This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: bWs0OxuQUwfdYtbBsJo8dYL0ClH+gXGTC3H/ECWT/uQ= Subject key identifier: 93:A0:81:73:67:72:E4:A0:EF:B0:A6:11:5D:F6:C5:8F:CC:A1:DF:BB Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 0FD038D7CA6377C2040560D1AFC9AD17C80B2CA8 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa Signing time: Tue 02 Dec 2025 00:02:06 +0000 ROA not before: Mon 01 Dec 2025 23:57:06 +0000 ROA not after: Tue 01 Dec 2026 00:02:06 +0000 asID: 9304 IP address blocks: 91.206.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:38:d7:ca:63:77:c2:04:05:60:d1:af:c9:ad:17:c8:0b:2c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 1 23:57:06 2025 GMT Not After : Dec 1 00:02:06 2026 GMT Subject: CN=93A081736772E4A0EFB0A6115DF6C58FCCA1DFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:18:d8:3c:1f:16:88:7e:03:68:05:74:76: 71:d6:fb:ee:c3:20:c0:9d:a5:f3:86:57:71:05:c8: 0e:49:77:69:1d:02:6c:fe:79:a6:e0:e2:e1:4e:1a: ec:12:af:5e:57:11:b8:04:59:5c:6e:20:5f:5b:56: 11:6b:f9:81:3d:cc:8c:77:dc:68:6e:82:19:89:db: 68:73:e8:31:cc:6c:3a:47:f9:f9:65:e2:49:74:0e: df:ff:68:8b:2a:98:71:0d:73:05:fa:4e:ea:05:9b: 1b:f3:14:df:cb:53:08:4c:60:e8:b6:87:ac:77:dd: d3:7a:7e:b6:24:43:99:ed:16:7d:15:37:51:de:64: 81:13:38:62:fe:4d:55:16:84:42:93:94:cc:18:5c: 08:2c:39:d8:1c:c7:1e:27:82:da:ae:27:08:b1:b1: 1f:25:35:fd:57:10:f6:83:96:27:f5:78:98:8a:46: c4:0a:9b:df:5c:12:86:3b:94:fc:35:fc:c5:10:d9: 4a:96:71:f1:ac:50:96:7b:f9:88:9f:36:23:80:4c: 11:6e:d3:5d:d1:e6:e0:e8:cf:c2:cd:2b:59:ea:7f: 56:fb:0c:af:9d:a4:92:f2:2d:9e:62:9d:99:9b:2c: 6e:57:66:58:49:d4:c8:df:a0:03:2c:e5:d5:56:0b: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:81:73:67:72:E4:A0:EF:B0:A6:11:5D:F6:C5:8F:CC:A1:DF:BB X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.2.0/24 Signature Algorithm: sha256WithRSAEncryption c5:09:26:53:a3:e1:fb:af:16:18:8f:e9:cc:b3:93:f4:01:de: 6c:54:61:bf:5b:98:fe:1e:4d:db:2d:2e:b3:3b:9d:d4:c3:d9: 42:06:e0:9b:70:68:af:e2:17:50:cb:0c:cf:7c:92:17:65:c1: af:4f:dd:80:00:c1:d9:7a:5a:93:82:6f:32:c3:cb:03:4c:17: 52:ca:a4:ca:09:26:70:ca:d2:ff:13:20:18:4c:aa:3c:09:20: 60:18:c4:75:3e:f2:20:ed:0d:f5:61:60:d7:e7:58:af:d8:7c: 72:a3:e3:e6:66:fa:b7:01:0b:09:69:e4:0f:ad:d3:fb:56:09: e2:b7:e0:87:08:bb:d9:8b:67:65:bb:de:93:bc:fe:5a:7f:fe: f5:60:86:f7:36:6d:97:fe:93:f3:74:2f:b1:08:47:c9:79:d5: 74:92:42:bb:be:49:c8:3a:ba:0e:8b:8b:67:70:a4:39:e0:99: 07:a9:5c:41:26:2e:e8:03:0d:6a:01:50:56:14:0e:67:c2:5e: 72:9a:7a:f1:a2:2b:f7:3c:1d:9a:59:6b:7f:cb:8e:38:a4:20: 39:13:5c:5c:47:64:de:e0:a1:c8:d2:48:c0:28:4f:46:74:0e: f1:02:4c:99:b5:fa:b2:d6:33:26:06:24:c2:da:02:0c:a9:1b: 16:9f:b3:b4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUD9A418pjd8IEBWDRr8mtF8gLLKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMDEyMzU3MDZaFw0yNjEyMDEwMDAyMDZaMDMxMTAvBgNV BAMTKDkzQTA4MTczNjc3MkU0QTBFRkIwQTYxMTVERjZDNThGQ0NBMURGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoRjYPB8WiH4DaAV0dnHW++7D IMCdpfOGV3EFyA5Jd2kdAmz+eabg4uFOGuwSr15XEbgEWVxuIF9bVhFr+YE9zIx3 3GhughmJ22hz6DHMbDpH+fll4kl0Dt//aIsqmHENcwX6TuoFmxvzFN/LUwhMYOi2 h6x33dN6frYkQ5ntFn0VN1HeZIETOGL+TVUWhEKTlMwYXAgsOdgcxx4ngtquJwix sR8lNf1XEPaDlif1eJiKRsQKm99cEoY7lPw1/MUQ2UqWcfGsUJZ7+YifNiOATBFu 013R5uDoz8LNK1nqf1b7DK+dpJLyLZ5inZmbLG5XZlhJ1MjfoAMs5dVWCwKxAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUk6CBc2dy5KDvsKYRXfbFj8yh37swHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvOAjAN BgkqhkiG9w0BAQsFAAOCAQEAxQkmU6Ph+68WGI/pzLOT9AHebFRhv1uY/h5N2y0u szud1MPZQgbgm3Bor+IXUMsMz3ySF2XBr0/dgADB2Xpak4JvMsPLA0wXUsqkygkm cMrS/xMgGEyqPAkgYBjEdT7yIO0N9WFg1+dYr9h8cqPj5mb6twELCWnkD63T+1YJ 4rfghwi72YtnZbvek7z+Wn/+9WCG9zZtl/6T83QvsQhHyXnVdJJCu75JyDq6DouL Z3CkOeCZB6lcQSYu6AMNagFQVhQOZ8Jecpp68aIr9zwdmllrf8uOOKQgORNcXEdk 3uChyNJIwChPRnQO8QJMmbX6stYzJgYkwtoCDKkbFp+ztA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:34 2025 by rpki-client