Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: GRN5xFWazdwaVgYIbDsl56FAy14NpLdLhRKqmDTzKDg=
Subject key identifier: 97:34:A8:71:D9:5E:0B:51:95:15:E1:1C:08:10:BB:2C:3D:CE:07:86
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28BCC0F6768800D7EB4AF733F90ED50882CC5E69
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Thu 24 Sep 2026 08:58:19 +0000
ROA not before: Thu 24 Sep 2026 08:53:19 +0000
ROA not after: Thu 23 Sep 2027 08:58:19 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
140.150.224.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.183.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.208.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
145.223.6.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
146.103.59.0/24 maxlen: 24
147.79.16.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.105.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.212.0/24 maxlen: 24
162.141.4.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.67.0/24 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.98.0/24 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.105.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.152.0/24 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.177.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
167.148.190.0/24 maxlen: 24
167.148.206.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.42.0/24 maxlen: 24
168.222.48.0/24 maxlen: 24
168.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:c0:f6:76:88:00:d7:eb:4a:f7:33:f9:0e:d5:08:82:cc:5e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 24 08:53:19 2026 GMT
Not After : Sep 23 08:58:19 2027 GMT
Subject: CN=9734A871D95E0B519515E11C0810BB2C3DCE0786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:dc:90:12:bf:62:4b:01:8b:7d:94:22:fc:
6d:1d:b0:94:87:3d:61:0a:a4:e2:da:19:ac:bc:49:
e1:28:39:6a:62:e6:27:ca:ec:f1:da:70:40:6f:aa:
98:30:62:61:f7:33:36:a3:4b:6c:7d:7c:19:6c:18:
6e:68:06:98:c1:64:31:ba:22:c9:1c:91:3f:89:f3:
1b:b0:07:1a:de:a3:ca:29:b2:a1:47:4c:d1:80:37:
d1:ee:6e:69:a0:bf:9d:25:c7:b7:e2:dc:01:e6:3b:
9a:65:30:10:2d:b3:6c:3c:76:7b:92:6e:21:f2:0a:
bb:39:ee:f7:1e:d5:26:94:fb:7a:c5:6b:81:df:d8:
02:de:7a:6f:a7:b2:68:c5:c3:da:c3:a0:64:72:48:
93:8a:9b:26:28:11:3f:cf:db:d1:a3:2e:db:19:ee:
27:34:c6:8f:e3:d7:39:0b:c4:4d:24:31:b1:e9:8d:
0c:56:3e:73:cd:1d:3b:04:d7:7b:a0:2c:58:d1:98:
ee:ad:09:02:b3:18:c0:bf:cf:19:2d:98:85:96:fc:
de:18:1d:d2:0d:46:ed:62:ec:23:72:01:c1:4f:ed:
75:68:b5:dd:2e:ba:7f:8d:53:4c:81:cc:71:42:9f:
89:c2:f2:0e:94:ae:87:6a:e0:37:f9:2a:2b:f9:68:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:A8:71:D9:5E:0B:51:95:15:E1:1C:08:10:BB:2C:3D:CE:07:86
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.147.0/24
96.62.156.0/22
96.62.172.0/24
96.62.229.0/24
140.150.224.0/24
140.233.181.0/24
143.14.35.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.144.0/24
143.14.183.0/24
143.14.196.0/23
143.14.208.0/24
143.14.214.0/24
143.14.222.0/24
145.223.6.0/24
146.103.35.0/24
146.103.59.0/24
147.79.16.0/24
147.79.31.0/24
147.79.56.0/24
150.241.130.0/24
155.117.105.0/24
155.117.207.0/24
155.117.210.0/24
155.117.212.0/24
162.141.4.0/23
162.141.19.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.67.0/24
162.141.72.0/22
162.141.97.0-162.141.98.255
162.141.101.0/24
162.141.105.0/24
162.141.107.0/24
162.141.144.0-162.141.152.255
162.141.168.0/21
162.141.181.0/24
167.148.12.0/24
167.148.16.0/21
167.148.30.0/24
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.176.0/23
167.148.188.0/24
167.148.190.0/24
167.148.206.0/24
167.148.208.0/24
168.222.40.0/24
168.222.42.0/24
168.222.48.0/24
168.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8c:56:cc:01:7d:35:73:33:5b:20:0e:7e:13:d6:0c:61:ff:
65:1b:46:4a:e2:c4:77:5e:b8:78:10:47:40:19:f8:e0:a8:86:
80:48:92:6e:b8:8f:ad:ca:1b:33:ee:a9:c3:89:b3:1d:5f:b1:
6b:b1:70:d3:6e:a3:56:21:b7:9f:d7:28:bc:1c:4b:e6:5b:db:
db:d3:06:af:b3:22:d5:dd:34:e6:1a:bc:e6:62:5e:5b:ac:27:
37:81:b6:49:79:06:ee:9e:8e:09:ad:fc:66:fb:29:8d:20:9e:
2f:ae:fb:25:21:4b:4f:0c:b1:a5:94:d6:6e:00:52:ff:99:70:
dc:d9:56:9b:ac:9e:70:a0:72:e4:ad:0b:65:b0:7a:ea:e5:27:
44:ff:99:4a:5b:f7:6a:c7:6c:ec:20:ac:c6:7c:68:4e:af:61:
6b:26:51:1b:9e:db:14:cd:70:bc:d1:ef:b2:82:5f:d2:6b:db:
70:ec:da:20:28:13:9b:d3:69:bf:3d:5a:e6:01:f6:f2:bf:ed:
02:db:d0:38:0a:97:89:8c:a6:39:d0:69:47:22:2f:44:96:59:
e8:1d:15:cc:4d:52:7e:16:3e:12:3a:7b:10:4a:da:83:c6:a5:
2f:8d:4e:42:74:a3:87:c9:bd:a9:a0:ef:4b:53:74:bd:6e:ef:
27:4b:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:50:23 2026 by rpki-client