Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: PJsfWzGl6Hi/UslSHM8T84LgDmcR6E8zdIWHSnz0VGM=
Subject key identifier: 77:0E:83:75:1F:83:03:F3:AF:37:51:E8:E2:CF:1C:CC:90:A1:B2:69
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4EFA8B8C326309BC55146C90C0B17EFEC6CBE2E2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Sun 08 Nov 2026 00:09:25 +0000
ROA not before: Sun 08 Nov 2026 00:04:25 +0000
ROA not after: Sun 07 Nov 2027 00:09:25 +0000
asID: 9304
IP address blocks: 46.203.39.0/24 maxlen: 24
46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.12.0/24 maxlen: 24
91.124.35.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.86.0/24 maxlen: 24
91.124.124.0/23 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.95.5.0/24 maxlen: 24
178.95.75.0/24 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fa:8b:8c:32:63:09:bc:55:14:6c:90:c0:b1:7e:fe:c6:cb:e2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 8 00:04:25 2026 GMT
Not After : Nov 7 00:09:25 2027 GMT
Subject: CN=770E83751F8303F3AF3751E8E2CF1CCC90A1B269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:52:4e:43:7a:f8:56:a6:08:73:bb:1c:73:
6f:da:79:da:b3:bd:8f:59:08:c9:e9:d4:0d:01:50:
c0:6a:01:84:56:11:e7:47:8d:82:d2:13:88:8a:78:
c9:5a:0f:ec:8e:5a:78:be:e2:bd:15:dd:e2:3a:43:
29:c7:56:93:6e:1c:22:75:b7:09:8b:2f:38:44:8e:
37:f7:f7:f8:e8:5b:4c:8d:5d:c7:68:ed:9e:ac:3b:
3b:a2:bb:f3:18:24:7f:40:92:6a:96:f8:5e:5b:98:
88:1f:1d:eb:a7:3b:93:bb:de:bd:0a:8f:aa:7f:46:
1a:66:ec:da:c1:87:5f:54:fd:5f:b4:bb:74:4a:09:
71:57:9e:9d:16:82:de:6e:35:4a:6c:c1:1b:46:7b:
ee:80:79:82:8d:52:a9:b0:7c:66:89:b6:ed:5c:27:
7f:c6:09:c4:6a:2e:a9:ad:fc:22:4a:09:14:8f:30:
c4:11:3e:5d:59:fa:fb:53:b1:a2:f0:d1:80:e1:74:
70:87:5e:3f:15:f5:6c:43:de:09:75:fe:5f:0b:d2:
37:db:e6:35:7d:d2:e4:6d:d0:e3:e2:f1:98:de:96:
37:60:55:7e:80:0f:9f:b4:32:5c:ef:26:cf:63:08:
72:8d:84:a4:e3:7a:e4:fa:7b:80:6d:8f:cc:10:b0:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0E:83:75:1F:83:03:F3:AF:37:51:E8:E2:CF:1C:CC:90:A1:B2:69
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.39.0/24
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.12.0/24
91.124.35.0/24
91.124.64.0/24
91.124.86.0/24
91.124.124.0/23
92.113.249.0/24
95.134.68.0/24
95.134.84.0/23
95.134.133.0/24
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.40.0/24
95.135.70.0/24
178.92.15.0/24
178.92.21.0/24
178.92.36.0/24
178.92.39.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.93.0.0/23
178.93.76.0/24
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.241.0/24
178.94.17.0/24
178.94.169.0/24
178.94.190.0/24
178.95.5.0/24
178.95.75.0/24
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e6:f1:60:71:a2:5f:a7:63:7a:3e:4b:d4:3f:2d:fc:cb:f7:
e3:b0:e4:f8:a0:c1:0e:ac:ae:ad:52:ac:71:66:2f:15:e6:af:
bc:f2:88:41:c8:75:47:6f:04:47:14:61:35:f0:ca:94:87:b4:
1a:11:fa:70:6e:f3:6a:57:b4:f1:66:e7:2d:ce:da:77:ed:37:
cc:93:f4:c7:fb:5c:e9:c5:f4:c6:e5:22:a8:4b:97:51:5e:87:
b6:fc:78:ec:ab:93:33:4a:5d:73:68:e6:2d:22:de:3d:ba:3d:
0a:10:9c:d1:b7:70:c3:f8:3a:af:d9:5c:34:88:ec:c0:bb:51:
a0:98:ea:2e:4b:9f:13:c5:9f:2f:d7:d2:57:93:cd:73:cb:7e:
e0:f7:7c:34:de:23:0e:e8:5f:f7:71:20:6c:38:16:84:25:b2:
7c:6a:d5:7d:e8:fd:50:84:e7:0d:3b:04:4e:e0:e7:81:ac:c5:
f2:a4:cc:47:d6:0b:9c:cc:51:65:e1:d1:94:db:77:82:fc:ae:
c9:ee:4d:88:46:de:e0:fc:b4:67:ac:07:5f:57:49:65:79:99:
8a:2f:bf:b2:0e:79:5e:88:4d:02:83:6b:c1:6b:52:ff:b9:a6:
44:2c:37:6d:3e:da:03:ff:92:6c:3f:66:a7:0d:d6:6d:b1:23:
41:ce:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:00:16 2026 by rpki-client