Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: tkDrppbW2m9uU+cSFUgwpB1BSUfZcqfYL0JFK5nCJ70=
Subject key identifier: F3:49:05:42:30:48:79:17:67:C4:00:E6:AA:C7:A6:4E:42:9B:ED:2D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 66E0F2FFB57FCF51FF086B209D049DFF65907794
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Wed 02 Sep 2026 04:20:14 +0000
ROA not before: Wed 02 Sep 2026 04:15:14 +0000
ROA not after: Wed 01 Sep 2027 04:20:14 +0000
asID: 9304
IP address blocks: 143.20.35.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
143.20.108.0/22 maxlen: 24
143.20.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e0:f2:ff:b5:7f:cf:51:ff:08:6b:20:9d:04:9d:ff:65:90:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 04:15:14 2026 GMT
Not After : Sep 1 04:20:14 2027 GMT
Subject: CN=F34905423048791767C400E6AAC7A64E429BED2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:bf:db:04:00:88:e7:e8:9f:23:bf:20:db:
99:6d:07:14:99:67:d3:cc:f7:cd:79:3a:08:bd:3f:
8a:87:3b:29:e9:d2:0a:67:04:32:67:ac:a7:97:e6:
b3:e2:40:62:64:a6:e2:5a:98:85:06:23:fb:bb:e1:
a6:76:9a:6c:ca:21:d5:5c:7b:51:60:67:f2:35:6d:
fa:c0:43:7f:a3:5f:3c:16:3e:a3:57:19:af:26:d8:
13:7f:f1:22:17:8c:48:aa:33:cb:d5:97:39:8a:24:
5e:1b:54:ad:8f:b4:3e:8e:69:c8:4c:8f:0d:90:ca:
46:b0:4b:9b:30:55:b3:be:0f:12:eb:a4:c3:b7:a4:
df:59:81:ce:e8:3b:50:20:8f:3a:2b:8b:83:51:23:
5d:cf:bc:0a:5b:fc:72:b0:46:0f:6f:ca:36:ea:1d:
d2:76:25:db:e4:66:6b:ec:68:b9:a5:9b:4b:d1:5e:
40:bb:15:d7:55:e5:f6:6c:28:28:c3:a0:60:0d:72:
a4:f0:da:b5:dc:69:db:3b:a3:26:81:70:b0:12:5e:
e7:5e:35:da:26:96:a4:ce:67:7f:df:a4:95:f0:03:
54:cb:85:04:c7:cf:95:f0:42:14:95:2a:fa:59:f4:
38:11:8d:e4:5f:b2:82:70:43:94:66:2f:b4:0b:47:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:05:42:30:48:79:17:67:C4:00:E6:AA:C7:A6:4E:42:9B:ED:2D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.35.0/24
143.20.84.0/24
143.20.108.0/22
143.20.207.0/24
Signature Algorithm: sha256WithRSAEncryption
74:eb:1d:6c:82:b0:83:b4:aa:3d:19:b2:17:33:1a:ed:46:7d:
27:e6:a6:09:c2:d1:af:19:06:1d:95:0d:da:d5:2b:57:41:fa:
46:30:7f:24:34:a2:bb:d0:d6:87:ea:ea:9e:61:f4:c6:09:1f:
02:39:a1:f2:13:c6:52:01:48:a7:25:35:4f:ea:b0:da:96:62:
75:32:6c:af:8f:9c:c9:5c:c2:18:a1:bd:57:31:a9:33:ad:83:
99:04:64:60:50:a7:2a:7a:94:13:4a:d7:de:fe:f2:15:4e:32:
fb:e9:76:f5:8b:c7:cc:2d:50:69:51:bb:70:c0:71:04:76:cc:
b0:c2:a6:f9:e8:78:6c:51:f6:76:6a:e6:57:64:ce:93:59:63:
0e:17:08:21:c0:ed:13:5d:1b:f7:1f:fa:e8:ad:3c:1d:2c:c8:
84:08:25:cb:7b:63:a7:99:dd:81:6b:ff:82:c6:03:a2:34:f4:
df:1f:fa:b6:d7:b3:8d:27:ca:0a:16:29:34:9c:9a:99:49:56:
1e:0b:b6:b1:dd:ba:3c:ef:e2:f9:b2:c9:65:f1:56:0a:95:b8:
0d:52:a2:4d:4a:81:bc:22:98:b9:17:ce:88:80:65:3a:3b:0e:
97:11:ff:fe:e1:1d:12:1a:f6:01:80:7a:d8:93:40:72:59:ef:
24:46:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:34:32 2026 by rpki-client