Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 1MlOenzBC5mSJSyvFHJhHTlzxcu/tg+s7t154EJYxVU=
Subject key identifier: BF:CD:EC:94:88:2B:D0:0F:78:F4:D3:CD:63:E4:14:3C:F7:3B:AB:9A
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 2D2BA2F9A6FC8E13C55C9483EB83DDC9C41EA644
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa
Signing time: Sun 08 Nov 2026 00:09:21 +0000
ROA not before: Sun 08 Nov 2026 00:04:21 +0000
ROA not after: Sun 07 Nov 2027 00:09:21 +0000
asID: 9304
IP address blocks: 79.176.6.0/24 maxlen: 24
79.176.18.0/24 maxlen: 24
79.176.50.0/23 maxlen: 24
79.180.0.0/23 maxlen: 24
79.180.87.0/24 maxlen: 24
79.180.92.0/23 maxlen: 24
79.182.26.0/24 maxlen: 24
79.182.28.0/24 maxlen: 24
79.182.42.0/23 maxlen: 24
79.182.61.0/24 maxlen: 24
79.182.63.0/24 maxlen: 24
79.182.180.0/24 maxlen: 24
79.182.198.0/24 maxlen: 24
79.182.203.0/24 maxlen: 24
79.182.227.0/24 maxlen: 24
79.183.0.0/24 maxlen: 24
79.183.13.0/24 maxlen: 24
79.183.16.0/24 maxlen: 24
79.183.30.0/24 maxlen: 24
79.183.40.0/24 maxlen: 24
79.183.60.0/24 maxlen: 24
79.183.96.0/24 maxlen: 24
79.183.101.0/24 maxlen: 24
79.183.183.0/24 maxlen: 24
79.183.197.0/24 maxlen: 24
79.183.229.0/24 maxlen: 24
79.183.252.0/24 maxlen: 24
109.64.2.0/23 maxlen: 24
109.65.6.0/24 maxlen: 24
109.65.11.0/24 maxlen: 24
109.65.21.0/24 maxlen: 24
109.65.31.0/24 maxlen: 24
109.65.58.0/24 maxlen: 24
109.65.67.0/24 maxlen: 24
109.65.70.0/23 maxlen: 24
109.65.91.0/24 maxlen: 24
109.66.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2b:a2:f9:a6:fc:8e:13:c5:5c:94:83:eb:83:dd:c9:c4:1e:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 8 00:04:21 2026 GMT
Not After : Nov 7 00:09:21 2027 GMT
Subject: CN=BFCDEC94882BD00F78F4D3CD63E4143CF73BAB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:b4:96:b2:ab:b8:ba:71:33:1d:e2:16:66:
12:52:5c:8f:bc:44:d2:ce:77:e4:d5:5b:b0:ff:a7:
d9:66:b5:ee:91:1b:c3:a9:49:e0:e0:0e:f6:9e:5a:
af:9b:8c:fe:3f:fe:c7:6d:8c:58:00:39:ab:4c:c6:
87:a0:c3:4d:f6:68:4d:29:f4:1a:a2:a2:52:85:c6:
fb:cc:2d:ac:bf:c6:fa:5c:ce:93:da:5c:54:5e:40:
01:2b:fa:a5:f4:77:01:48:e7:87:08:e1:f3:12:16:
c0:37:f2:6d:a4:05:11:0b:04:20:0f:68:4d:2b:b2:
a0:34:fc:f3:c5:3e:df:91:67:8d:0b:6d:f7:b6:5f:
42:dd:36:d8:cb:3d:7e:f5:fe:f2:58:89:09:f8:a6:
34:5d:00:57:0f:13:43:50:c8:db:05:9e:08:b9:4f:
50:71:de:20:a7:22:16:7d:7a:52:cf:a3:df:f4:a8:
b5:c6:26:56:d8:7f:69:f8:b4:6e:df:6c:4e:7b:6d:
80:77:8c:a0:1e:09:60:91:9e:a9:c4:33:21:eb:0e:
15:99:a7:bf:61:b9:2a:03:4e:d5:13:20:96:63:fe:
7d:bd:e7:33:d5:8e:ed:51:16:70:cd:f1:95:35:af:
25:73:35:d0:a8:7f:3c:4f:92:9f:b8:6c:db:34:74:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:EC:94:88:2B:D0:0F:78:F4:D3:CD:63:E4:14:3C:F7:3B:AB:9A
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.6.0/24
79.176.18.0/24
79.176.50.0/23
79.180.0.0/23
79.180.87.0/24
79.180.92.0/23
79.182.26.0/24
79.182.28.0/24
79.182.42.0/23
79.182.61.0/24
79.182.63.0/24
79.182.180.0/24
79.182.198.0/24
79.182.203.0/24
79.182.227.0/24
79.183.0.0/24
79.183.13.0/24
79.183.16.0/24
79.183.30.0/24
79.183.40.0/24
79.183.60.0/24
79.183.96.0/24
79.183.101.0/24
79.183.183.0/24
79.183.197.0/24
79.183.229.0/24
79.183.252.0/24
109.64.2.0/23
109.65.6.0/24
109.65.11.0/24
109.65.21.0/24
109.65.31.0/24
109.65.58.0/24
109.65.67.0/24
109.65.70.0/23
109.65.91.0/24
109.66.95.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c4:e8:40:b4:9b:87:5d:e8:4a:f6:b6:b9:ba:d6:b6:aa:ac:
5c:19:fb:ff:06:34:15:b6:d1:c9:3c:d1:81:6e:9f:15:68:fa:
47:93:1d:dd:ad:5d:51:17:70:00:1b:f1:63:90:5d:42:e2:59:
37:0b:93:43:71:04:2b:dd:44:e5:04:94:45:f0:37:8e:d4:a9:
2e:f6:c8:82:f8:49:0c:ca:e8:f2:15:a3:85:a0:57:37:e9:27:
d7:c1:51:7c:c5:1d:a6:b1:57:0b:2a:21:ad:44:45:2c:66:db:
c9:30:ed:31:80:34:de:f9:d2:cf:33:94:77:65:68:f6:4a:e1:
24:e2:be:86:9a:0a:65:a3:26:7a:a4:72:7c:2c:d3:36:c5:5a:
dc:3f:12:a7:ce:ff:77:c6:4f:1d:15:d5:ab:6d:12:9e:9c:62:
6c:5c:50:1e:86:4d:e6:21:c6:d4:dc:bf:8e:ad:09:d5:78:6c:
30:65:52:e0:26:a2:16:1c:1d:a0:84:8b:1b:09:80:45:79:ca:
2b:d1:0f:1c:2a:e1:03:7a:34:c2:ab:79:2f:d2:6f:7b:0f:26:
93:97:9f:82:ab:78:5c:28:6b:e8:3f:00:78:17:92:8d:73:60:
eb:26:4f:76:0a:d6:ec:57:89:14:b5:ff:30:f6:bc:de:cf:ac:
9d:18:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:14:25 2026 by rpki-client