Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: mm+Ls0l3s88xHd7kIBgAI4qeBlI8aZmXiFwHVBi8fbI=
Subject key identifier: C2:1E:3C:9F:66:D4:BD:53:38:A4:ED:AD:4A:C7:D1:53:65:FF:D8:90
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 15B7C11681A633C94011F34E666BA381576F90DE
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Tue 23 Sep 2025 05:42:02 +0000
ROA not before: Tue 23 Sep 2025 05:37:02 +0000
ROA not after: Tue 22 Sep 2026 05:42:02 +0000
asID: 9304
IP address blocks: 91.206.2.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b7:c1:16:81:a6:33:c9:40:11:f3:4e:66:6b:a3:81:57:6f:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 23 05:37:02 2025 GMT
Not After : Sep 22 05:42:02 2026 GMT
Subject: CN=C21E3C9F66D4BD5338A4EDAD4AC7D15365FFD890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:27:20:da:d1:d2:6e:e9:c7:01:d2:a5:1e:
f9:cd:7a:8d:88:bd:a6:28:bf:b7:06:4b:5e:08:db:
1f:39:97:65:09:bb:30:c5:b2:7b:c3:d4:26:24:39:
ec:6b:af:53:57:64:e2:b0:c9:6a:cf:7b:1d:ad:5e:
5c:42:a5:cd:6f:40:91:63:c2:f6:14:af:10:0d:4c:
5b:e9:84:92:57:21:03:ae:53:73:c2:e8:c1:95:dc:
06:ac:92:00:b6:75:28:5d:89:5f:2f:45:a5:0a:c3:
48:5e:45:f9:27:f2:90:76:c3:ff:00:6b:8b:fa:dd:
d2:6b:65:eb:b8:bc:46:ef:96:3f:ba:ec:6b:d1:25:
8e:42:ae:c9:de:bb:88:42:3d:65:00:34:e1:a7:1f:
8d:b6:9a:b6:c7:4e:9d:64:af:fd:bd:c5:e6:28:48:
91:e2:fd:51:26:4e:02:8f:f8:d2:3f:97:c9:9f:12:
e6:6b:09:86:09:60:bb:6d:80:4b:19:43:5e:5f:7d:
01:c1:96:a6:16:9f:7f:d4:38:89:fd:50:2e:51:30:
fa:d1:72:93:55:23:7c:a4:39:9d:36:af:4b:3a:0c:
83:be:de:e9:db:60:25:5d:21:2c:05:67:44:5f:7b:
eb:9c:49:19:c2:a0:df:af:95:2c:36:ad:82:63:aa:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:3C:9F:66:D4:BD:53:38:A4:ED:AD:4A:C7:D1:53:65:FF:D8:90
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
193.151.181.0/24
194.5.147.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:30:ff:9d:10:4c:99:bb:c6:99:62:86:8b:47:42:2a:d4:b8:
5c:7a:56:c3:3a:1a:76:10:fd:b4:c6:48:aa:10:06:18:10:ee:
c3:d5:09:75:ea:00:fe:31:b6:1e:d2:69:e3:59:d4:ba:c3:25:
65:38:4d:b4:1a:c9:31:39:a2:81:d7:2d:c4:c9:ba:93:8c:e7:
6e:07:2e:84:04:72:2a:8b:5c:c5:95:df:10:9b:54:ba:93:de:
24:f4:e7:0e:82:f1:a3:d9:f9:eb:e0:a4:b5:15:d3:b6:2f:85:
77:73:f1:f3:03:d5:ef:90:ae:0a:79:0c:60:e0:1a:bc:5e:f1:
ae:7e:ae:48:ad:c4:14:48:e8:c7:f4:f5:f9:44:30:cc:71:6c:
9c:b7:fc:50:aa:9e:a1:dc:98:68:3e:f8:f5:5e:7a:d5:c5:54:
2b:07:67:15:d9:f1:28:15:e5:74:fa:25:fa:3e:07:15:a6:51:
8e:53:2f:18:de:a3:a0:7a:f0:38:bd:74:92:61:8f:03:6f:0c:
3a:3d:1d:3c:12:cb:79:99:30:ee:0f:1a:4b:ea:bc:c5:b1:58:
ef:9d:51:49:a3:f2:e6:d2:73:0d:05:12:f2:10:d0:2b:5e:06:
33:e9:96:3c:5f:00:91:04:5d:d1:14:42:99:7f:db:ae:b8:45:
b3:62:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:48 2025 by rpki-client