Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: rkgxYJ04K6XTrVbowWOeuyWapJkvIID5JXwJaRvaMQM=
Subject key identifier: B1:6B:CA:BF:F6:E3:9F:C1:E7:B0:CF:C4:A9:E2:DC:B4:02:FD:98:CA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1B4A5B1597D6632B14AB88018D05F62C9522C3C7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Fri 25 Sep 2026 00:07:41 +0000
ROA not before: Fri 25 Sep 2026 00:02:41 +0000
ROA not after: Fri 24 Sep 2027 00:07:41 +0000
asID: 9304
IP address blocks: 46.202.36.0/24 maxlen: 24
46.202.50.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.203.3.0/24 maxlen: 24
46.203.5.0/24 maxlen: 24
46.203.13.0/24 maxlen: 24
46.203.39.0/24 maxlen: 24
46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.35.0/24 maxlen: 24
91.124.49.0/24 maxlen: 24
91.124.64.0/24 maxlen: 24
91.124.124.0/23 maxlen: 24
92.112.9.0/24 maxlen: 24
92.113.249.0/24 maxlen: 24
95.134.68.0/24 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.133.0/24 maxlen: 24
95.134.200.0/24 maxlen: 24
95.134.207.0/24 maxlen: 24
95.134.214.0/24 maxlen: 24
95.134.215.0/24 maxlen: 24
95.134.222.0/24 maxlen: 24
95.135.40.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
178.92.15.0/24 maxlen: 24
178.92.21.0/24 maxlen: 24
178.92.36.0/24 maxlen: 24
178.92.39.0/24 maxlen: 24
178.92.99.0/24 maxlen: 24
178.92.134.0/24 maxlen: 24
178.92.141.0/24 maxlen: 24
178.92.150.0/24 maxlen: 24
178.92.152.0/24 maxlen: 24
178.92.160.0/24 maxlen: 24
178.92.164.0/24 maxlen: 24
178.92.176.0/24 maxlen: 24
178.92.206.0/24 maxlen: 24
178.93.0.0/24 maxlen: 24
178.93.1.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.93.109.0/24 maxlen: 24
178.93.111.0/24 maxlen: 24
178.93.168.0/24 maxlen: 24
178.93.181.0/24 maxlen: 24
178.93.189.0/24 maxlen: 24
178.93.190.0/24 maxlen: 24
178.93.197.0/24 maxlen: 24
178.93.199.0/24 maxlen: 24
178.93.215.0/24 maxlen: 24
178.93.241.0/24 maxlen: 24
178.94.17.0/24 maxlen: 24
178.94.169.0/24 maxlen: 24
178.94.190.0/24 maxlen: 24
178.95.5.0/24 maxlen: 24
178.95.24.0/24 maxlen: 24
178.95.75.0/24 maxlen: 24
178.95.137.0/24 maxlen: 24
178.95.168.0/24 maxlen: 24
178.95.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4a:5b:15:97:d6:63:2b:14:ab:88:01:8d:05:f6:2c:95:22:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 25 00:02:41 2026 GMT
Not After : Sep 24 00:07:41 2027 GMT
Subject: CN=B16BCABFF6E39FC1E7B0CFC4A9E2DCB402FD98CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:77:a8:b8:c5:f7:03:b0:39:79:1f:93:d5:
41:e4:1d:3b:85:08:e1:bd:39:e2:06:07:bb:72:07:
81:71:1a:78:70:5f:c9:47:3c:39:07:8d:c4:23:de:
1c:f4:55:ff:df:d2:cf:cf:dd:0c:3d:e0:17:3d:ea:
a0:54:da:fc:82:22:6a:d6:c6:88:3d:5f:aa:93:9f:
a6:c0:f8:eb:0e:69:27:ff:dc:3f:0b:41:7c:86:f5:
bf:00:dd:e9:db:a7:c2:2a:39:4a:7c:7f:8b:82:2c:
be:1a:71:d9:34:77:38:f5:6e:c1:49:ad:5d:4a:95:
70:08:af:40:cc:b4:f5:7f:5d:80:3c:19:77:ec:62:
0a:32:f6:a4:a7:76:a7:9e:b4:82:2f:40:44:c5:06:
06:56:a7:99:10:98:98:5b:6f:0b:b4:c2:aa:24:51:
f7:bd:cf:c9:47:d0:4c:bb:bf:ff:65:a4:9d:09:39:
6d:1b:e1:41:3d:81:67:5d:f1:c4:67:17:6c:b2:eb:
6b:5f:00:fc:59:01:4e:36:04:35:85:40:6c:e2:b8:
e1:3e:04:69:da:23:91:25:c2:53:30:9c:b2:f0:74:
4b:d9:3d:2b:2d:e4:cc:05:3d:48:8b:b0:a1:98:74:
ff:92:be:5c:43:b5:88:b7:7f:1c:5f:0b:f2:88:a0:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:CA:BF:F6:E3:9F:C1:E7:B0:CF:C4:A9:E2:DC:B4:02:FD:98:CA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.36.0/24
46.202.50.0/24
46.202.70.0/24
46.203.3.0/24
46.203.5.0/24
46.203.13.0/24
46.203.39.0/24
46.203.83.0-46.203.84.255
46.203.126.0/24
46.203.172.0/24
46.203.176.0/24
46.203.200.0/24
91.124.35.0/24
91.124.49.0/24
91.124.64.0/24
91.124.124.0/23
92.112.9.0/24
92.113.249.0/24
95.134.68.0/24
95.134.84.0/23
95.134.133.0/24
95.134.200.0/24
95.134.207.0/24
95.134.214.0/23
95.134.222.0/24
95.135.40.0/24
95.135.70.0/24
178.92.15.0/24
178.92.21.0/24
178.92.36.0/24
178.92.39.0/24
178.92.99.0/24
178.92.134.0/24
178.92.141.0/24
178.92.150.0/24
178.92.152.0/24
178.92.160.0/24
178.92.164.0/24
178.92.176.0/24
178.92.206.0/24
178.93.0.0/23
178.93.76.0/24
178.93.109.0/24
178.93.111.0/24
178.93.168.0/24
178.93.181.0/24
178.93.189.0-178.93.190.255
178.93.197.0/24
178.93.199.0/24
178.93.215.0/24
178.93.241.0/24
178.94.17.0/24
178.94.169.0/24
178.94.190.0/24
178.95.5.0/24
178.95.24.0/24
178.95.75.0/24
178.95.137.0/24
178.95.168.0/24
178.95.198.0/24
Signature Algorithm: sha256WithRSAEncryption
14:41:ab:90:cd:a6:d4:3b:24:36:f2:ee:8a:0d:20:ee:8e:35:
a1:22:bb:c7:cd:56:ce:bb:8e:5e:d1:22:23:47:20:b9:ea:b8:
32:c5:74:b3:95:1a:e4:72:b4:24:eb:fc:e0:33:95:e1:ee:97:
64:d6:35:ee:25:65:4e:1a:1d:09:1e:49:d0:fd:62:01:a8:e6:
2f:f9:2d:06:82:68:52:73:eb:cf:dd:bc:b6:7a:a3:1e:0a:2a:
6e:6f:93:d3:3f:23:cd:4e:bf:c4:66:18:8c:96:4a:ac:56:f5:
63:be:42:63:f3:5c:4a:12:62:f7:b1:cf:bb:37:4c:3a:44:2a:
4f:c4:21:91:05:9f:8d:5a:79:bd:25:96:81:91:01:e8:57:6e:
c3:8d:64:7c:29:fe:5a:00:8c:2c:0f:c4:3d:d5:fe:c3:9b:f3:
4b:0d:68:25:49:64:4d:9b:68:aa:a0:18:d8:13:ab:17:38:da:
f9:e3:c4:1e:d2:34:ef:35:37:8b:d5:30:74:b4:af:93:69:a1:
9f:95:cf:f2:47:df:97:51:66:b0:44:b0:23:b6:61:88:4d:b2:
83:62:cc:62:41:f7:ef:93:da:6d:f5:8f:ea:d3:48:c8:bb:6b:
86:19:2e:f6:81:29:d1:23:ce:61:1d:26:6a:9f:fa:37:3b:02:
3f:76:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:28 2026 by rpki-client