This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: C0thWMzqxOlVq43wDFgywP6aTwB16EtJEGfP3pPmhA8= Subject key identifier: 07:47:3D:1F:E6:A7:86:A4:21:92:DF:EF:4F:5D:3E:26:B4:12:AC:EA Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 691F3B9A34E831B8F686006B54961204835649E1 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa Signing time: Wed 03 Dec 2025 00:05:52 +0000 ROA not before: Wed 03 Dec 2025 00:00:52 +0000 ROA not after: Wed 02 Dec 2026 00:05:52 +0000 asID: 9304 IP address blocks: 96.62.59.0/24 maxlen: 24 96.62.156.0/22 maxlen: 24 96.62.224.0/24 maxlen: 24 96.62.229.0/24 maxlen: 24 136.143.243.0/24 maxlen: 24 136.143.245.0/24 maxlen: 24 136.143.246.0/24 maxlen: 24 136.143.252.0/24 maxlen: 24 136.143.254.0/24 maxlen: 24 143.14.33.0/24 maxlen: 24 143.14.55.0/24 maxlen: 24 143.14.87.0/24 maxlen: 24 143.14.94.0/24 maxlen: 24 143.14.111.0/24 maxlen: 24 143.14.131.0/24 maxlen: 24 143.14.144.0/24 maxlen: 24 143.14.181.0/24 maxlen: 24 143.14.182.0/24 maxlen: 24 143.14.184.0/24 maxlen: 24 143.14.185.0/24 maxlen: 24 143.14.186.0/24 maxlen: 24 143.14.187.0/24 maxlen: 24 143.14.196.0/24 maxlen: 24 143.14.214.0/24 maxlen: 24 143.14.222.0/24 maxlen: 24 146.103.52.0/24 maxlen: 24 147.79.17.0/24 maxlen: 24 148.135.161.0/24 maxlen: 24 148.135.255.0/24 maxlen: 24 150.241.130.0/24 maxlen: 24 150.241.137.0/24 maxlen: 24 150.241.138.0/24 maxlen: 24 150.241.139.0/24 maxlen: 24 150.241.140.0/24 maxlen: 24 150.241.141.0/24 maxlen: 24 150.241.142.0/24 maxlen: 24 150.241.143.0/24 maxlen: 24 150.241.208.0/24 maxlen: 24 150.241.234.0/24 maxlen: 24 155.117.4.0/23 maxlen: 24 155.117.108.0/24 maxlen: 24 155.117.120.0/24 maxlen: 24 155.117.138.0/24 maxlen: 24 155.117.139.0/24 maxlen: 24 155.117.143.0/24 maxlen: 24 155.117.154.0/24 maxlen: 24 155.117.210.0/24 maxlen: 24 162.141.5.0/24 maxlen: 24 162.141.8.0/24 maxlen: 24 162.141.19.0/24 maxlen: 24 162.141.24.0/22 maxlen: 24 162.141.28.0/22 maxlen: 24 162.141.32.0/22 maxlen: 24 162.141.40.0/22 maxlen: 24 162.141.50.0/24 maxlen: 24 162.141.56.0/22 maxlen: 24 162.141.60.0/22 maxlen: 24 162.141.66.0/24 maxlen: 24 162.141.72.0/22 maxlen: 24 162.141.82.0/24 maxlen: 24 162.141.101.0/24 maxlen: 24 162.141.109.0/24 maxlen: 24 162.141.144.0/21 maxlen: 24 162.141.168.0/21 maxlen: 24 162.141.181.0/24 maxlen: 24 162.141.184.0/21 maxlen: 24 167.148.16.0/21 maxlen: 24 167.148.24.0/22 maxlen: 24 167.148.48.0/21 maxlen: 24 167.148.56.0/22 maxlen: 24 167.148.64.0/22 maxlen: 24 167.148.76.0/22 maxlen: 24 167.148.88.0/21 maxlen: 24 167.148.99.0/24 maxlen: 24 167.148.108.0/22 maxlen: 24 167.148.130.0/23 maxlen: 23 167.148.194.0/24 maxlen: 24 167.148.208.0/24 maxlen: 24 168.222.5.0/24 maxlen: 24 168.222.10.0/24 maxlen: 24 168.222.14.0/24 maxlen: 24 168.222.15.0/24 maxlen: 24 168.222.17.0/24 maxlen: 24 168.222.18.0/23 maxlen: 24 168.222.24.0/24 maxlen: 24 168.222.25.0/24 maxlen: 24 168.222.26.0/24 maxlen: 24 168.222.30.0/23 maxlen: 24 203.100.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1f:3b:9a:34:e8:31:b8:f6:86:00:6b:54:96:12:04:83:56:49:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 3 00:00:52 2025 GMT Not After : Dec 2 00:05:52 2026 GMT Subject: CN=07473D1FE6A786A42192DFEF4F5D3E26B412ACEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4e:1b:e6:57:4f:76:d9:2f:06:3f:fd:0a:72: 0b:a9:69:c4:fd:8b:70:2a:37:dc:9f:6f:41:7d:ce: 0d:49:dd:1f:83:f3:82:ff:78:f3:fb:12:34:1e:bb: 7e:e0:be:3a:71:d3:0b:22:39:4f:b5:bd:e1:25:fb: 18:f3:e0:4b:47:d0:f2:9c:31:e3:ea:00:fb:ff:9e: b0:95:eb:ea:8f:ca:f2:31:65:9c:24:c0:d3:11:ac: 16:81:92:55:c5:76:23:d0:94:46:ce:e2:09:59:4c: fa:e4:13:c5:82:64:48:6f:d5:60:7d:53:4f:a1:7c: 09:d1:e6:47:92:ff:92:8c:89:99:6a:d2:de:7f:b9: fe:21:53:85:83:cf:57:28:53:20:59:bf:56:16:8f: 72:80:5b:cc:c8:97:85:39:87:10:3b:a4:28:35:8d: 07:05:93:31:56:1d:27:b5:43:86:97:83:c4:35:ab: 84:a4:e3:81:88:5b:70:01:a4:b8:3d:01:5a:61:64: c8:e7:80:65:1e:51:8d:ae:5f:a4:8d:ec:f1:14:75: 37:5a:39:e3:04:cc:36:f5:5d:a8:9e:31:de:91:ce: 78:ca:46:fe:e6:2f:b9:4c:7d:c1:4e:5d:e3:e3:ff: aa:9b:57:36:a5:fc:6a:79:c8:97:48:75:63:b0:14: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:3D:1F:E6:A7:86:A4:21:92:DF:EF:4F:5D:3E:26:B4:12:AC:EA X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.59.0/24 96.62.156.0/22 96.62.224.0/24 96.62.229.0/24 136.143.243.0/24 136.143.245.0-136.143.246.255 136.143.252.0/24 136.143.254.0/24 143.14.33.0/24 143.14.55.0/24 143.14.87.0/24 143.14.94.0/24 143.14.111.0/24 143.14.131.0/24 143.14.144.0/24 143.14.181.0-143.14.182.255 143.14.184.0/22 143.14.196.0/24 143.14.214.0/24 143.14.222.0/24 146.103.52.0/24 147.79.17.0/24 148.135.161.0/24 148.135.255.0/24 150.241.130.0/24 150.241.137.0-150.241.143.255 150.241.208.0/24 150.241.234.0/24 155.117.4.0/23 155.117.108.0/24 155.117.120.0/24 155.117.138.0/23 155.117.143.0/24 155.117.154.0/24 155.117.210.0/24 162.141.5.0/24 162.141.8.0/24 162.141.19.0/24 162.141.24.0-162.141.35.255 162.141.40.0/22 162.141.50.0/24 162.141.56.0/21 162.141.66.0/24 162.141.72.0/22 162.141.82.0/24 162.141.101.0/24 162.141.109.0/24 162.141.144.0/21 162.141.168.0/21 162.141.181.0/24 162.141.184.0/21 167.148.16.0-167.148.27.255 167.148.48.0-167.148.59.255 167.148.64.0/22 167.148.76.0/22 167.148.88.0/21 167.148.99.0/24 167.148.108.0/22 167.148.130.0/23 167.148.194.0/24 167.148.208.0/24 168.222.5.0/24 168.222.10.0/24 168.222.14.0/23 168.222.17.0-168.222.19.255 168.222.24.0-168.222.26.255 168.222.30.0/23 203.100.210.0/24 Signature Algorithm: sha256WithRSAEncryption 82:32:e7:74:95:4b:1b:40:c4:3e:0a:e5:aa:2b:f3:50:a9:fd: 6f:cf:82:49:ed:92:cc:1c:6a:51:43:51:26:7a:d3:55:ac:31: 42:e0:16:70:66:6b:92:d8:bb:a2:f9:a3:b8:3b:35:67:d8:bc: 88:8d:09:7a:00:e9:24:b7:96:07:14:cc:2b:81:5c:ce:1a:41: bc:86:cd:d1:e4:d9:b4:fe:23:8c:65:b3:c2:06:93:c9:93:9c: 80:06:fd:0d:02:03:70:53:4c:26:3d:f2:14:32:c1:dc:f0:ae: 5b:7b:76:2e:f9:b1:31:8a:47:36:eb:7e:55:b9:49:be:50:2f: df:39:db:83:70:8c:98:c7:b1:ff:b3:40:d1:08:4b:8a:cf:1c: 7e:61:25:04:15:a5:5c:f1:de:83:12:57:21:a4:e7:69:b6:05: 9f:4b:5b:2b:d6:9e:a7:19:bf:23:38:6b:30:ba:72:84:78:bf: 96:e7:e4:da:dd:10:30:d2:9d:83:d8:d6:c6:a9:35:29:7e:6e: 72:41:93:ef:61:ca:2f:26:e4:50:e2:a2:48:7e:a9:eb:7e:6b: 49:bd:09:6a:29:12:ef:f9:03:f1:ed:09:2c:8a:fa:d6:bf:43: 3e:ca:14:f2:04:79:15:40:2f:f8:64:b2:db:1f:e0:81:de:4c: d0:2e:7a:6c -----BEGIN CERTIFICATE----- MIIG2jCCBcKgAwIBAgIUaR87mjToMbj2hgBrVJYSBINWSeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDMwMDAwNTJaFw0yNjEyMDIwMDA1NTJaMDMxMTAvBgNV BAMTKDA3NDczRDFGRTZBNzg2QTQyMTkyREZFRjRGNUQzRTI2QjQxMkFDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrThvmV0922S8GP/0KcgupacT9 i3AqN9yfb0F9zg1J3R+D84L/ePP7EjQeu37gvjpx0wsiOU+1veEl+xjz4EtH0PKc MePqAPv/nrCV6+qPyvIxZZwkwNMRrBaBklXFdiPQlEbO4glZTPrkE8WCZEhv1WB9 U0+hfAnR5keS/5KMiZlq0t5/uf4hU4WDz1coUyBZv1YWj3KAW8zIl4U5hxA7pCg1 jQcFkzFWHSe1Q4aXg8Q1q4Sk44GIW3ABpLg9AVphZMjngGUeUY2uX6SN7PEUdTda OeMEzDb1XaieMd6RznjKRv7mL7lMfcFOXePj/6qbVzal/Gp5yJdIdWOwFKk3AgMB AAGjggPkMIID4DAdBgNVHQ4EFgQUB0c9H+anhqQhkt/vT10+JrQSrOowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAfkGCCsGAQUFBwEHAQH/BIIB6DCCAeQwggHgBAIAATCC AdgDBABgPjsDBAJgPpwDBABgPuADBABgPuUDBACIj/MwDAMEAIiP9QMEAIiP9gME AIiP/AMEAIiP/gMEAI8OIQMEAI8ONwMEAI8OVwMEAI8OXgMEAI8ObwMEAI8OgwME AI8OkDAMAwQAjw61AwQAjw62AwQCjw64AwQAjw7EAwQAjw7WAwQAjw7eAwQAkmc0 AwQAk08RAwQAlIehAwQAlIf/AwQAlvGCMAwDBACW8YkDBASW8YADBACW8dADBACW 8eoDBAGbdQQDBACbdWwDBACbdXgDBAGbdYoDBACbdY8DBACbdZoDBACbddIDBACi jQUDBACijQgDBACijRMwDAMEA6KNGAMEAqKNIAMEAqKNKAMEAKKNMgMEA6KNOAME AKKNQgMEAqKNSAMEAKKNUgMEAKKNZQMEAKKNbQMEA6KNkAMEA6KNqAMEAKKNtQME A6KNuDAMAwQEp5QQAwQCp5QYMAwDBASnlDADBAKnlDgDBAKnlEADBAKnlEwDBAOn lFgDBACnlGMDBAKnlGwDBAGnlIIDBACnlMIDBACnlNADBACo3gUDBACo3goDBAGo 3g4wDAMEAKjeEQMEAqjeEDAMAwQDqN4YAwQAqN4aAwQBqN4eAwQAy2TSMA0GCSqG SIb3DQEBCwUAA4IBAQCCMud0lUsbQMQ+CuWqK/NQqf1vz4JJ7ZLMHGpRQ1EmetNV rDFC4BZwZmuS2Lui+aO4OzVn2LyIjQl6AOkkt5YHFMwrgVzOGkG8hs3R5Nm0/iOM ZbPCBpPJk5yABv0NAgNwU0wmPfIUMsHc8K5be3Yu+bExikc2635VuUm+UC/fOduD cIyYx7H/s0DRCEuKzxx+YSUEFaVc8d6DElchpOdptgWfS1sr1p6nGb8jOGswunKE eL+W5+Ta3RAw0p2D2NbGqTUpfm5yQZPvYcovJuRQ4qJIfqnrfmtJvQlqKRLv+QPx 7QksivrWv0M+yhTyBHkVQC/4ZLLbH+CB3kzQLnps -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:43 2025 by rpki-client