Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: RxbF5xGD3w5dfq4ryuOuaTvUgpCT6va3rhiBRFKiYL4=
Subject key identifier: E3:7D:AF:3C:85:43:D3:8D:16:A7:1F:17:95:14:AF:D9:C2:AC:04:A2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0B994079975463699CC294B340CB16ED684EC3A8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Sat 28 Mar 2026 00:04:17 +0000
ROA not before: Fri 27 Mar 2026 23:59:17 +0000
ROA not after: Sat 27 Mar 2027 00:04:17 +0000
asID: 9304
IP address blocks: 46.202.45.0/24 maxlen: 24
46.202.46.0/24 maxlen: 24
46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.149.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.84.0/23 maxlen: 24
91.124.168.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
92.112.5.0/24 maxlen: 24
92.112.104.0/24 maxlen: 24
92.113.172.0/24 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.0.0/24 maxlen: 24
95.134.1.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.116.0/24 maxlen: 24
95.134.118.0/24 maxlen: 24
95.134.119.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.140.0/24 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.63.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
95.135.165.0/24 maxlen: 24
95.135.222.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.92.254.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.227.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.45.0/24 maxlen: 24
178.94.46.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.94.228.0/24 maxlen: 24
178.94.230.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.20.0/24 maxlen: 24
178.95.96.0/22 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:99:40:79:97:54:63:69:9c:c2:94:b3:40:cb:16:ed:68:4e:c3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 27 23:59:17 2026 GMT
Not After : Mar 27 00:04:17 2027 GMT
Subject: CN=E37DAF3C8543D38D16A71F179514AFD9C2AC04A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:6c:76:08:8f:fd:ce:e5:b6:fe:f8:c8:e9:
4d:dd:07:04:63:12:01:4d:20:c8:4b:95:3f:6b:04:
63:b5:ae:1e:0d:a5:5d:52:22:5f:ba:93:5b:da:a3:
96:42:20:e8:09:28:82:ff:95:83:99:96:55:d7:b1:
10:d6:b1:d1:13:49:26:6e:1b:1a:a9:56:b9:55:6b:
80:42:cd:e9:45:ac:ad:ea:67:bf:c1:68:2b:4c:cb:
70:2e:93:31:cf:08:72:60:9a:85:48:7b:a4:fd:22:
01:ae:3a:1b:0d:b2:3c:b8:66:02:b1:ed:91:a6:77:
08:9e:54:02:b5:a8:7d:88:19:e2:d1:64:9b:3b:40:
ca:2c:54:ef:27:57:59:e7:9a:d4:75:7a:b5:a1:0e:
cb:f4:a5:a1:23:f4:b4:d5:b3:db:00:e2:8b:15:b5:
93:fa:86:62:ce:7b:9f:ec:d5:51:15:36:ae:85:df:
c0:c3:45:78:94:7b:cb:c4:8d:10:cd:33:bd:f8:7e:
9b:b6:b1:31:02:98:68:b1:c5:a7:03:2b:bd:07:46:
73:c0:43:77:5b:46:7b:65:a6:c8:ec:de:4e:cc:08:
d6:8e:d7:44:92:50:b2:62:05:e1:64:c6:7f:4e:89:
61:38:54:47:5c:f2:72:13:66:61:c7:02:c3:57:32:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:AF:3C:85:43:D3:8D:16:A7:1F:17:95:14:AF:D9:C2:AC:04:A2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.45.0-46.202.46.255
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.149.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.64.0/24
91.124.84.0/23
91.124.168.0/24
91.124.241.0/24
92.112.5.0/24
92.112.104.0/24
92.113.172.0/24
92.113.249.0/24
95.134.0.0/23
95.134.68.0/24
95.134.84.0/23
95.134.116.0/24
95.134.118.0/23
95.134.133.0/24
95.134.140.0/24
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.6.0/24
95.135.40.0/24
95.135.63.0/24
95.135.70.0/24
95.135.165.0/24
95.135.222.0/24
178.92.15.0/24
178.92.21.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.92.254.0/24
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.227.0/24
178.93.241.0/24
178.94.1.0/24
178.94.17.0/24
178.94.45.0-178.94.46.255
178.94.169.0/24
178.94.190.0/24
178.94.228.0/24
178.94.230.0/24
178.94.237.0/24
178.95.20.0/24
178.95.96.0/22
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1d:7b:1a:19:fe:60:49:e1:95:55:18:04:38:c6:16:cb:15:
aa:4b:d7:66:b0:68:ac:3e:ea:ab:78:2e:30:b6:68:2d:f0:21:
a7:c7:9d:40:4b:af:87:38:8c:ed:42:a7:1b:48:4c:3d:d4:9e:
c6:e9:b4:d9:b9:f7:f9:f8:2e:10:8b:41:8d:9f:fe:31:0e:39:
95:4a:58:8b:6b:e8:5e:a3:4e:cc:e1:7b:16:a9:0f:5a:d1:17:
a1:da:6f:42:9d:ea:f0:5b:41:cc:86:6a:37:e7:fe:b8:a1:5d:
c3:3b:26:81:cf:b0:6a:3a:15:8d:08:9d:e1:6e:20:36:a5:8f:
ca:7d:37:55:8f:1d:01:0d:5b:7f:cf:23:61:a8:02:70:70:f5:
0c:b3:8b:9c:fc:ff:b6:aa:87:f1:d1:1e:e4:bc:f4:b6:f9:3b:
f4:ac:a1:42:65:b6:a4:84:d3:37:1c:54:16:d0:8e:aa:6f:c2:
aa:c9:64:eb:23:aa:52:c6:22:98:69:f2:27:38:d6:0b:81:a0:
1b:d4:52:4d:b1:98:ca:f1:66:2a:18:4d:f6:aa:7b:09:79:8c:
8b:40:7e:00:7a:09:e6:1a:37:97:cf:de:e9:52:0c:3d:cd:64:
62:7f:48:f8:39:00:66:52:1d:82:51:34:65:be:05:96:97:6c:
4f:59:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:06 2026 by rpki-client