$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: HOFtg0dAehWbTZuRoeQjk8aEOpyQX+rIPl7w69GXMqo= Subject key identifier: 2D:E8:93:E2:BD:81:7B:7F:3E:13:32:EC:54:E2:4D:3B:A9:CE:3C:E0 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 368C192BAA61C6773891C2F11013337EC67B1D0A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa Signing time: Thu 24 Sep 2026 08:49:29 +0000 ROA not before: Thu 24 Sep 2026 08:44:29 +0000 ROA not after: Thu 23 Sep 2027 08:49:29 +0000 asID: 9304 IP address blocks: 179.69.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Oct 2026 10:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8c:19:2b:aa:61:c6:77:38:91:c2:f1:10:13:33:7e:c6:7b:1d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 24 08:44:29 2026 GMT Not After : Sep 23 08:49:29 2027 GMT Subject: CN=2DE893E2BD817B7F3E1332EC54E24D3BA9CE3CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:85:fa:fe:00:ba:39:a8:eb:59:3b:f1:ac: d0:aa:36:aa:3b:52:c3:0d:d1:d6:2a:da:45:a7:73: e2:43:83:1a:8e:13:06:36:03:f1:48:9a:b8:e0:5b: 78:49:cb:a2:e8:d3:13:26:c4:58:d0:20:bd:7e:e4: 6a:18:c9:49:ae:e3:ab:7c:77:4c:7e:1e:50:04:04: 5a:a6:fd:ab:3e:d4:dc:3c:43:78:ae:99:bf:bc:23: 52:07:2e:51:0d:31:66:10:28:ec:5a:a8:c8:1c:9a: f5:b3:08:24:dc:47:d5:77:46:c1:e8:24:e8:8f:d0: c3:94:67:20:c4:6b:02:71:42:ab:97:02:62:4d:62: 03:11:1a:cb:e7:76:7b:0f:d9:ae:82:5a:08:e9:f9: e0:ce:66:87:b4:cb:aa:54:66:13:31:92:ab:a8:90: 6b:5c:34:f1:5e:f2:4c:92:1d:3b:c3:a2:58:19:b9: f5:47:f2:99:e8:52:e0:d0:37:c8:fe:cc:18:d2:c0: 95:0f:00:c1:c8:97:8b:d4:18:08:8b:cf:e7:cc:0a: 3e:f2:75:c5:e5:b9:9f:9c:40:9c:b0:9c:15:ce:60: a8:21:4c:b8:b8:7d:bc:b2:22:37:65:1b:3b:9c:c6: 17:9b:bd:16:a4:12:69:7b:73:8d:0f:54:67:66:e1: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:93:E2:BD:81:7B:7F:3E:13:32:EC:54:E2:4D:3B:A9:CE:3C:E0 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.69.64.0/23 Signature Algorithm: sha256WithRSAEncryption 03:9c:7a:18:af:3f:a2:72:14:e6:9a:c9:9b:af:e0:17:29:25: 77:23:b0:6a:d4:a6:c6:6f:5f:9f:40:4b:39:61:3d:3e:a2:1e: 06:e7:53:de:93:7b:38:ff:71:a6:c0:30:6b:86:fa:82:87:48: 38:da:bd:30:eb:2d:0c:cc:e0:97:76:3c:a3:1b:a6:2b:6e:a4: ee:e5:2a:61:11:c9:6f:25:1e:ff:e4:80:40:49:64:ab:63:56: 56:aa:77:bb:7b:e4:7f:c2:a2:07:af:39:90:81:62:7d:87:e2: 69:39:6b:99:30:d6:a8:65:2d:db:b8:ec:99:d3:33:6d:8d:ab: af:ad:58:37:72:21:ed:0d:e2:2b:25:50:fe:e5:d1:bd:dd:db: a3:e8:42:b4:63:49:ae:f5:40:fe:a8:4e:fb:4c:56:70:ca:b0: b2:18:f4:53:de:50:b4:db:c7:df:ce:4a:ad:2e:35:6d:a5:bf: c8:2d:0f:5e:97:be:4a:34:82:d2:56:00:e5:5a:2d:af:a9:cc: 13:1d:66:47:9d:f4:49:8d:40:04:d9:b7:24:03:96:d2:53:f6: 12:be:f9:82:54:99:78:9a:68:53:4c:28:cf:4c:7e:05:af:32: 1a:66:fa:f7:d8:e5:17:7d:6c:a2:de:b5:23:c8:9f:f4:2f:74: 54:aa:53:6a -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUNowZK6phxnc4kcLxEBMzfsZ7HQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjQwODQ0MjlaFw0yNzA5MjMwODQ5MjlaMDMxMTAvBgNV BAMTKDJERTg5M0UyQkQ4MTdCN0YzRTEzMzJFQzU0RTI0RDNCQTlDRTNDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfoX6/gC6OajrWTvxrNCqNqo7 UsMN0dYq2kWnc+JDgxqOEwY2A/FImrjgW3hJy6Lo0xMmxFjQIL1+5GoYyUmu46t8 d0x+HlAEBFqm/as+1Nw8Q3iumb+8I1IHLlENMWYQKOxaqMgcmvWzCCTcR9V3RsHo JOiP0MOUZyDEawJxQquXAmJNYgMRGsvndnsP2a6CWgjp+eDOZoe0y6pUZhMxkquo kGtcNPFe8kySHTvDolgZufVH8pnoUuDQN8j+zBjSwJUPAMHIl4vUGAiLz+fMCj7y dcXluZ+cQJywnBXOYKghTLi4fbyyIjdlGzucxhebvRakEml7c40PVGdm4bSzAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQULeiT4r2Be38+EzLsVOJNO6nOPOAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBs0VAMA0GCSqGSIb3DQEBCwUAA4IBAQADnHoYrz+ichTmmsmbr+AXKSV3 I7Bq1KbGb1+fQEs5YT0+oh4G51Pek3s4/3GmwDBrhvqCh0g42r0w6y0MzOCXdjyj G6YrbqTu5SphEclvJR7/5IBASWSrY1ZWqne7e+R/wqIHrzmQgWJ9h+JpOWuZMNao ZS3buOyZ0zNtjauvrVg3ciHtDeIrJVD+5dG93duj6EK0Y0mu9UD+qE77TFZwyrCy GPRT3lC028ffzkqtLjVtpb/ILQ9el75KNILSVgDlWi2vqcwTHWZHnfRJjUAE2bck A5bSU/YSvvmCVJl4mmhTTCjPTH4FrzIaZvr32OUXfWyi3rUjyJ/0L3RUqlNq -----END CERTIFICATE-----Generated at Sat Oct 17 04:19:36 2026 by rpki-client