Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: o29uxPBQIudMduhb3WHmFJ3Do+YTcFC/YC/KNFR6LPs=
Subject key identifier: E4:66:C7:6E:76:30:49:14:40:94:AD:ED:80:60:DB:1F:66:9D:C8:FD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1A1C6D1E032C9812AE400F66BC440FEBBAA738B5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Mon 18 Aug 2025 16:06:53 +0000
ROA not before: Mon 18 Aug 2025 16:01:53 +0000
ROA not after: Mon 17 Aug 2026 16:06:53 +0000
asID: 9304
IP address blocks: 141.11.39.0/24 maxlen: 24
141.11.57.0/24 maxlen: 24
141.11.180.0/24 maxlen: 24
141.11.197.0/24 maxlen: 24
141.11.236.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1c:6d:1e:03:2c:98:12:ae:40:0f:66:bc:44:0f:eb:ba:a7:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 18 16:01:53 2025 GMT
Not After : Aug 17 16:06:53 2026 GMT
Subject: CN=E466C76E763049144094ADED8060DB1F669DC8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:c2:e2:0d:db:f7:fb:0a:17:4e:1e:32:93:
41:c4:80:a5:dd:6d:a1:67:7e:0f:f5:aa:2d:1f:2e:
de:4b:e0:49:a0:07:6f:e2:20:cc:76:4e:24:4b:8b:
9f:f2:4d:ef:56:66:08:2d:a2:84:1c:59:36:27:e6:
16:70:3f:8a:09:8a:59:b8:db:e6:fd:26:b3:b5:aa:
b3:69:5a:c5:0b:04:d9:2b:a6:7a:61:44:12:e6:5b:
05:fc:8d:46:9b:15:30:b6:fd:6b:58:cf:fa:fc:21:
77:7c:7a:1a:fb:b5:88:ca:38:ce:b4:6b:e1:22:43:
8b:73:b8:6d:c3:31:b2:b2:d0:c0:82:97:93:76:69:
b0:dd:a6:7e:58:42:e3:2f:ad:d9:b3:27:84:01:1f:
b1:42:23:0c:28:87:1a:a1:6a:4f:ca:9c:25:68:54:
98:f7:f7:c1:94:55:db:91:50:01:4d:4e:2a:7d:4d:
a4:a5:88:dd:dc:33:35:d6:8a:1c:d0:3a:ae:09:b6:
a8:1e:45:8c:d1:e6:b4:b1:20:d5:d8:33:64:13:8e:
52:fd:20:9e:8d:9f:e4:42:22:ae:8d:21:ad:bf:0e:
c1:93:db:ec:48:6b:40:db:66:9d:33:a8:66:7a:5d:
70:2b:35:4d:bd:6f:28:da:4f:19:36:1b:e4:44:5a:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:C7:6E:76:30:49:14:40:94:AD:ED:80:60:DB:1F:66:9D:C8:FD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
141.11.57.0/24
141.11.180.0/24
141.11.197.0/24
141.11.236.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2a:f7:7c:a3:43:f8:15:24:e1:8d:8b:7c:06:73:a8:8d:b9:
8e:5b:ef:0b:b6:d9:8f:29:c9:a9:98:d5:af:ce:10:9a:c6:a1:
a8:8a:8d:c9:2a:24:8a:a0:1e:12:c2:2e:11:b6:e2:60:be:cd:
f0:4f:b1:7f:8b:79:3a:4a:a6:30:4d:9b:16:0d:c9:c1:7f:4f:
22:b6:49:43:b5:b0:b3:ed:02:c3:38:cb:a7:61:5b:af:f3:49:
9a:c1:a8:ab:ce:d3:71:7d:aa:53:e0:3c:19:8e:37:72:68:d3:
ca:f3:9d:0a:e3:25:7d:57:a4:2c:16:ad:c8:c5:e5:fb:1d:43:
a7:94:dc:29:b6:6f:88:e2:d5:aa:2f:a8:c6:f6:3a:35:3c:4a:
39:bf:68:60:f3:42:fe:7c:55:0a:a3:ad:12:0c:ca:11:a3:65:
f8:c1:e0:8e:9e:87:7b:62:86:9b:57:6c:49:e0:f5:e3:0a:35:
f1:11:0c:b2:28:ac:24:79:94:aa:ed:50:a0:73:e6:29:c8:d0:
d7:3c:79:fe:71:84:da:3c:48:e1:61:46:75:3d:07:32:f1:f9:
31:b1:90:6e:55:6b:95:4e:29:dc:ac:7c:b5:71:24:db:dd:5c:
3e:07:8f:b1:18:d4:de:0f:7f:9a:3f:e7:61:93:69:2d:cd:e8:
0e:fa:3b:cb
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUGhxtHgMsmBKuQA9mvEQP67qnOLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA4MTgxNjAxNTNaFw0yNjA4MTcxNjA2NTNaMDMxMTAvBgNV
BAMTKEU0NjZDNzZFNzYzMDQ5MTQ0MDk0QURFRDgwNjBEQjFGNjY5REM4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlMLiDdv3+woXTh4yk0HEgKXd
baFnfg/1qi0fLt5L4EmgB2/iIMx2TiRLi5/yTe9WZggtooQcWTYn5hZwP4oJilm4
2+b9JrO1qrNpWsULBNkrpnphRBLmWwX8jUabFTC2/WtYz/r8IXd8ehr7tYjKOM60
a+EiQ4tzuG3DMbKy0MCCl5N2abDdpn5YQuMvrdmzJ4QBH7FCIwwohxqhak/KnCVo
VJj398GUVduRUAFNTip9TaSliN3cMzXWihzQOq4JtqgeRYzR5rSxINXYM2QTjlL9
IJ6Nn+RCIq6NIa2/DsGT2+xIa0DbZp0zqGZ6XXArNU29byjaTxk2G+REWr99AgMB
AAGjggImMIICIjAdBgNVHQ4EFgQU5GbHbnYwSRRAlK3tgGDbH2adyP0wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAI0LJwME
AI0LOQMEAI0LtAMEAI0LxQMEAI0L7AMEAMI8WjANBgkqhkiG9w0BAQsFAAOCAQEA
eCr3fKND+BUk4Y2LfAZzqI25jlvvC7bZjynJqZjVr84QmsahqIqNySokiqAeEsIu
EbbiYL7N8E+xf4t5OkqmME2bFg3JwX9PIrZJQ7Wws+0CwzjLp2Fbr/NJmsGoq87T
cX2qU+A8GY43cmjTyvOdCuMlfVekLBatyMXl+x1Dp5TcKbZviOLVqi+oxvY6NTxK
Ob9oYPNC/nxVCqOtEgzKEaNl+MHgjp6He2KGm1dsSeD14wo18REMsiisJHmUqu1Q
oHPmKcjQ1zx5/nGE2jxI4WFGdT0HMvH5MbGQblVrlU4p3Kx8tXEk291cPgePsRjU
3g9/mj/nYZNpLc3oDvo7yw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:00 2025 by rpki-client