This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: tgvL7EgtlVBDDB8wc/TjVbPzx2heZS3/IwCubq7gCHo= Subject key identifier: 7F:30:C9:7A:E1:8D:30:40:2D:3B:20:75:0A:D5:67:1A:A6:F6:FB:4F Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 3CDABCCD908CE5A8D3C62E64E6D55E6C2CC63AEF Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa Signing time: Mon 19 Jan 2026 11:15:46 +0000 ROA not before: Mon 19 Jan 2026 11:10:46 +0000 ROA not after: Mon 18 Jan 2027 11:15:46 +0000 asID: 9304 IP address blocks: 141.11.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:da:bc:cd:90:8c:e5:a8:d3:c6:2e:64:e6:d5:5e:6c:2c:c6:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 19 11:10:46 2026 GMT Not After : Jan 18 11:15:46 2027 GMT Subject: CN=7F30C97AE18D30402D3B20750AD5671AA6F6FB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:49:8c:44:5c:0a:01:51:53:30:14:32:ad:21: 28:4a:db:77:b4:00:a9:90:a8:5e:8a:01:d8:b9:1b: 5e:4a:c7:1b:4b:27:ce:b5:e5:6e:a7:db:7f:b0:7f: 26:e1:4e:85:c0:5a:45:9f:08:aa:b2:d1:8c:06:65: 9e:fc:64:a5:a4:64:d0:e6:a7:28:0c:a0:33:32:ed: b3:e7:0e:83:fa:35:cb:3f:ac:7a:ec:8d:1f:36:93: 7f:e0:0d:b5:c1:5d:a1:a7:9c:04:ad:3a:9b:09:7c: fa:63:f1:37:f4:c6:ce:5a:d8:b1:1a:7b:58:2a:c9: a9:b2:f5:a1:09:6a:be:0e:0f:a1:5e:54:f3:46:67: 22:37:e4:8e:ef:40:82:53:a4:7e:da:9c:e9:89:3d: f5:b8:ff:21:b2:c3:dc:c2:93:22:98:15:cb:45:51: 7a:33:88:f8:b5:d9:d8:b9:e6:a3:5b:6e:d9:af:94: 79:d0:97:5c:c2:ac:2f:66:1d:7c:c5:5c:8f:e7:0b: b4:a9:e7:50:e1:9e:3d:c3:50:db:e4:3f:4a:b8:79: 4c:29:d1:1f:77:09:90:97:a8:05:8d:12:2d:af:03: 9e:9e:7c:e5:fe:97:19:0c:9a:ba:8e:9e:4d:65:80: 4a:a4:7d:e3:6f:2f:f7:59:d7:04:6d:90:04:67:27: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:30:C9:7A:E1:8D:30:40:2D:3B:20:75:0A:D5:67:1A:A6:F6:FB:4F X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:4e:b0:06:1c:00:66:f2:ee:aa:85:da:43:60:1a:f8:68:cd: 9f:1f:2f:54:c2:21:24:39:94:d6:86:da:49:37:09:75:13:34: c2:c8:8c:d1:90:f6:11:f3:5b:3f:2e:fa:7a:9d:89:9c:a2:57: b3:f3:a5:ec:56:43:0f:d1:c9:4f:5e:a4:4a:cc:78:f2:5c:d9: 9e:37:68:ad:b7:1a:f6:3b:00:83:5b:97:4e:03:a3:52:dd:e3: 90:41:8c:4e:86:34:98:1b:06:62:3c:8b:77:ee:04:8f:9e:fa: 21:17:d7:fc:27:13:5f:f7:6c:c9:3e:65:8b:c5:ee:21:da:ed: ad:8e:5a:3b:db:90:83:c2:6c:81:16:1f:9e:ad:7a:0f:94:5a: 38:77:db:d6:36:9b:de:6b:1d:8f:7d:cd:6e:8a:ed:63:f8:1d: 38:66:a6:5a:9b:a2:fa:8e:93:d8:0f:73:13:3a:34:0c:57:22: 98:4d:70:c9:ca:18:3e:5b:1d:62:3c:14:28:9c:ca:25:a9:51: 31:83:c2:19:7c:6e:42:a6:91:81:03:3d:d9:89:02:f1:8e:2e: ec:b4:37:97:ef:47:33:0e:f9:b9:21:ec:19:87:1e:4f:fe:f0: e4:6e:f3:2a:c1:91:c4:cf:40:3e:3c:91:e8:4d:65:79:4d:a2: b7:8d:e8:bc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUPNq8zZCM5ajTxi5k5tVebCzGOu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTkxMTEwNDZaFw0yNzAxMTgxMTE1NDZaMDMxMTAvBgNV BAMTKDdGMzBDOTdBRTE4RDMwNDAyRDNCMjA3NTBBRDU2NzFBQTZGNkZCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDySYxEXAoBUVMwFDKtIShK23e0 AKmQqF6KAdi5G15KxxtLJ8615W6n23+wfybhToXAWkWfCKqy0YwGZZ78ZKWkZNDm pygMoDMy7bPnDoP6Ncs/rHrsjR82k3/gDbXBXaGnnAStOpsJfPpj8Tf0xs5a2LEa e1gqyamy9aEJar4OD6FeVPNGZyI35I7vQIJTpH7anOmJPfW4/yGyw9zCkyKYFctF UXoziPi12di55qNbbtmvlHnQl1zCrC9mHXzFXI/nC7Sp51Dhnj3DUNvkP0q4eUwp 0R93CZCXqAWNEi2vA56efOX+lxkMmrqOnk1lgEqkfeNvL/dZ1wRtkARnJ+wFAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUfzDJeuGNMEAtOyB1CtVnGqb2+08wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0L2jAN BgkqhkiG9w0BAQsFAAOCAQEASk6wBhwAZvLuqoXaQ2Aa+GjNnx8vVMIhJDmU1oba STcJdRM0wsiM0ZD2EfNbPy76ep2JnKJXs/Ol7FZDD9HJT16kSsx48lzZnjdorbca 9jsAg1uXTgOjUt3jkEGMToY0mBsGYjyLd+4Ej576IRfX/CcTX/dsyT5li8XuIdrt rY5aO9uQg8JsgRYfnq16D5RaOHfb1jab3msdj33NbortY/gdOGamWpui+o6T2A9z Ezo0DFcimE1wycoYPlsdYjwUKJzKJalRMYPCGXxuQqaRgQM92YkC8Y4u7LQ3l+9H Mw75uSHsGYceT/7w5G7zKsGRxM9APjyR6E1leU2it43ovA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:07 2026 by rpki-client