Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: CA/MB8Kj/XsNTbYpjI0WI1Qkz+Ax2Ic0/gtVaRWUc0g=
Subject key identifier: 02:A9:1F:89:A3:FC:92:EE:34:71:F8:9A:3C:EE:2B:E5:00:8A:AE:C7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 622F2AF8963783288A086D61336B44F4206C0188
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Tue 28 Apr 2026 07:55:30 +0000
ROA not before: Tue 28 Apr 2026 07:50:30 +0000
ROA not after: Tue 27 Apr 2027 07:55:30 +0000
asID: 9304
IP address blocks: 141.11.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2f:2a:f8:96:37:83:28:8a:08:6d:61:33:6b:44:f4:20:6c:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 28 07:50:30 2026 GMT
Not After : Apr 27 07:55:30 2027 GMT
Subject: CN=02A91F89A3FC92EE3471F89A3CEE2BE5008AAEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:05:2a:33:b4:f1:33:da:1f:f2:ae:bf:b5:
1b:5e:79:f7:a7:63:96:ec:f2:27:7b:80:40:5a:f9:
76:37:41:9b:0a:63:cd:bc:96:82:42:34:87:9b:5c:
4f:6e:05:3f:67:f7:75:66:80:37:5e:0a:84:5b:57:
ec:27:05:37:82:83:22:1b:19:17:de:a7:12:cd:a5:
fe:6d:cc:a1:4e:63:00:c8:66:82:11:51:8b:ff:5a:
67:5f:b4:0d:55:e7:58:61:4f:6e:6a:e8:13:22:56:
23:6e:35:0a:82:16:3a:88:e4:4f:cf:fa:64:33:b4:
62:64:f6:44:c8:7a:2e:6f:32:68:02:33:77:06:b4:
07:4c:14:0e:8b:bd:07:81:91:86:2a:ad:f5:1a:28:
92:7f:57:bc:ca:34:ad:e0:1f:cb:21:bd:a3:a9:bf:
e2:29:1a:f2:68:74:cd:4f:f9:b0:ca:aa:a7:c4:a9:
b1:8d:97:87:7d:35:8c:b0:90:a0:d2:fe:70:9f:3b:
aa:20:72:98:ec:36:49:11:d2:e7:3b:d8:62:08:3b:
ce:15:02:5b:fc:6e:1b:53:c5:86:f7:72:48:fb:28:
9c:e7:b4:a8:e4:9a:10:f5:76:4a:7b:5c:22:45:a1:
79:77:ea:7f:e9:e7:a6:db:e5:5c:42:83:9c:e6:80:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:1F:89:A3:FC:92:EE:34:71:F8:9A:3C:EE:2B:E5:00:8A:AE:C7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
Signature Algorithm: sha256WithRSAEncryption
38:14:08:a3:af:5c:4a:3f:9f:83:6f:33:96:71:6d:01:0f:01:
e4:3c:ab:c2:75:1e:b0:30:dc:b3:47:16:f8:e5:43:b7:0e:ba:
23:70:83:71:4c:b9:b6:7d:04:31:88:f1:a0:92:99:78:d8:59:
1d:72:27:40:ee:e9:4a:85:da:d3:47:29:cf:65:e8:74:47:f8:
ce:6c:54:3b:1f:a4:6e:95:b0:c0:9d:40:55:b8:f2:3d:21:46:
be:3d:6c:a6:7e:65:2c:45:63:eb:08:b0:f5:08:3b:bb:41:51:
75:2d:e1:c4:50:6c:aa:20:71:12:76:d6:db:c6:db:34:be:41:
54:5b:7b:8a:25:09:e4:9a:01:f2:55:83:19:1e:4a:57:e5:f9:
43:98:73:23:1b:49:2a:3e:a1:05:04:47:7d:7e:9f:fa:2e:01:
2b:8b:66:75:8e:0b:66:ef:92:4a:06:94:df:31:39:eb:2a:49:
ef:dd:f0:cf:9d:80:66:dd:cc:e5:ac:bf:14:0e:4d:a7:58:ea:
20:9b:18:56:03:11:e1:1a:a9:a2:a4:fc:d5:5c:0c:2a:2b:6a:
30:6c:cc:bb:c9:50:e2:0a:01:9b:cc:0d:88:58:24:3a:41:ec:
e9:4f:26:fd:00:51:78:92:4d:83:df:1d:5a:1a:8f:8e:37:92:
bb:ae:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:09 2026 by rpki-client