Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: ZCGoBLH4VTeo2Nt1T+apXq8ntSvqxpFT8fW0jZBAVGo=
Subject key identifier: 54:E0:58:18:2A:F8:99:9E:47:3B:4C:01:8F:59:6C:0E:E8:C6:FC:B9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 60DFE16AFCFE34E76D0C5FCED744C74D90EA7A0F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Mon 01 Jun 2026 14:56:24 +0000
ROA not before: Mon 01 Jun 2026 14:51:24 +0000
ROA not after: Mon 31 May 2027 14:56:24 +0000
asID: 9304
IP address blocks: 141.11.56.0/24 maxlen: 24
141.11.108.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
141.11.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:df:e1:6a:fc:fe:34:e7:6d:0c:5f:ce:d7:44:c7:4d:90:ea:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 1 14:51:24 2026 GMT
Not After : May 31 14:56:24 2027 GMT
Subject: CN=54E058182AF8999E473B4C018F596C0EE8C6FCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:bc:94:73:26:c5:50:76:d2:27:ba:ee:6a:
d8:77:7f:ac:05:68:93:ea:a3:d8:56:de:cf:6e:0e:
01:44:b9:be:97:8e:a8:b4:6e:2d:69:ee:b7:5c:f2:
e6:cc:73:6c:5c:27:ce:80:dd:32:40:40:2e:2a:73:
d9:83:31:39:f2:43:3f:51:b9:d8:3c:03:45:b9:83:
3e:c0:c2:ee:eb:cb:45:f6:3e:bf:c5:42:ea:8d:d0:
81:cd:71:5b:ac:56:99:13:11:7c:b5:90:8e:82:dd:
ae:65:c9:10:0c:aa:3b:44:c2:b5:c9:f9:c3:c3:a0:
f2:50:43:ae:6e:b7:ee:53:72:f7:d9:ac:7a:8c:f3:
f4:19:10:05:f0:53:44:a2:26:de:09:5c:ac:ea:1a:
ee:df:6b:64:a8:a4:0d:c7:70:bb:c4:e3:96:4f:ec:
6c:31:27:7b:e5:b0:0e:dc:87:b0:f7:2f:9a:07:51:
95:e2:f7:57:5e:b5:f0:12:18:c0:87:d6:fe:98:c1:
9c:7d:b2:d4:b8:78:5f:23:2e:72:64:e3:5e:ea:65:
41:4e:b8:25:e0:6e:ea:36:05:95:0b:34:86:09:f7:
ed:5e:02:80:07:ff:98:6b:c8:39:bd:c1:84:52:bb:
02:0f:37:c7:e9:9f:17:06:9e:00:ae:01:69:96:f7:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:58:18:2A:F8:99:9E:47:3B:4C:01:8F:59:6C:0E:E8:C6:FC:B9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.56.0/24
141.11.108.0/24
141.11.182.0/24
141.11.198.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:e1:9a:7f:90:cf:49:a5:2a:df:37:2d:54:df:57:23:17:bd:
75:98:34:ae:3d:75:7a:5a:4d:90:02:8c:61:90:d6:5f:eb:a9:
4d:54:67:e9:02:ec:fe:8a:07:21:3e:3c:a8:55:07:19:7c:96:
29:e0:4b:3d:24:36:a4:45:a0:49:9e:24:c5:a7:31:95:f9:63:
e4:e0:29:78:63:71:6d:3c:2e:24:ee:65:99:0e:64:a0:61:8e:
c1:bc:1e:f4:77:6d:a9:e8:61:0a:42:60:57:1b:57:a2:db:b7:
7e:c0:3d:b8:51:f9:99:37:90:be:ae:1d:49:ac:41:30:d5:46:
86:52:2c:61:74:9a:cb:95:b2:b5:b7:cc:32:be:94:a3:00:47:
fb:4d:c0:91:26:61:dc:23:21:0b:30:33:e4:5e:8b:06:66:3e:
f0:f9:68:ad:47:77:c9:72:28:be:3a:04:43:d4:e7:c9:9d:22:
09:3b:85:79:b9:de:13:2f:63:c4:67:00:41:2e:76:9f:95:78:
04:6d:40:76:bd:f5:76:15:3c:8a:9e:e3:f0:f9:09:4c:44:15:
eb:4e:e8:c3:92:94:74:db:b4:3e:f8:c8:cf:0c:af:8f:eb:1a:
66:5e:6d:19:3e:26:3b:98:66:82:b2:70:e7:77:c2:7d:87:27:
92:54:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:30 2026 by rpki-client