bb:a9:60:1c:3d:4a:da:3d:ae:b6:00:56:
a0:d3:60:b2:b6:45:69:6b:4f:9d:8d:c2:70:ca:47:
90:f9:bd:5e:3b:ea:b9:c6:ab:50:f7:eb:83:b2:f6:
b1:3b:88:70:a5:12:f9:95:13:8d:96:e4:d4:55:54:
9b:11:74:fe:40:52:3f:80:0f:21:5b:4f:45:79:8b:
d3:8a:e1:71:6f:94:fc:89:7e:39:ac:a0:a7:00:32:
cd:80:9a:ba:01:73:0c:be:8f:86:5a:ee:7d:f6:b0:
60:ea:39:53:1d:30:69:de:13:ae:f7:f9:ef:c8:73:
2a:7d:55:22:f5:09:bb:d7:75:12:09:39:b7:d6:70:
d7:f7:e7:89:0e:7a:0e:34:88:fd:5d:18:e2:46:58:
44:cc:d5:84:60:58:67:de:bd:fa:f1:d7:f5:62:f1:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:F5:7E:E6:26:FB:DB:97:AC:FC:69:BF:20:7D:7C:C7:3E:A8:7B
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
139.28.48.0/23
188.119.69.0/24
193.32.205.0/24
194.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:db:48:85:9c:93:8c:12:8c:08:9a:4c:4d:50:5e:69:94:83:
f1:98:a8:18:3b:81:b9:8b:40:29:8a:6d:88:fc:31:30:d2:63:
c5:46:cf:4e:2e:e8:61:b6:a2:08:87:6e:a5:84:e1:a2:e4:aa:
27:d5:65:55:a5:19:81:98:e9:f8:ee:b5:79:ef:5f:55:c2:ae:
df:a7:74:f8:c5:29:71:5a:98:ba:c1:df:06:dc:3c:55:64:fb:
cf:07:77:67:42:77:ec:9b:66:8f:ef:ae:ba:40:90:1f:3f:d2:
30:88:aa:59:f1:26:77:6d:eb:c6:f4:d4:42:4a:b6:f7:8b:df:
41:73:1e:6a:06:8e:97:25:ab:66:f8:38:ad:c8:fb:7f:07:08:
65:26:a8:a8:96:d7:74:05:71:3c:99:2a:6d:0d:2d:eb:fb:dc:
c0:0c:2c:a6:4b:96:7f:04:ae:2b:90:6e:f7:3a:5d:f7:9d:c6:
0d:f6:e5:d2:ec:fc:74:39:28:98:5f:a5:04:4b:bb:b3:72:d6:
89:db:71:12:9c:b2:17:8e:95:f3:d6:8b:fa:6b:66:c2:f0:81:
95:a3:90:31:fa:5e:00:ce:e2:71:b3:f5:77:b3:f8:a0:eb:20:
01:e0:00:b6:5c:3d:9e:ea:82:1b:ae:fd:03:e6:5d:a4:5f:50:
94:80:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:46:30 2025 by rpki-client