Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: cbFKDEZWRr7rc+k7Tmm3FQLM2t57EDz6iNrVMpStMWQ=
Subject key identifier: 11:47:E9:0C:CB:65:20:E6:51:64:91:1A:C4:DA:D3:50:F3:84:76:30
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7C2B7F9564DF95D1BEED61B0AA40DB0F9B6CB6DD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Thu 23 Jul 2026 12:25:54 +0000
ROA not before: Thu 23 Jul 2026 12:20:54 +0000
ROA not after: Thu 22 Jul 2027 12:25:54 +0000
asID: 9304
IP address blocks: 46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.124.0/23 maxlen: 24
92.112.104.0/24 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.158.0/23 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.95.96.0/22 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2b:7f:95:64:df:95:d1:be:ed:61:b0:aa:40:db:0f:9b:6c:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 12:20:54 2026 GMT
Not After : Jul 22 12:25:54 2027 GMT
Subject: CN=1147E90CCB6520E65164911AC4DAD350F3847630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:43:de:22:1c:ae:65:26:ed:71:02:61:d7:
04:b8:47:24:99:63:a3:f2:c7:5c:c4:c3:6a:cf:b4:
1f:d2:76:76:16:2f:bd:2a:69:1a:7d:21:77:a8:89:
62:fc:d7:61:bd:ed:27:7e:02:4d:8a:0d:be:89:4a:
6a:6f:67:15:8d:87:d5:69:13:4b:07:39:67:99:a8:
f0:b1:52:8c:53:51:b1:51:66:fb:e6:a1:c8:24:5b:
f8:cd:68:b5:5e:e7:23:40:58:aa:c7:59:05:09:72:
c1:f5:ab:44:6c:f0:94:58:c4:83:29:29:a1:fb:af:
fb:53:72:c9:56:be:e9:e8:51:8a:c2:67:45:f8:91:
3a:70:75:71:53:54:09:2d:cd:92:76:37:40:0f:b0:
e2:df:5f:5a:69:59:02:80:15:20:a3:df:21:13:17:
86:f2:8e:85:55:2d:87:9d:cc:c6:a5:0e:86:67:50:
e1:85:ad:fd:f4:64:8e:f5:f7:3a:1f:b9:f6:2f:22:
5c:48:a7:fe:ce:a6:63:02:f6:34:8a:20:bf:8a:c8:
1f:92:9b:4d:f6:2a:24:67:26:a4:5f:6c:11:d9:71:
e8:1d:e6:02:26:9f:96:b2:c9:3d:1f:69:2c:32:09:
6c:e4:e8:07:f0:9b:a5:93:65:11:2c:cf:59:63:d6:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:E9:0C:CB:65:20:E6:51:64:91:1A:C4:DA:D3:50:F3:84:76:30
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.64.0/24
91.124.124.0/23
92.112.104.0/24
92.113.249.0/24
95.134.68.0/24
95.134.84.0/23
95.134.133.0/24
95.134.158.0/23
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.6.0/24
95.135.40.0/24
95.135.70.0/24
178.92.15.0/24
178.92.21.0/24
178.92.36.0/24
178.92.39.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.93.0.0/23
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.241.0/24
178.94.1.0/24
178.94.17.0/24
178.94.169.0/24
178.94.190.0/24
178.95.96.0/22
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b4:97:28:28:2b:20:17:4c:7e:36:74:ad:c8:2b:cd:64:8c:
56:b6:eb:3d:6c:29:ee:04:50:bd:30:b4:9c:77:73:ab:7b:3f:
17:15:00:f8:e4:ee:f3:11:69:70:f8:8c:fe:43:85:f9:4a:31:
fe:0a:32:44:a4:10:fe:0d:59:f0:96:c3:9b:92:0e:13:3d:13:
8e:94:74:fe:05:38:15:67:d0:0f:8b:df:32:c6:89:1f:60:24:
a4:68:ef:b6:30:a5:1d:af:b2:f5:a1:97:c8:be:62:f3:d4:29:
4c:38:75:81:00:7c:b3:13:d4:c2:c2:39:dd:d7:31:54:d4:00:
bf:e1:93:91:76:01:8a:5a:cd:45:72:3e:a9:5f:96:ff:71:7b:
65:27:c2:da:58:76:d2:b5:59:89:d2:ac:40:66:7e:ca:25:73:
f1:64:98:5d:25:7a:c2:45:a8:0c:0f:8f:0d:0f:24:4c:80:80:
b1:02:b7:6a:a0:e1:23:0f:19:20:bb:7d:e2:ca:e5:9f:85:ce:
de:8c:c8:32:82:40:27:48:3d:04:7b:12:09:cd:97:d8:10:94:
cc:fd:42:8a:b7:66:9b:ef:b7:e6:53:ff:c5:61:0a:e2:20:fd:
76:eb:63:f1:06:3c:40:24:4d:0b:0c:f8:48:2f:95:9d:70:2b:
09:7e:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:54:36 2026 by rpki-client