Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 0XcweXqn8lJRVZfZOPOV0P1X387xyC1Dp8b/+hZ2Ofo=
Subject key identifier: C3:7D:34:E3:AA:BD:37:72:9C:76:36:AF:85:43:28:07:EE:C9:11:54
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4FF2675C943DA025BBC6F040CEB7EEBD29EBC3FC
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
Signing time: Sun 08 Nov 2026 00:07:18 +0000
ROA not before: Sun 08 Nov 2026 00:02:18 +0000
ROA not after: Sun 07 Nov 2027 00:07:18 +0000
asID: 9304
IP address blocks: 82.139.205.0/24 maxlen: 24
212.60.146.0/24 maxlen: 24
212.60.147.0/24 maxlen: 24
212.60.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 19:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f2:67:5c:94:3d:a0:25:bb:c6:f0:40:ce:b7:ee:bd:29:eb:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Nov 8 00:02:18 2026 GMT
Not After : Nov 7 00:07:18 2027 GMT
Subject: CN=C37D34E3AABD37729C7636AF85432807EEC91154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:8b:a2:7b:da:01:30:0f:ee:ac:ee:6f:ea:
1a:51:2b:19:d4:92:ef:dd:91:b5:ae:6f:9c:d5:60:
e8:c9:53:2d:6b:3b:98:38:6a:81:4d:31:55:46:1d:
42:14:23:88:67:20:a4:68:b9:52:17:9b:50:1d:81:
45:ad:8b:3f:b1:ae:7b:8c:18:8f:37:d0:18:e0:3c:
6a:5c:d0:1a:76:41:2a:c4:2c:56:7c:66:fe:2e:71:
9b:ae:e2:90:a5:52:e6:77:7c:60:5f:96:9b:21:6d:
1a:4d:d2:fc:94:65:9e:e4:7e:42:e3:c0:11:d5:4b:
c8:4a:52:5f:86:ec:ee:c6:cf:7b:89:e4:46:75:99:
b1:15:05:82:f9:18:2d:a0:20:b3:1e:cf:35:1f:84:
1c:3b:06:55:0f:2b:99:df:6c:04:8d:34:1b:78:57:
3c:bf:c3:5a:bd:a4:8c:b5:d2:07:d8:bd:ea:2b:ba:
f3:93:cd:c1:74:ef:38:e4:6b:81:8c:db:21:4b:b5:
70:a9:f7:b2:dd:25:46:19:62:66:a0:bf:14:56:b9:
75:6e:e3:82:a7:9b:34:af:91:89:10:64:47:f4:ab:
77:22:e9:99:66:0b:24:34:29:25:05:d1:dc:36:d9:
5c:a1:a2:4a:29:b0:f7:a3:e2:96:1a:51:cc:a7:55:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:34:E3:AA:BD:37:72:9C:76:36:AF:85:43:28:07:EE:C9:11:54
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
212.60.146.0/23
212.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5f:1b:19:4b:73:9b:e0:e8:79:91:70:85:2e:9e:01:44:b5:
ef:54:7a:9e:fe:41:1f:f3:58:1e:47:65:f4:54:56:35:12:0c:
cd:1e:38:3c:da:2b:18:c1:20:5a:67:f8:e2:36:56:82:2d:fb:
2c:70:65:0f:5d:71:23:ee:63:05:15:9e:0b:4d:62:b4:af:a7:
fe:ac:75:e6:34:80:b5:66:2b:5a:bd:cc:1c:84:ea:76:15:d1:
71:fe:21:d8:8a:5c:cf:ef:22:de:2e:98:ae:81:02:63:d4:0b:
87:e6:04:b1:27:9b:ce:82:2e:d9:fb:a2:04:fc:3b:ed:b6:13:
55:8f:2c:37:56:06:e1:0f:e3:15:cc:ba:58:d3:e1:28:1e:ed:
92:b6:56:83:3e:bf:b3:4e:26:96:43:dc:64:c0:21:56:b4:22:
8e:79:2b:ff:2f:0a:68:c2:39:5e:4d:0d:12:e8:42:36:34:26:
0a:68:17:c4:1a:56:c4:62:bb:d3:fc:ad:a1:89:06:29:41:1b:
69:1a:c2:39:16:6d:ae:0c:1e:d7:74:e9:be:9e:a1:4d:5a:88:
80:e2:37:6f:0f:bc:50:3a:68:1b:91:57:b2:5d:b4:a1:42:c2:
11:ad:5b:1c:8f:14:9b:d6:fb:77:a7:5b:bd:f9:1d:2a:9f:ec:
7d:b0:43:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 12 01:34:19 2026 by rpki-client