This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9280.roa File: AS9280.roa (raw, json) Hash identifier: hKo625Tc1n+j3XZ0Zk7P6ntYa8l1wPfgqsZEtQAGuDo= Subject key identifier: 3D:AB:01:18:5D:E1:6A:0A:0F:D4:DC:D3:C6:35:76:F4:F1:22:96:91 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 67A9B506B406A0FCE50BBF3F389274B98EB20B89 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9280.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 9280 IP address blocks: 191.96.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a9:b5:06:b4:06:a0:fc:e5:0b:bf:3f:38:92:74:b9:8e:b2:0b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=3DAB01185DE16A0A0FD4DCD3C63576F4F1229691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:fe:cb:2d:7b:91:f8:8c:6f:c5:84:10:6f: 59:a4:b3:d5:98:08:e0:73:8a:c7:87:c4:40:52:a6: 5a:85:58:39:9b:c9:8e:bb:11:12:15:3a:25:1e:33: b6:84:fb:03:6e:bc:e4:3e:f4:33:c7:0b:12:49:54: 9f:43:d4:81:b4:a4:a2:9a:0f:0d:70:e7:74:5e:d9: c5:d7:22:7a:7e:58:7f:49:98:8f:62:80:19:f5:40: ba:ca:8b:b7:ee:8b:96:1f:e2:c1:52:9d:40:a6:4c: 2c:41:8b:c3:2f:51:9c:e2:9f:4d:01:a8:31:70:f6: 3e:fc:3f:6d:8f:75:2f:76:46:c0:4b:e8:fa:f3:cf: 59:e3:62:de:60:84:3d:a5:01:fc:d8:39:43:11:99: d6:6f:2e:85:82:f0:c7:69:35:6b:9f:32:aa:cb:23: c0:09:49:8b:8a:33:8e:15:20:d0:73:2b:b8:46:44: 68:e3:bb:7d:39:dc:82:7d:64:71:14:4b:79:61:ee: f8:f4:90:e8:c1:51:0b:ea:99:ae:ba:f7:da:25:23: 0e:dd:6c:10:a4:c5:b4:e0:ee:90:74:5a:90:26:5f: c3:51:7c:48:61:fb:01:b5:6f:85:d5:fa:f7:98:c5: dc:7c:3f:03:bf:d1:f6:b7:e4:37:36:1b:e2:5a:fd: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:01:18:5D:E1:6A:0A:0F:D4:DC:D3:C6:35:76:F4:F1:22:96:91 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.96.214.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:33:8e:fe:70:82:cb:f0:0c:ba:f3:7f:84:f6:08:25:3e:a4: b1:66:09:6f:0f:e3:9d:25:a8:98:c6:d0:6e:06:23:8e:9e:ae: 95:40:aa:76:25:47:1a:31:d0:06:86:56:b4:86:7e:a6:3b:35: 31:2c:3a:af:f2:28:32:d8:0d:03:e0:80:dc:1b:be:0f:fc:30: b4:2a:16:96:f3:75:e1:39:e3:ab:2d:5f:3a:09:bb:bb:1a:ec: 31:66:ad:c2:23:d9:b7:3e:c1:56:88:b2:c9:42:2b:24:99:d1: a9:4c:08:38:e5:0e:37:7c:d9:0b:c6:f3:c1:9f:43:2a:06:3b: e5:47:73:31:a2:af:5d:02:83:a5:34:f4:df:6f:cb:83:4a:b0: 30:68:35:c8:94:c7:06:94:a0:05:19:65:58:ad:81:35:a5:5b: 99:97:9b:25:13:a4:b5:5e:40:83:5b:d8:79:87:99:42:0a:af: c6:bb:4a:3e:d3:16:53:23:f5:94:d2:26:82:24:00:a5:89:90: ab:f3:44:50:f0:2b:32:06:e2:41:fe:df:62:9a:18:ee:3f:ce: 7d:74:4b:e2:81:5c:b4:3c:f9:1c:a4:1c:29:82:ee:27:6e:05: 35:35:0c:52:f1:d9:e3:97:0f:60:ff:c8:7f:72:16:0f:75:e7: c2:20:f3:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUZ6m1BrQGoPzlC78/OJJ0uY6yC4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDNEQUIwMTE4NURFMTZBMEEwRkQ0RENEM0M2MzU3NkY0RjEyMjk2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iv7LLXuR+IxvxYQQb1mks9WY COBziseHxEBSplqFWDmbyY67ERIVOiUeM7aE+wNuvOQ+9DPHCxJJVJ9D1IG0pKKa Dw1w53Re2cXXInp+WH9JmI9igBn1QLrKi7fui5Yf4sFSnUCmTCxBi8MvUZzin00B qDFw9j78P22PdS92RsBL6Przz1njYt5ghD2lAfzYOUMRmdZvLoWC8MdpNWufMqrL I8AJSYuKM44VINBzK7hGRGjju3053IJ9ZHEUS3lh7vj0kOjBUQvqma6699olIw7d bBCkxbTg7pB0WpAmX8NRfEhh+wG1b4XV+veYxdx8PwO/0fa35Dc2G+Ja/TElAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUPasBGF3hagoP1NzTxjV29PEilpEwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTOTI4MC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9g1jAN BgkqhkiG9w0BAQsFAAOCAQEAezOO/nCCy/AMuvN/hPYIJT6ksWYJbw/jnSWomMbQ bgYjjp6ulUCqdiVHGjHQBoZWtIZ+pjs1MSw6r/IoMtgNA+CA3Bu+D/wwtCoWlvN1 4Tnjqy1fOgm7uxrsMWatwiPZtz7BVoiyyUIrJJnRqUwIOOUON3zZC8bzwZ9DKgY7 5UdzMaKvXQKDpTT032/Lg0qwMGg1yJTHBpSgBRllWK2BNaVbmZebJROktV5Ag1vY eYeZQgqvxrtKPtMWUyP1lNImgiQApYmQq/NEUPArMgbiQf7fYpoY7j/OfXRL4oFc tDz5HKQcKYLuJ24FNTUMUvHZ45cPYP/If3IWD3XnwiDzfA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:37 2025 by rpki-client