This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: Yx0thsRks0lm5nVSN1Qr0o6lJltcWYE8dI0rPirSfsQ= Subject key identifier: FE:74:F6:E4:DC:F2:01:79:F1:81:F0:53:32:62:05:EE:D7:58:23:8E Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 4F94166E55E8E183BF0FCFB65D47B4D304F22134 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa Signing time: Sat 17 Jan 2026 13:35:13 +0000 ROA not before: Sat 17 Jan 2026 13:30:13 +0000 ROA not after: Sat 16 Jan 2027 13:35:13 +0000 asID: 9304 IP address blocks: 96.62.59.0/24 maxlen: 24 96.62.101.0/24 maxlen: 24 96.62.103.0/24 maxlen: 24 96.62.152.0/24 maxlen: 24 96.62.156.0/22 maxlen: 24 96.62.217.0/24 maxlen: 24 96.62.218.0/24 maxlen: 24 96.62.224.0/24 maxlen: 24 96.62.229.0/24 maxlen: 24 96.62.250.0/24 maxlen: 24 136.143.243.0/24 maxlen: 24 136.143.245.0/24 maxlen: 24 136.143.246.0/24 maxlen: 24 136.143.252.0/24 maxlen: 24 136.143.254.0/24 maxlen: 24 140.150.154.0/24 maxlen: 24 140.150.224.0/24 maxlen: 24 140.150.225.0/24 maxlen: 24 140.150.238.0/24 maxlen: 24 140.150.239.0/24 maxlen: 24 140.233.173.0/24 maxlen: 24 140.233.174.0/24 maxlen: 24 140.233.177.0/24 maxlen: 24 143.14.1.0/24 maxlen: 24 143.14.7.0/24 maxlen: 24 143.14.16.0/24 maxlen: 24 143.14.47.0/24 maxlen: 24 143.14.55.0/24 maxlen: 24 143.14.59.0/24 maxlen: 24 143.14.87.0/24 maxlen: 24 143.14.91.0/24 maxlen: 24 143.14.94.0/24 maxlen: 24 143.14.144.0/24 maxlen: 24 143.14.196.0/24 maxlen: 24 143.14.214.0/24 maxlen: 24 143.14.222.0/24 maxlen: 24 146.103.22.0/24 maxlen: 24 146.103.35.0/24 maxlen: 24 146.103.37.0/24 maxlen: 24 146.103.52.0/24 maxlen: 24 146.103.57.0/24 maxlen: 24 147.79.7.0/24 maxlen: 24 147.79.17.0/24 maxlen: 24 147.79.19.0/24 maxlen: 24 147.79.60.0/24 maxlen: 24 148.135.199.0/24 maxlen: 24 148.135.202.0/24 maxlen: 24 150.241.128.0/24 maxlen: 24 150.241.130.0/24 maxlen: 24 150.241.138.0/24 maxlen: 24 150.241.140.0/24 maxlen: 24 150.241.142.0/24 maxlen: 24 150.241.208.0/24 maxlen: 24 150.241.228.0/24 maxlen: 24 150.241.234.0/24 maxlen: 24 150.241.242.0/24 maxlen: 24 155.117.6.0/24 maxlen: 24 155.117.16.0/24 maxlen: 24 155.117.63.0/24 maxlen: 24 155.117.76.0/24 maxlen: 24 155.117.108.0/24 maxlen: 24 155.117.112.0/24 maxlen: 24 155.117.120.0/24 maxlen: 24 155.117.136.0/24 maxlen: 24 155.117.139.0/24 maxlen: 24 155.117.143.0/24 maxlen: 24 155.117.157.0/24 maxlen: 24 155.117.210.0/24 maxlen: 24 162.141.5.0/24 maxlen: 24 162.141.8.0/24 maxlen: 24 162.141.19.0/24 maxlen: 24 162.141.24.0/22 maxlen: 24 162.141.28.0/22 maxlen: 24 162.141.32.0/22 maxlen: 24 162.141.40.0/22 maxlen: 24 162.141.50.0/24 maxlen: 24 162.141.56.0/22 maxlen: 24 162.141.60.0/22 maxlen: 24 162.141.66.0/24 maxlen: 24 162.141.72.0/22 maxlen: 24 162.141.82.0/24 maxlen: 24 162.141.83.0/24 maxlen: 24 162.141.101.0/24 maxlen: 24 162.141.105.0/24 maxlen: 24 162.141.107.0/24 maxlen: 24 162.141.109.0/24 maxlen: 24 162.141.116.0/24 maxlen: 24 162.141.123.0/24 maxlen: 24 162.141.144.0/21 maxlen: 24 162.141.168.0/21 maxlen: 24 162.141.181.0/24 maxlen: 24 162.141.184.0/21 maxlen: 24 167.148.16.0/21 maxlen: 24 167.148.24.0/22 maxlen: 24 167.148.48.0/21 maxlen: 24 167.148.56.0/22 maxlen: 24 167.148.64.0/22 maxlen: 24 167.148.76.0/22 maxlen: 24 167.148.88.0/21 maxlen: 24 167.148.99.0/24 maxlen: 24 167.148.108.0/22 maxlen: 24 167.148.130.0/23 maxlen: 23 167.148.194.0/24 maxlen: 24 167.148.208.0/24 maxlen: 24 168.222.5.0/24 maxlen: 24 168.222.10.0/24 maxlen: 24 168.222.14.0/24 maxlen: 24 168.222.15.0/24 maxlen: 24 168.222.17.0/24 maxlen: 24 168.222.18.0/23 maxlen: 24 168.222.24.0/24 maxlen: 24 168.222.25.0/24 maxlen: 24 168.222.26.0/24 maxlen: 24 168.222.30.0/23 maxlen: 24 168.222.50.0/24 maxlen: 24 168.222.51.0/24 maxlen: 24 168.222.52.0/24 maxlen: 24 168.222.53.0/24 maxlen: 24 168.222.54.0/24 maxlen: 24 203.100.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:94:16:6e:55:e8:e1:83:bf:0f:cf:b6:5d:47:b4:d3:04:f2:21:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 17 13:30:13 2026 GMT Not After : Jan 16 13:35:13 2027 GMT Subject: CN=FE74F6E4DCF20179F181F053326205EED758238E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:32:a6:31:82:20:16:46:c2:12:28:5c:79: 12:38:41:57:63:14:02:85:83:34:44:da:88:64:3c: 1c:45:ee:ad:47:0e:e9:1b:9e:35:b3:20:d2:75:2e: 9e:e6:8f:e2:ca:c4:1b:75:97:7a:20:e7:d1:11:0d: aa:e2:06:fd:43:2d:40:c1:75:13:dc:10:69:00:f1: 62:31:62:b4:7f:05:19:12:1d:77:92:00:f5:b0:40: a1:6e:96:ac:19:87:ea:ee:75:9e:f7:2b:cf:70:88: aa:94:85:fe:96:22:e4:14:2e:d7:c6:7a:af:4d:47: 51:e6:ba:66:06:67:6e:34:b9:fc:36:94:96:14:52: 57:5d:21:06:64:a2:62:c0:98:cc:77:46:87:d9:1b: ee:f7:cc:ea:89:44:71:6b:19:b3:06:6f:a8:61:b3: 5d:35:e6:e8:42:e5:e9:28:82:85:de:97:1a:ad:cf: 35:37:05:93:3e:08:02:3f:74:50:63:86:99:5d:2e: e1:e9:a5:f8:27:cb:b7:83:5f:c1:58:6b:26:b6:8a: ed:d5:8b:0a:f4:35:33:0f:96:0a:1d:aa:cd:f0:a2: d9:d8:e8:24:67:79:0f:21:ac:c7:81:55:57:c6:30: 4f:ed:a7:2d:49:52:55:22:5f:39:38:f7:db:57:f9: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:F6:E4:DC:F2:01:79:F1:81:F0:53:32:62:05:EE:D7:58:23:8E X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.59.0/24 96.62.101.0/24 96.62.103.0/24 96.62.152.0/24 96.62.156.0/22 96.62.217.0-96.62.218.255 96.62.224.0/24 96.62.229.0/24 96.62.250.0/24 136.143.243.0/24 136.143.245.0-136.143.246.255 136.143.252.0/24 136.143.254.0/24 140.150.154.0/24 140.150.224.0/23 140.150.238.0/23 140.233.173.0-140.233.174.255 140.233.177.0/24 143.14.1.0/24 143.14.7.0/24 143.14.16.0/24 143.14.47.0/24 143.14.55.0/24 143.14.59.0/24 143.14.87.0/24 143.14.91.0/24 143.14.94.0/24 143.14.144.0/24 143.14.196.0/24 143.14.214.0/24 143.14.222.0/24 146.103.22.0/24 146.103.35.0/24 146.103.37.0/24 146.103.52.0/24 146.103.57.0/24 147.79.7.0/24 147.79.17.0/24 147.79.19.0/24 147.79.60.0/24 148.135.199.0/24 148.135.202.0/24 150.241.128.0/24 150.241.130.0/24 150.241.138.0/24 150.241.140.0/24 150.241.142.0/24 150.241.208.0/24 150.241.228.0/24 150.241.234.0/24 150.241.242.0/24 155.117.6.0/24 155.117.16.0/24 155.117.63.0/24 155.117.76.0/24 155.117.108.0/24 155.117.112.0/24 155.117.120.0/24 155.117.136.0/24 155.117.139.0/24 155.117.143.0/24 155.117.157.0/24 155.117.210.0/24 162.141.5.0/24 162.141.8.0/24 162.141.19.0/24 162.141.24.0-162.141.35.255 162.141.40.0/22 162.141.50.0/24 162.141.56.0/21 162.141.66.0/24 162.141.72.0/22 162.141.82.0/23 162.141.101.0/24 162.141.105.0/24 162.141.107.0/24 162.141.109.0/24 162.141.116.0/24 162.141.123.0/24 162.141.144.0/21 162.141.168.0/21 162.141.181.0/24 162.141.184.0/21 167.148.16.0-167.148.27.255 167.148.48.0-167.148.59.255 167.148.64.0/22 167.148.76.0/22 167.148.88.0/21 167.148.99.0/24 167.148.108.0/22 167.148.130.0/23 167.148.194.0/24 167.148.208.0/24 168.222.5.0/24 168.222.10.0/24 168.222.14.0/23 168.222.17.0-168.222.19.255 168.222.24.0-168.222.26.255 168.222.30.0/23 168.222.50.0-168.222.54.255 203.100.210.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b9:bc:8b:70:73:c9:22:60:0a:47:27:f7:d8:bc:73:47:e3: c4:bd:b1:57:55:9f:aa:44:a0:d9:50:88:20:25:57:5c:8b:3d: 4f:fd:da:0b:35:35:b5:45:db:82:fc:d6:da:91:12:73:a5:3b: 5f:01:56:3b:04:29:16:00:f9:f4:63:9c:56:24:34:48:09:57: 11:ce:1d:49:c0:56:d2:32:77:85:41:0c:54:be:e0:62:3a:20: 1b:1a:71:68:1a:17:aa:b7:0c:8d:63:92:2d:3b:44:03:d6:f3: 4f:6f:72:1a:76:2e:37:47:3c:a1:0b:82:b6:23:5d:87:22:4e: 2b:d4:bd:8a:2a:e0:30:28:9b:34:b4:2f:7c:f9:75:7f:09:12: 83:cc:c9:e4:56:a1:dc:db:57:4b:13:09:5a:a1:29:2b:cf:71: 39:66:b9:73:54:11:fe:76:5a:f8:b5:bb:de:34:21:ef:ab:b8: 7a:8d:9a:e5:46:49:c7:0d:fc:2b:5b:50:69:2f:e9:03:95:03: d9:06:94:a4:63:79:2d:3b:aa:6e:60:86:1a:f6:3d:42:26:d0: bb:5e:78:87:31:50:c7:a9:1d:17:af:e8:5e:b1:f1:3b:81:76: 57:86:de:32:41:f2:f6:c4:36:cb:97:73:5a:0d:ff:cc:5f:03: b4:19:62:2b -----BEGIN CERTIFICATE----- MIIHqDCCBpCgAwIBAgIUT5QWblXo4YO/D8+2XUe00wTyITQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTcxMzMwMTNaFw0yNzAxMTYxMzM1MTNaMDMxMTAvBgNV BAMTKEZFNzRGNkU0RENGMjAxNzlGMTgxRjA1MzMyNjIwNUVFRDc1ODIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRTKmMYIgFkbCEihceRI4QVdj FAKFgzRE2ohkPBxF7q1HDukbnjWzINJ1Lp7mj+LKxBt1l3og59ERDariBv1DLUDB dRPcEGkA8WIxYrR/BRkSHXeSAPWwQKFulqwZh+rudZ73K89wiKqUhf6WIuQULtfG eq9NR1HmumYGZ240ufw2lJYUUlddIQZkomLAmMx3RofZG+73zOqJRHFrGbMGb6hh s1015uhC5ekogoXelxqtzzU3BZM+CAI/dFBjhpldLuHppfgny7eDX8FYaya2iu3V iwr0NTMPlgodqs3wotnY6CRneQ8hrMeBVVfGME/tpy1JUlUiXzk499tX+TNPAgMB AAGjggSyMIIErjAdBgNVHQ4EFgQU/nT25NzyAXnxgfBTMmIF7tdYI44wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAscGCCsGAQUFBwEHAQH/BIICtjCCArIwggKuBAIAATCC AqYDBABgPjsDBABgPmUDBABgPmcDBABgPpgDBAJgPpwwDAMEAGA+2QMEAGA+2gME AGA+4AMEAGA+5QMEAGA++gMEAIiP8zAMAwQAiI/1AwQAiI/2AwQAiI/8AwQAiI/+ AwQAjJaaAwQBjJbgAwQBjJbuMAwDBACM6a0DBACM6a4DBACM6bEDBACPDgEDBACP DgcDBACPDhADBACPDi8DBACPDjcDBACPDjsDBACPDlcDBACPDlsDBACPDl4DBACP DpADBACPDsQDBACPDtYDBACPDt4DBACSZxYDBACSZyMDBACSZyUDBACSZzQDBACS ZzkDBACTTwcDBACTTxEDBACTTxMDBACTTzwDBACUh8cDBACUh8oDBACW8YADBACW 8YIDBACW8YoDBACW8YwDBACW8Y4DBACW8dADBACW8eQDBACW8eoDBACW8fIDBACb dQYDBACbdRADBACbdT8DBACbdUwDBACbdWwDBACbdXADBACbdXgDBACbdYgDBACb dYsDBACbdY8DBACbdZ0DBACbddIDBACijQUDBACijQgDBACijRMwDAMEA6KNGAME AqKNIAMEAqKNKAMEAKKNMgMEA6KNOAMEAKKNQgMEAqKNSAMEAaKNUgMEAKKNZQME AKKNaQMEAKKNawMEAKKNbQMEAKKNdAMEAKKNewMEA6KNkAMEA6KNqAMEAKKNtQME A6KNuDAMAwQEp5QQAwQCp5QYMAwDBASnlDADBAKnlDgDBAKnlEADBAKnlEwDBAOn lFgDBACnlGMDBAKnlGwDBAGnlIIDBACnlMIDBACnlNADBACo3gUDBACo3goDBAGo 3g4wDAMEAKjeEQMEAqjeEDAMAwQDqN4YAwQAqN4aAwQBqN4eMAwDBAGo3jIDBACo 3jYDBADLZNIwDQYJKoZIhvcNAQELBQADggEBABi5vItwc8kiYApHJ/fYvHNH48S9 sVdVn6pEoNlQiCAlV1yLPU/92gs1NbVF24L81tqREnOlO18BVjsEKRYA+fRjnFYk NEgJVxHOHUnAVtIyd4VBDFS+4GI6IBsacWgaF6q3DI1jki07RAPW809vchp2LjdH PKELgrYjXYciTivUvYoq4DAomzS0L3z5dX8JEoPMyeRWodzbV0sTCVqhKSvPcTlm uXNUEf52Wvi1u940Ie+ruHqNmuVGSccN/CtbUGkv6QOVA9kGlKRjeS07qm5ghhr2 PUIm0LteeIcxUMepHRev6F6x8TuBdleG3jJB8vbENsuXc1oN/8xfA7QZYis= -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:12 2026 by rpki-client