Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: nHQAiyspiityTd0UOL5QWPwmhB9Tn9liR5fUm+5J7/k=
Subject key identifier: 37:B2:72:3A:D1:68:B4:AF:F1:C5:3B:FB:19:EF:0C:52:2F:8B:63:0F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 26DD457A039160088BF054EE64EA7D7CDB19C630
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Wed 01 Jul 2026 13:30:05 +0000
ROA not before: Wed 01 Jul 2026 13:25:05 +0000
ROA not after: Wed 30 Jun 2027 13:30:05 +0000
asID: 9304
IP address blocks: 141.11.56.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
141.11.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:45:7a:03:91:60:08:8b:f0:54:ee:64:ea:7d:7c:db:19:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 1 13:25:05 2026 GMT
Not After : Jun 30 13:30:05 2027 GMT
Subject: CN=37B2723AD168B4AFF1C53BFB19EF0C522F8B630F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:ca:9e:b5:b5:34:b3:f8:9a:7c:80:8e:2c:
3f:6f:8d:74:4f:6d:f9:5c:2d:09:56:db:4e:1b:63:
d7:31:46:83:98:cb:7b:bc:0c:f5:58:b7:1e:b3:a9:
31:ac:62:1f:b0:46:42:76:95:20:ad:e7:e8:a7:bf:
3e:21:36:bb:fa:c0:86:9e:2d:ba:55:cf:ba:49:12:
3a:97:c8:7d:ba:95:d1:d7:53:cd:71:e0:9c:26:7e:
87:49:0f:e9:38:cd:9a:ad:f6:9a:af:63:2a:8d:71:
f9:d3:c3:69:36:ea:0c:de:58:13:ac:5e:df:d1:76:
af:e2:f9:35:c7:5c:08:1c:00:aa:9e:f7:5a:f1:47:
d5:3e:69:04:24:68:e9:31:f5:04:63:d5:a2:a3:5b:
0b:50:53:38:3c:db:ed:4b:6f:d0:99:69:9d:c6:4d:
3b:e3:bd:a2:5f:1e:da:19:e2:81:ab:9d:57:88:04:
b1:de:e0:6a:7e:de:14:5a:96:3f:6a:cc:ab:d0:9e:
80:23:44:d3:78:41:06:a5:c2:97:ba:81:4a:04:32:
15:13:fc:13:c4:d5:71:e2:82:6e:ea:e1:b0:d7:01:
73:b8:fd:10:93:ed:1b:e2:62:ef:58:a1:b5:21:96:
ea:b1:0d:07:65:00:22:c3:18:43:d8:ce:cf:f6:e4:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:72:3A:D1:68:B4:AF:F1:C5:3B:FB:19:EF:0C:52:2F:8B:63:0F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.56.0/24
141.11.108.0/24
141.11.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1b:1c:3b:26:64:dc:9e:0d:4d:2f:06:27:7c:33:2e:f5:c2:
21:3f:c5:24:1f:5b:d4:a1:77:a6:a7:2d:63:25:d2:61:ae:cc:
9c:d3:9e:e4:4b:67:3a:79:71:b2:d0:43:99:05:e6:3d:b2:08:
8f:a4:4a:f0:b5:d0:aa:78:41:d9:39:62:5a:a4:2b:c8:81:60:
77:25:c5:0e:2f:87:f4:f7:48:99:9f:5c:ad:30:19:14:5a:7f:
e3:19:fd:7e:3e:27:10:19:3d:6a:56:c3:2e:bb:57:ed:ee:4d:
cb:3e:95:e8:a0:50:3e:8a:31:0f:9d:b0:6c:f2:9b:7c:15:74:
99:e5:09:c7:fb:e2:4b:76:b9:b6:54:17:cb:60:f8:c7:72:89:
4b:2c:cc:38:f4:21:33:0c:14:34:10:d1:ab:84:f3:c8:34:0f:
81:d4:0b:3a:c9:40:75:60:1f:7a:20:5f:aa:63:2b:05:c3:60:
5b:9e:39:06:39:7d:b8:08:a7:8e:93:82:64:00:f0:d8:e4:4a:
6f:2b:fa:4c:cf:9f:7c:5b:f9:65:f5:4a:0e:83:4b:14:97:be:
36:d4:cf:9a:a0:0f:2f:5e:6d:79:cb:65:75:c3:1c:ff:9a:14:
50:de:f9:dd:d7:f7:d4:f2:38:33:01:9f:81:4c:e3:4c:54:82:
48:69:69:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:45 2026 by rpki-client