This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: JjhQVv1Hqj306sFUEQhbuJGwXxHIq/2j3gvwTB5/yOo= Subject key identifier: D5:DF:60:D2:68:5D:0B:50:64:0C:18:DB:9F:76:CC:B1:92:D3:32:BA Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 747B288BF5EA4888386CA091D8929982E05C3964 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa Signing time: Sun 09 Nov 2025 16:52:05 +0000 ROA not before: Sun 09 Nov 2025 16:47:05 +0000 ROA not after: Sun 08 Nov 2026 16:52:05 +0000 asID: 9304 IP address blocks: 194.60.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7b:28:8b:f5:ea:48:88:38:6c:a0:91:d8:92:99:82:e0:5c:39:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 9 16:47:05 2025 GMT Not After : Nov 8 16:52:05 2026 GMT Subject: CN=D5DF60D2685D0B50640C18DB9F76CCB192D332BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:cf:b9:19:87:9b:57:68:23:36:9f:09:6a: be:7b:be:e9:9f:1d:aa:ff:16:56:62:15:a7:da:cc: ce:5b:0b:4a:35:98:fe:8b:0c:8b:39:6c:db:69:55: a8:6d:3d:c3:92:28:e8:7f:ef:0c:28:41:5d:77:70: 3a:a7:cf:5e:84:a8:d1:52:d2:e6:eb:f6:c7:65:51: 2a:8a:07:6e:25:6a:8f:12:de:47:b2:a9:b0:cf:78: 66:19:50:24:a5:03:45:30:74:f2:02:bf:3a:2a:bf: 90:36:bc:4f:bf:a0:80:b6:27:4b:ad:8a:8f:19:a5: 5c:cb:fe:a2:35:99:08:04:5d:1c:fe:59:71:59:7a: 48:9a:8c:80:ed:21:83:d8:5b:b8:08:f6:56:bf:d1: 8b:8b:34:7f:49:35:b9:64:68:dc:51:a5:03:04:f8: 70:7f:ca:b2:c3:8e:91:b6:c2:cf:85:ba:c8:ce:d8: 50:7b:50:e9:59:bf:75:4b:82:17:31:4d:d4:92:df: a5:77:c4:93:a7:35:e1:31:56:9d:92:99:5e:88:8b: 18:27:0a:d9:b9:a5:72:bf:53:7f:42:72:ce:13:5b: fa:e1:7b:66:37:82:2d:58:18:68:88:45:93:66:c8: ba:b0:26:c9:0b:0e:69:2a:0c:a4:08:bd:68:1e:83: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:60:D2:68:5D:0B:50:64:0C:18:DB:9F:76:CC:B1:92:D3:32:BA X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.90.0/24 Signature Algorithm: sha256WithRSAEncryption 16:20:19:d8:1d:aa:1e:eb:73:21:ab:71:a4:eb:60:f4:44:bb: 86:97:ad:46:f8:31:47:1e:db:22:d9:56:54:d1:10:cc:28:9f: fb:e2:bd:7a:54:ce:4b:59:f9:f0:e9:59:c7:54:8f:53:81:19: 76:11:b3:66:f6:7c:2b:d0:00:94:77:ff:5f:b6:dd:68:fb:a8: a2:c8:8f:cc:d9:55:a8:fb:e3:b1:06:43:40:7a:63:4e:81:4c: 5c:04:ee:40:af:6c:cb:41:dd:85:a0:38:fe:75:e0:41:e6:5c: 10:e4:63:38:45:cc:04:c5:81:2c:74:4a:e8:f3:48:c4:03:39: 5d:b5:0f:73:dc:8a:50:e4:51:8d:ff:46:63:25:13:4b:df:4f: f0:f5:5b:b7:44:50:41:66:92:fd:be:d7:68:91:2d:a5:31:fc: 21:7e:65:f3:72:e4:f8:1d:7f:c3:b3:a7:92:9e:75:4c:9c:1c: fe:62:2f:16:cb:87:21:c8:4e:ee:3e:a1:5c:23:b4:d0:69:ed: d5:52:4d:8e:90:b1:14:ef:e6:bf:62:5f:eb:93:f2:6b:e4:82: a5:da:39:ad:67:d1:b1:17:ed:2f:25:af:5e:ca:52:9e:4b:6f: 11:44:ee:b6:40:c9:7a:56:51:1c:fe:5b:25:21:63:b5:4a:06: 55:5a:e0:d0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUdHsoi/XqSIg4bKCR2JKZguBcOWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMDkxNjQ3MDVaFw0yNjExMDgxNjUyMDVaMDMxMTAvBgNV BAMTKEQ1REY2MEQyNjg1RDBCNTA2NDBDMThEQjlGNzZDQ0IxOTJEMzMyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c8+5GYebV2gjNp8Jar57vumf Har/FlZiFafazM5bC0o1mP6LDIs5bNtpVahtPcOSKOh/7wwoQV13cDqnz16EqNFS 0ubr9sdlUSqKB24lao8S3keyqbDPeGYZUCSlA0UwdPICvzoqv5A2vE+/oIC2J0ut io8ZpVzL/qI1mQgEXRz+WXFZekiajIDtIYPYW7gI9la/0YuLNH9JNblkaNxRpQME +HB/yrLDjpG2ws+FusjO2FB7UOlZv3VLghcxTdSS36V3xJOnNeExVp2SmV6Iixgn Ctm5pXK/U39Ccs4TW/rhe2Y3gi1YGGiIRZNmyLqwJskLDmkqDKQIvWgegx6LAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQU1d9g0mhdC1BkDBjbn3bMsZLTMrowHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI8WjAN BgkqhkiG9w0BAQsFAAOCAQEAFiAZ2B2qHutzIatxpOtg9ES7hpetRvgxRx7bItlW VNEQzCif++K9elTOS1n58OlZx1SPU4EZdhGzZvZ8K9AAlHf/X7bdaPuoosiPzNlV qPvjsQZDQHpjToFMXATuQK9sy0HdhaA4/nXgQeZcEORjOEXMBMWBLHRK6PNIxAM5 XbUPc9yKUORRjf9GYyUTS99P8PVbt0RQQWaS/b7XaJEtpTH8IX5l83Lk+B1/w7On kp51TJwc/mIvFsuHIchO7j6hXCO00Gnt1VJNjpCxFO/mv2Jf65Pya+SCpdo5rWfR sRftLyWvXspSnktvEUTutkDJelZRHP5bJSFjtUoGVVrg0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:55 2025 by rpki-client