Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: dQ/GA/d8j8NjkBlU1tGibzvY02qFyDE4iuBNnRpLzSw=
Subject key identifier: 49:5E:24:7C:8F:D6:38:FA:63:2A:EB:AE:E7:21:7A:27:20:90:11:DE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4E3FF8266812F77369B1C1279E7894176D821BD3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Sun 19 Oct 2025 12:54:06 +0000
ROA not before: Sun 19 Oct 2025 12:49:06 +0000
ROA not after: Sun 18 Oct 2026 12:54:06 +0000
asID: 9304
IP address blocks: 141.11.18.0/24 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.48.0/24 maxlen: 24
141.11.57.0/24 maxlen: 24
141.11.105.0/24 maxlen: 24
141.11.144.0/24 maxlen: 24
141.11.172.0/24 maxlen: 24
141.11.180.0/24 maxlen: 24
141.11.196.0/24 maxlen: 24
141.11.197.0/24 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.236.0/24 maxlen: 24
141.11.237.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
141.11.245.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3f:f8:26:68:12:f7:73:69:b1:c1:27:9e:78:94:17:6d:82:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 19 12:49:06 2025 GMT
Not After : Oct 18 12:54:06 2026 GMT
Subject: CN=495E247C8FD638FA632AEBAEE7217A27209011DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:62:7d:0c:de:24:63:4a:ed:2c:36:fd:12:
55:ec:05:1e:24:d6:26:d9:d3:64:87:38:e7:0d:ec:
e4:4e:6f:32:36:b1:be:0d:cf:48:0c:82:f1:fc:1c:
24:aa:06:74:aa:03:b7:5a:20:5c:93:2e:80:e0:ba:
1c:64:69:40:2b:2f:96:b5:df:40:99:68:ca:c9:12:
db:6d:10:e5:10:b3:92:73:47:34:c0:fc:23:7b:92:
dd:3f:c8:a3:bf:fc:4b:7e:45:fa:89:2c:e1:68:bc:
ad:28:8a:2b:69:7e:86:6c:f1:42:f2:ea:1e:d2:7c:
61:67:14:3c:7f:b3:1b:53:eb:d7:47:3b:89:ed:94:
92:ba:eb:65:a3:b0:60:6f:56:72:77:0c:0d:ee:d5:
58:87:c4:77:ee:05:8a:a9:53:1e:87:5c:45:20:15:
54:7c:8c:ed:ea:04:85:4d:5f:c8:2f:09:06:93:15:
99:e4:d1:73:23:8a:37:fe:98:5a:cc:a9:0f:1e:5d:
62:eb:c6:2e:f4:ef:b5:f8:1b:5f:09:3f:8d:06:9a:
6f:00:01:90:0d:bc:b8:99:b2:88:18:48:81:07:03:
21:54:81:16:0a:a6:11:0d:e1:70:d5:d9:8b:8c:ab:
68:7b:ce:80:f5:0d:42:8a:1b:5c:9d:03:d7:d1:1c:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:24:7C:8F:D6:38:FA:63:2A:EB:AE:E7:21:7A:27:20:90:11:DE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.18.0/24
141.11.39.0-141.11.40.255
141.11.48.0/24
141.11.57.0/24
141.11.105.0/24
141.11.144.0/24
141.11.172.0/24
141.11.180.0/24
141.11.196.0-141.11.198.255
141.11.236.0/23
141.11.243.0/24
141.11.245.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
70:26:0e:86:47:29:60:58:5b:55:70:35:5f:7f:70:b2:74:40:
3e:39:18:a9:05:a2:b0:18:f3:60:b6:63:61:11:71:b5:00:cd:
a1:15:40:7c:75:3b:53:f4:f4:56:f7:87:95:0a:b5:3d:42:4a:
0c:ed:90:37:6c:11:90:71:9b:ca:ad:10:d3:57:06:7c:f1:dd:
4d:ae:c3:be:5d:06:a9:f6:b7:fe:aa:0e:4e:63:f2:d6:31:de:
e5:44:09:10:94:ea:11:ad:9b:25:1d:bd:06:cd:39:bd:6f:ec:
0e:ba:2c:ed:af:9a:12:31:77:3c:8d:46:c8:69:fe:1c:d1:0f:
12:17:9f:d7:99:35:42:27:86:b7:90:f1:b3:50:ac:d0:d0:ce:
a2:7a:10:0e:88:e8:a0:7e:fc:08:1e:db:64:de:33:a7:76:75:
92:26:f7:dd:8c:91:82:c2:bd:20:fb:2a:cc:c0:76:de:1a:eb:
06:2f:89:54:7e:97:05:20:f6:f2:69:12:e4:47:94:11:6c:bb:
d6:4f:b9:14:4d:c3:4f:59:db:7f:cd:ca:b2:24:52:e7:f5:8a:
6d:2b:81:ce:95:0d:b9:3c:b7:67:18:68:2b:4f:1b:be:37:21:
6a:a3:d7:0b:3d:69:07:25:0e:67:90:58:97:42:e0:11:22:4c:
8a:d5:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:04 2025 by rpki-client