$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: JSXuGIqxyOFq8gHdxw3FiC9Hxulo/MCxO7epkF8SAq8= Subject key identifier: 33:D8:27:D1:9C:3C:DB:24:03:22:FA:56:42:BD:3E:E7:4C:3F:E3:17 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4C0A440EBB38865EAC378C4EA4793B9396769DA0 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa Signing time: Tue 22 Sep 2026 13:25:36 +0000 ROA not before: Tue 22 Sep 2026 13:20:36 +0000 ROA not after: Tue 21 Sep 2027 13:25:36 +0000 asID: 9304 IP address blocks: 179.69.64.0/23 maxlen: 24 200.149.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0a:44:0e:bb:38:86:5e:ac:37:8c:4e:a4:79:3b:93:96:76:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 13:20:36 2026 GMT Not After : Sep 21 13:25:36 2027 GMT Subject: CN=33D827D19C3CDB240322FA5642BD3EE74C3FE317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:d4:35:fe:a7:87:31:35:84:1e:2c:bf:e8: 64:a3:a2:dd:91:80:f7:b5:77:0a:ce:fe:67:3f:39: ea:21:32:74:92:a3:d8:d2:03:aa:c5:07:f4:bd:b9: af:48:d3:c2:5f:6c:62:62:f3:e1:f8:30:34:05:12: d6:10:f6:04:4e:c5:0f:53:92:77:49:2b:ff:ef:8d: 08:c8:a1:36:3f:02:7d:2e:7a:e9:0b:d1:e2:ed:86: de:ea:80:bd:4b:48:78:3b:ba:a6:e9:33:22:4a:41: 6e:cc:9e:51:f9:41:34:be:5b:b6:94:9d:c2:07:42: df:34:b1:32:36:ef:65:74:da:3c:20:3c:41:08:e0: 70:97:89:05:43:05:0b:1e:0c:e1:f2:53:86:d8:bc: 13:dc:65:68:36:57:fa:bb:83:21:b4:4e:20:a5:ca: da:51:9a:66:e4:00:4b:c6:9c:48:9b:a2:a9:db:46: 80:1f:23:60:c4:98:a8:d8:1e:62:23:f0:18:6c:70: 60:e7:b5:36:6f:cf:52:0b:b8:0b:44:77:40:5b:be: fa:35:db:ab:2e:44:ae:ff:bd:b2:27:db:2e:74:f3: af:2f:b3:1d:be:9a:47:1a:56:9c:9c:3f:ea:3d:42: 62:e6:3c:3c:6e:c4:37:ab:40:1c:62:27:af:f3:06: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:27:D1:9C:3C:DB:24:03:22:FA:56:42:BD:3E:E7:4C:3F:E3:17 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.69.64.0/23 200.149.176.0/21 Signature Algorithm: sha256WithRSAEncryption 04:c2:75:96:1a:ae:2f:d1:16:f4:71:ef:e5:7e:0a:16:a9:07: 46:c5:4f:d6:f2:a2:cf:d5:fc:13:f1:2c:cf:8a:e3:72:64:c2: fd:ae:50:27:18:06:9b:6e:af:72:ad:87:3b:85:72:f9:b7:41: 55:48:47:dc:7d:66:19:26:57:46:e2:7a:8c:1e:70:f5:35:2a: 4e:05:bf:28:ef:7b:c9:87:c8:e5:e6:49:ce:cc:d1:53:f4:c9: 25:77:1a:c7:36:46:49:83:d3:8e:08:aa:0b:7d:2d:3d:81:34: 51:e4:67:67:25:db:6e:45:57:48:81:2e:55:47:59:0e:10:af: f3:2b:2e:42:70:9c:69:69:d0:0d:81:33:5d:3e:bb:be:1f:d1: 72:11:66:3d:8a:3b:e7:9c:44:a8:8b:ef:b2:cb:01:4b:50:33: b1:25:60:a5:26:28:ed:3b:4f:20:74:64:7c:90:2b:4a:b6:45: 83:12:9b:e1:81:84:c7:38:4e:3f:e9:d2:1a:38:b2:de:89:61: b8:13:22:1b:32:12:0b:06:da:6b:91:af:37:64:d3:d4:20:4c: 02:12:df:bb:0c:db:62:66:e0:e1:0e:16:04:92:54:02:ac:dc: be:58:45:f3:4e:15:51:db:a6:f1:df:fd:10:26:3e:4c:74:4d: d9:8f:ef:8d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUTApEDrs4hl6sN4xOpHk7k5Z2naAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIxMzIwMzZaFw0yNzA5MjExMzI1MzZaMDMxMTAvBgNV BAMTKDMzRDgyN0QxOUMzQ0RCMjQwMzIyRkE1NjQyQkQzRUU3NEMzRkUzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FtQ1/qeHMTWEHiy/6GSjot2R gPe1dwrO/mc/OeohMnSSo9jSA6rFB/S9ua9I08JfbGJi8+H4MDQFEtYQ9gROxQ9T kndJK//vjQjIoTY/An0ueukL0eLtht7qgL1LSHg7uqbpMyJKQW7MnlH5QTS+W7aU ncIHQt80sTI272V02jwgPEEI4HCXiQVDBQseDOHyU4bYvBPcZWg2V/q7gyG0TiCl ytpRmmbkAEvGnEiboqnbRoAfI2DEmKjYHmIj8BhscGDntTZvz1ILuAtEd0Bbvvo1 26suRK7/vbIn2y50868vsx2+mkcaVpycP+o9QmLmPDxuxDerQBxiJ6/zBnKZAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUM9gn0Zw82yQDIvpWQr0+50w/4xcwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBs0VAAwQDyJWwMA0GCSqGSIb3DQEBCwUAA4IBAQAEwnWWGq4v0Rb0ce/l fgoWqQdGxU/W8qLP1fwT8SzPiuNyZML9rlAnGAabbq9yrYc7hXL5t0FVSEfcfWYZ JldG4nqMHnD1NSpOBb8o73vJh8jl5knOzNFT9MkldxrHNkZJg9OOCKoLfS09gTRR 5GdnJdtuRVdIgS5VR1kOEK/zKy5CcJxpadANgTNdPru+H9FyEWY9ijvnnESoi++y ywFLUDOxJWClJijtO08gdGR8kCtKtkWDEpvhgYTHOE4/6dIaOLLeiWG4EyIbMhIL Btprka83ZNPUIEwCEt+7DNtiZuDhDhYEklQCrNy+WEXzThVR26bx3/0QJj5MdE3Z j++N -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:56 2026 by rpki-client