Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: fevqQv/k2OIMrfUOBEbAjvT4515+ZeXejEUrbYlVrXc=
Subject key identifier: F3:22:CD:F2:98:3E:1E:A2:5C:61:60:64:77:4D:99:40:D9:CD:6F:62
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5AF58CAAAD87CB3932309066D5FD7ADD6D0DBBBA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Thu 23 Jul 2026 12:20:28 +0000
ROA not before: Thu 23 Jul 2026 12:15:28 +0000
ROA not after: Thu 22 Jul 2027 12:20:28 +0000
asID: 9304
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.59.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.229.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.47.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.55.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
143.14.94.0/24 maxlen: 24
143.14.120.0/24 maxlen: 24
143.14.144.0/24 maxlen: 24
143.14.196.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
143.14.214.0/24 maxlen: 24
143.14.222.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
147.79.8.0/23 maxlen: 24
150.241.130.0/24 maxlen: 24
155.117.4.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.19.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.101.0/24 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.181.0/24 maxlen: 24
162.141.184.0/21 maxlen: 24
167.148.12.0/24 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.30.0/24 maxlen: 24
167.148.32.0/24 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.72.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.99.0/24 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.129.0/24 maxlen: 24
167.148.130.0/23 maxlen: 23
167.148.142.0/24 maxlen: 24
167.148.176.0/24 maxlen: 24
167.148.208.0/24 maxlen: 24
168.222.38.0/24 maxlen: 24
168.222.39.0/24 maxlen: 24
168.222.40.0/24 maxlen: 24
168.222.86.0/24 maxlen: 24
168.222.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f5:8c:aa:ad:87:cb:39:32:30:90:66:d5:fd:7a:dd:6d:0d:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 12:15:28 2026 GMT
Not After : Jul 22 12:20:28 2027 GMT
Subject: CN=F322CDF2983E1EA25C616064774D9940D9CD6F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:ea:a4:cf:c7:f9:72:c9:c3:22:85:68:77:
1b:54:68:25:8a:e4:60:70:3c:5a:15:bf:08:72:0d:
a8:53:cb:46:b0:3a:f9:3c:14:cc:8f:29:86:d5:73:
48:df:61:3d:67:68:e0:f8:0f:d6:05:1b:11:d1:0a:
11:a2:9c:77:6d:23:af:66:98:a5:e3:cc:0c:18:33:
fb:41:41:0a:0a:95:08:27:f2:a8:f7:ca:09:e2:98:
8b:59:f7:52:25:9d:d8:b7:16:b6:8d:41:d8:4f:a7:
e9:95:24:42:39:5d:65:45:57:27:99:2e:b4:a9:db:
a2:03:61:a5:7e:f3:7e:48:5d:6e:81:f2:c3:d6:9d:
21:89:92:42:2b:4c:31:7d:7f:e8:71:fb:83:73:96:
ab:42:b3:d3:95:9b:d5:48:9b:1b:36:cd:d8:61:5a:
b6:7a:e1:32:cc:98:66:fd:8e:d2:cb:f2:c5:4f:46:
bb:12:ea:d7:8f:ef:10:1d:e3:0d:96:35:2c:1e:c0:
01:c3:13:7a:3a:34:a6:11:cb:30:8a:c4:f8:fd:10:
06:b4:99:88:1c:9a:87:39:dc:7e:c6:51:16:36:6b:
20:ea:f2:98:29:a3:e9:d5:77:a1:74:f9:2d:7e:67:
e7:d6:37:20:69:5e:11:fa:ae:11:37:c6:2f:d2:89:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:CD:F2:98:3E:1E:A2:5C:61:60:64:77:4D:99:40:D9:CD:6F:62
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.59.0/24
96.62.147.0/24
96.62.156.0/22
96.62.172.0/24
96.62.229.0/24
143.14.35.0/24
143.14.47.0/24
143.14.51.0/24
143.14.55.0/24
143.14.87.0/24
143.14.94.0/24
143.14.120.0/24
143.14.144.0/24
143.14.196.0/23
143.14.214.0/24
143.14.222.0/24
146.103.35.0/24
147.79.8.0/23
150.241.130.0/24
155.117.4.0/24
162.141.13.0/24
162.141.19.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
162.141.101.0/24
162.141.144.0/21
162.141.168.0/21
162.141.181.0/24
162.141.184.0/21
167.148.12.0/24
167.148.16.0/21
167.148.30.0/24
167.148.32.0/24
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.72.0/24
167.148.76.0/22
167.148.88.0/21
167.148.99.0/24
167.148.108.0/22
167.148.129.0-167.148.131.255
167.148.142.0/24
167.148.176.0/24
167.148.208.0/24
168.222.38.0-168.222.40.255
168.222.86.0/24
168.222.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:33:ee:04:e9:0e:ca:bc:43:84:60:bc:fe:fa:34:53:ea:b4:
82:45:0a:3d:81:8f:2c:06:86:92:8b:ce:42:b9:3c:1c:d5:80:
38:6e:21:ff:ee:0f:91:b1:b3:20:07:89:2c:6f:6d:b5:31:ba:
d1:5d:82:71:9c:af:bd:df:55:be:f9:b6:e5:a3:b0:89:73:e3:
b7:8e:a3:a4:57:54:eb:e7:c8:79:23:e2:da:96:66:8b:8d:ef:
34:bc:f2:63:66:99:c3:87:65:27:b4:48:81:45:a9:3d:99:a6:
b0:89:f1:68:54:ab:7b:38:fc:9e:02:49:c1:ac:15:3a:bf:dd:
3e:7f:24:9a:06:45:92:ab:83:bd:e9:4d:f7:3e:1d:86:3f:73:
64:36:11:0e:e1:22:f4:21:a7:fa:9f:77:15:f3:55:74:b8:b3:
1a:6a:73:dc:27:04:c9:60:6a:bc:5b:54:f2:90:c9:37:39:47:
82:ba:32:21:56:86:a6:c5:7f:a2:4d:4b:3d:56:64:38:d8:07:
9f:e6:0f:bf:e3:9d:fc:00:92:a0:7d:e8:2f:d1:90:1d:a8:69:
b8:65:30:a4:1a:90:79:2f:2b:48:99:63:ce:9b:4e:8d:e0:bc:
3e:35:40:6e:71:28:88:1f:cd:d8:7d:2f:40:36:ca:ca:7f:16:
89:6f:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:54:37 2026 by rpki-client