Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: ciW08U2Empj76p7VVq2YP0FS4nW9bKitOObYrNmzspc=
Subject key identifier: 34:68:6D:A3:28:1C:B2:B5:03:F7:50:A4:D9:C2:C7:93:9E:C7:7C:95
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7CD012E658ABE96F85C51905B49642A8461B8AD7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Sun 08 Nov 2026 00:09:21 +0000
ROA not before: Sun 08 Nov 2026 00:04:21 +0000
ROA not after: Sun 07 Nov 2027 00:09:21 +0000
asID: 9304
IP address blocks: 143.20.36.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.77.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 09:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d0:12:e6:58:ab:e9:6f:85:c5:19:05:b4:96:42:a8:46:1b:8a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 8 00:04:21 2026 GMT
Not After : Nov 7 00:09:21 2027 GMT
Subject: CN=34686DA3281CB2B503F750A4D9C2C7939EC77C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:97:a8:32:97:4e:c6:6f:a6:89:69:00:b8:
31:b1:bc:3b:77:4f:81:32:97:a7:f7:ee:8f:77:26:
76:c2:d3:f1:66:ee:9e:15:75:f9:a9:63:f6:4d:bc:
ed:99:24:23:db:3e:a4:8f:97:97:bf:1c:c3:fa:76:
14:ba:fa:c3:78:b1:0c:85:af:8b:80:1d:81:75:6d:
2b:e0:dc:81:f6:22:6b:60:a4:8a:ec:de:42:a2:ff:
cb:77:a4:f6:b3:68:26:35:92:55:a8:1d:84:e7:f7:
a1:09:74:0d:b9:40:39:12:5b:2d:99:bd:2d:6e:96:
64:bb:35:b9:fd:d5:77:3c:07:82:8c:b6:49:74:fd:
a2:ca:00:7c:a3:1c:70:08:5c:3a:b9:a9:b9:6d:b6:
7c:91:fe:ec:2f:db:ff:0a:7e:e8:11:a6:e1:4c:d9:
26:4b:32:75:8c:da:47:1c:a0:70:49:78:59:72:7a:
57:0c:ca:98:bd:68:e7:06:92:6c:a7:25:24:21:cf:
9e:b0:e9:3c:c8:76:52:52:4c:cd:be:2c:aa:1d:31:
f6:79:ab:40:47:ad:a2:df:92:6d:c2:bd:8a:bb:7c:
98:cc:f5:de:86:6d:9c:0f:74:2b:f2:e2:a1:ad:25:
c4:88:11:4c:ab:64:74:15:68:2d:3e:62:40:67:a1:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:6D:A3:28:1C:B2:B5:03:F7:50:A4:D9:C2:C7:93:9E:C7:7C:95
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.36.0/24
143.20.65.0/24
143.20.74.0/24
143.20.77.0/24
143.20.84.0/24
143.20.118.0/24
143.20.144.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c6:1f:59:0f:ac:3e:c0:ea:8d:03:74:12:4f:95:e8:bd:e6:
d4:9b:17:20:21:bb:47:ce:52:47:d6:9d:b0:6f:c7:0f:a8:74:
1c:63:e7:8e:48:07:21:c3:b5:2a:5a:1e:75:64:95:29:93:a3:
58:ea:3f:f2:7f:35:42:a9:8c:ec:56:a6:0d:ed:18:76:a7:70:
4d:3f:99:d9:0a:53:a7:32:da:c6:4a:79:1a:8e:60:37:30:22:
7f:bb:d6:70:1a:0f:a3:fb:3e:74:c7:37:17:ad:40:46:e5:f9:
1e:10:d7:e2:c8:4c:4f:7e:a0:6e:37:54:a9:cc:00:10:1e:f7:
78:9a:32:0c:92:12:63:94:b8:99:5f:df:f4:ab:8c:cd:2a:44:
04:a7:24:fb:cc:31:c7:39:28:77:2d:e1:9d:cb:03:a6:67:ca:
a4:a1:88:ca:33:5a:1b:be:6e:89:2a:ae:60:ac:73:d6:93:6a:
69:04:a7:27:1d:67:53:d1:fd:fc:e6:fb:cc:c3:84:27:be:5d:
09:f0:eb:fe:7e:bc:26:a2:30:0f:d5:86:f3:6c:86:60:f9:1b:
36:f9:04:1b:da:31:59:4e:15:7a:9d:1b:7d:b9:e6:39:59:b6:
2c:27:bd:c3:8e:41:28:c3:8f:d1:b9:c3:a5:8d:fa:f9:c9:e6:
63:d1:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:49:17 2026 by rpki-client