This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: J9gr9a5Dr86tFVC7QB3bDefei7Zvig5G/0uYX63a4i8= Subject key identifier: DC:EB:3D:8B:2E:9B:88:00:1E:12:F5:99:FA:1D:93:C8:C8:FF:BA:CA Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 33CC081AEF7B099280DD7F4481500A25B1ADC758 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa Signing time: Sat 17 Jan 2026 13:35:14 +0000 ROA not before: Sat 17 Jan 2026 13:30:14 +0000 ROA not after: Sat 16 Jan 2027 13:35:14 +0000 asID: 9304 IP address blocks: 45.157.18.0/24 maxlen: 24 185.155.222.0/24 maxlen: 24 192.166.114.0/24 maxlen: 24 193.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cc:08:1a:ef:7b:09:92:80:dd:7f:44:81:50:0a:25:b1:ad:c7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 17 13:30:14 2026 GMT Not After : Jan 16 13:35:14 2027 GMT Subject: CN=DCEB3D8B2E9B88001E12F599FA1D93C8C8FFBACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:37:9a:1c:cd:41:59:74:eb:62:e5:ca:52: 16:e9:aa:6d:22:e7:86:de:9c:5b:c6:1b:6f:ea:79: 54:4d:e0:7a:57:fe:d8:8b:53:90:2e:b0:37:b6:d5: 57:2f:10:24:56:e5:ee:92:d3:ac:14:b5:c5:66:31: a4:d4:6e:44:af:9a:9f:0d:a1:2e:b9:f2:cd:61:0b: 3f:26:70:00:a2:f9:9b:f3:86:13:4c:e4:e1:94:a8: 38:2e:61:34:7e:77:fb:18:a8:4d:ae:a1:b0:24:8b: de:f3:5c:cb:ed:b3:70:95:d9:54:cf:97:06:78:8b: 5d:b2:69:14:9e:9a:90:1e:a6:dc:e6:43:a9:70:39: 34:91:d4:72:4c:dd:e8:d3:91:06:e3:d7:2f:80:ad: 37:d1:cb:6b:ff:8e:ab:07:95:a3:60:d3:1e:45:d5: 03:3b:5d:5b:72:5b:b2:77:f5:c0:5f:de:70:08:29: 1b:fc:f0:dd:b3:a0:1f:53:22:64:57:35:b4:64:fe: ee:61:ab:dc:21:4f:7f:01:73:3b:59:0c:e9:1a:2c: 68:08:6f:a3:2e:b1:e2:53:16:87:93:7c:03:12:ea: 70:ee:6a:9d:3d:76:21:f1:a2:31:3d:cf:34:1a:76: e1:28:5c:cb:14:8a:55:dc:75:9e:a6:b0:86:9e:19: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EB:3D:8B:2E:9B:88:00:1E:12:F5:99:FA:1D:93:C8:C8:FF:BA:CA X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.18.0/24 185.155.222.0/24 192.166.114.0/24 193.5.11.0/24 Signature Algorithm: sha256WithRSAEncryption 14:26:e3:d1:50:8e:de:e8:86:4b:b5:b8:a2:fe:0c:d4:9d:85: 4e:93:00:22:bf:db:b0:50:b8:51:45:1e:76:c5:05:fb:a4:13: d3:cc:2e:34:ca:73:8f:22:14:29:73:09:e8:96:65:e1:d5:09: 38:42:c8:80:dc:a9:90:65:b7:28:ee:4a:65:88:ed:27:44:97: 04:5b:d2:53:d4:59:77:22:67:8e:8c:70:86:29:2e:58:a2:83: bf:4f:c7:83:fd:6c:83:f7:ab:2c:9d:bd:5b:00:12:40:1e:a4: 1c:8d:b9:b3:55:22:1a:ed:83:2f:b2:0e:ef:42:a5:2c:21:c1: 6a:8a:b5:77:0b:ff:66:73:99:79:94:04:98:4d:b8:d3:97:ea: e1:1d:55:84:ce:98:ae:6c:e5:f1:03:6a:82:36:da:37:52:3b: 3b:01:f2:e7:95:55:ca:9f:63:da:25:7f:35:47:6f:a3:92:dd: 0a:1e:8f:46:d3:71:27:28:d3:e4:63:da:09:bd:2e:6b:36:e8: 26:83:36:7a:ba:02:24:8d:e5:da:e0:06:4b:0d:b8:b7:31:68: a0:87:c5:97:d6:8b:10:c1:11:e0:f2:08:0a:15:ea:ab:ce:88: ce:34:a2:5a:04:05:42:53:29:49:8f:db:69:e2:f3:63:b6:27: ec:50:0c:61 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUM8wIGu97CZKA3X9EgVAKJbGtx1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMTcxMzMwMTRaFw0yNzAxMTYxMzM1MTRaMDMxMTAvBgNV BAMTKERDRUIzRDhCMkU5Qjg4MDAxRTEyRjU5OUZBMUQ5M0M4QzhGRkJBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnzeaHM1BWXTrYuXKUhbpqm0i 54benFvGG2/qeVRN4HpX/tiLU5AusDe21VcvECRW5e6S06wUtcVmMaTUbkSvmp8N oS658s1hCz8mcACi+ZvzhhNM5OGUqDguYTR+d/sYqE2uobAki97zXMvts3CV2VTP lwZ4i12yaRSempAeptzmQ6lwOTSR1HJM3ejTkQbj1y+ArTfRy2v/jqsHlaNg0x5F 1QM7XVtyW7J39cBf3nAIKRv88N2zoB9TImRXNbRk/u5hq9whT38BcztZDOkaLGgI b6MuseJTFoeTfAMS6nDuap09diHxojE9zzQaduEoXMsUilXcdZ6msIaeGTUrAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU3Os9iy6biAAeEvWZ+h2TyMj/usowHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC2dEgME ALmb3gMEAMCmcgMEAMEFCzANBgkqhkiG9w0BAQsFAAOCAQEAFCbj0VCO3uiGS7W4 ov4M1J2FTpMAIr/bsFC4UUUedsUF+6QT08wuNMpzjyIUKXMJ6JZl4dUJOELIgNyp kGW3KO5KZYjtJ0SXBFvSU9RZdyJnjoxwhikuWKKDv0/Hg/1sg/erLJ29WwASQB6k HI25s1UiGu2DL7IO70KlLCHBaoq1dwv/ZnOZeZQEmE2405fq4R1VhM6Yrmzl8QNq gjbaN1I7OwHy55VVyp9j2iV/NUdvo5LdCh6PRtNxJyjT5GPaCb0uazboJoM2eroC JI3l2uAGSw24tzFooIfFl9aLEMER4PIIChXqq86IzjSiWgQFQlMpSY/baeLzY7Yn 7FAMYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:30 2026 by rpki-client