Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: wMFnbHS2hKy475SrJMMeLdltOAZGpnfivAVcz9jhySw=
Subject key identifier: 6A:AF:6C:AE:EA:C7:F1:8D:30:CF:2B:37:BE:3C:54:68:6A:BD:1E:A4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D618FB5209C16EEE6567E90177900A2CCA90E8A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Tue 21 Jul 2026 07:32:39 +0000
ROA not before: Tue 21 Jul 2026 07:27:39 +0000
ROA not after: Tue 20 Jul 2027 07:32:39 +0000
asID: 9304
IP address blocks: 82.22.14.0/24 maxlen: 24
82.23.144.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.0.0/22 maxlen: 23
82.24.108.0/24 maxlen: 24
82.26.115.0/24 maxlen: 24
82.26.118.0/24 maxlen: 24
82.26.125.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
82.38.38.0/23 maxlen: 24
82.38.76.0/22 maxlen: 24
82.39.194.0/23 maxlen: 24
82.40.52.0/24 maxlen: 24
82.40.53.0/24 maxlen: 24
82.40.54.0/24 maxlen: 24
82.41.128.0/23 maxlen: 24
82.47.23.0/24 maxlen: 24
82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
82.47.96.0/24 maxlen: 24
82.47.100.0/24 maxlen: 24
82.47.103.0/24 maxlen: 24
82.47.123.0/24 maxlen: 24
84.75.151.0/24 maxlen: 24
178.83.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:61:8f:b5:20:9c:16:ee:e6:56:7e:90:17:79:00:a2:cc:a9:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 07:27:39 2026 GMT
Not After : Jul 20 07:32:39 2027 GMT
Subject: CN=6AAF6CAEEAC7F18D30CF2B37BE3C54686ABD1EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:35:aa:f5:86:e5:fc:15:b2:2a:ac:65:15:
89:cf:72:eb:84:ed:da:30:6d:23:e6:b7:b3:5c:f2:
7c:10:45:c3:99:d7:f8:56:51:04:ca:fa:73:60:81:
36:00:4f:86:28:e5:77:83:0b:59:26:5e:a2:d7:2f:
8e:d9:ee:37:cc:2d:1f:97:3d:3c:70:6f:74:9f:94:
45:0b:82:83:e0:0b:d5:fc:5a:f3:a4:e4:ba:ea:d7:
30:87:ca:0f:61:a6:b9:04:08:a9:c1:18:26:f3:f1:
73:a5:c0:6f:9b:0a:3c:f9:91:a7:8f:c1:5a:08:74:
73:54:8a:1b:ca:d9:d5:e9:09:19:72:ff:4b:ab:f5:
21:d9:ae:d4:1c:38:49:8a:71:ab:f7:95:30:c6:f9:
5a:e3:ec:aa:4f:7a:88:90:91:ea:0e:7f:60:c7:ea:
a9:09:95:21:e5:8e:06:0b:85:e7:8d:52:1e:90:8b:
f4:23:39:9e:9d:e6:e7:51:aa:e0:43:a3:5a:48:76:
03:9f:97:07:3c:dd:7a:91:7b:fb:c2:9b:1d:03:73:
11:8b:63:f7:6b:2f:10:ab:6e:d2:ff:1f:d2:c6:b0:
9b:15:c9:dd:3d:32:bd:9e:7f:9a:dd:9d:8d:aa:2a:
25:62:2a:62:61:49:2a:e7:bb:56:92:c4:6d:2a:d5:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:6C:AE:EA:C7:F1:8D:30:CF:2B:37:BE:3C:54:68:6A:BD:1E:A4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.14.0/24
82.23.144.0/24
82.23.147.0/24
82.24.0.0/22
82.24.108.0/24
82.26.115.0/24
82.26.118.0/24
82.26.125.0/24
82.26.130.0/24
82.38.38.0/23
82.38.76.0/22
82.39.194.0/23
82.40.52.0-82.40.54.255
82.41.128.0/23
82.47.23.0/24
82.47.52.0/24
82.47.56.0/24
82.47.96.0/24
82.47.100.0/24
82.47.103.0/24
82.47.123.0/24
84.75.151.0/24
178.83.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:c5:ec:28:8e:56:8a:61:76:c3:2f:35:cc:1f:2c:cb:f9:7e:
57:16:8d:32:07:d4:f0:c5:03:af:c4:8d:0a:20:1d:5b:70:ba:
9a:50:55:98:c7:a9:06:8d:56:48:2d:bf:24:a0:f3:12:b4:b0:
cc:c2:23:b9:39:28:be:43:a0:33:25:ca:76:dd:2b:51:8c:1a:
84:61:18:82:27:f4:23:48:01:72:75:d7:4e:8e:4a:63:3e:70:
5d:c4:a7:0b:22:ed:c1:24:9f:f2:37:f7:9c:66:0d:94:72:3c:
8c:21:2f:68:e4:08:9c:28:13:ef:ba:0c:44:c1:ae:34:e0:20:
3f:c6:d2:e9:0d:80:51:b4:70:c9:23:d9:0b:2c:22:32:a4:a7:
04:f9:20:8b:7a:80:a1:8e:7d:24:19:f3:fd:06:24:dd:bc:91:
30:ea:c2:4b:bd:2f:0c:42:b6:25:db:31:7e:9f:d3:af:c0:d1:
71:c2:1d:ba:78:71:86:2c:df:e3:46:0e:e6:69:7a:2f:35:16:
af:b6:c7:7b:cf:34:f1:1a:c1:de:3c:2f:41:9f:4c:e4:a2:9e:
bf:b3:63:1e:6c:97:3c:91:75:61:af:bb:4b:9e:04:ef:f0:1b:
db:9a:4a:bc:24:0e:eb:76:3b:28:91:1f:41:37:06:b0:ed:de:
b4:1c:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:10 2026 by rpki-client