Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: r7hWfqqS/VhWWxt/MQQkIVZfx4mwa+hv9LHDXDLjQ0A=
Subject key identifier: FB:C6:F7:09:A7:D3:84:85:64:91:7D:E8:6F:B4:2F:DE:BA:BE:98:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 18BD9539EC12C103304B266151A76E5F1AE7A7AE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
Signing time: Tue 20 Oct 2026 04:16:09 +0000
ROA not before: Tue 20 Oct 2026 04:11:09 +0000
ROA not after: Tue 19 Oct 2027 04:16:09 +0000
asID: 9009
IP address blocks: 96.62.251.0/24 maxlen: 24
96.62.254.0/24 maxlen: 24
136.143.248.0/24 maxlen: 24
136.143.249.0/24 maxlen: 24
136.143.250.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.250.0/24 maxlen: 24
145.223.41.0/24 maxlen: 24
145.223.47.0/24 maxlen: 24
147.79.28.0/24 maxlen: 24
148.135.212.0/22 maxlen: 24
148.135.220.0/22 maxlen: 24
148.135.228.0/22 maxlen: 24
148.135.236.0/22 maxlen: 24
148.135.244.0/22 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
158.140.194.0/24 maxlen: 24
158.140.196.0/24 maxlen: 24
158.140.199.0/24 maxlen: 24
158.140.200.0/24 maxlen: 24
158.140.202.0/24 maxlen: 24
158.140.203.0/24 maxlen: 24
158.140.205.0/24 maxlen: 24
158.140.214.0/24 maxlen: 24
162.141.12.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.87.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
203.160.116.0/24 maxlen: 24
203.160.117.0/24 maxlen: 24
203.160.125.0/24 maxlen: 24
203.160.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bd:95:39:ec:12:c1:03:30:4b:26:61:51:a7:6e:5f:1a:e7:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 20 04:11:09 2026 GMT
Not After : Oct 19 04:16:09 2027 GMT
Subject: CN=FBC6F709A7D3848564917DE86FB42FDEBABE98ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:41:8d:90:eb:d0:a0:15:e3:03:2f:aa:36:
16:cf:3a:75:ae:e8:f0:15:66:19:b9:54:a0:b0:d7:
0c:9c:01:73:09:71:cd:35:09:77:ed:9c:c6:8d:23:
05:5f:d6:3f:1c:ae:18:7d:19:62:d1:1d:3d:69:55:
d9:86:44:c9:25:3a:f2:ba:08:fa:cc:8d:d4:4b:e5:
12:80:db:7b:8e:e6:ad:0e:9a:81:1e:39:35:fb:f1:
f8:db:73:78:10:35:53:fa:5c:47:e0:42:73:15:2f:
ed:60:95:c3:7e:e4:15:9d:a4:49:d6:2d:2b:f2:ee:
9e:53:77:8c:27:3b:ae:13:8c:2f:1c:eb:96:fe:cc:
5f:1e:47:13:3c:68:d4:86:fe:c3:12:20:3e:0b:44:
51:d4:8d:11:da:f6:10:a0:c1:19:2a:3e:d4:70:db:
10:f5:2c:49:98:b1:f0:6b:39:b9:af:c6:6a:47:88:
3b:95:75:c4:6c:95:e9:58:f0:3f:c3:1a:4a:6c:06:
f2:13:72:6e:8b:ab:96:39:50:5e:87:4d:5d:d2:a2:
5c:6a:58:5c:86:58:2c:a2:fe:08:29:eb:43:4c:fe:
09:cb:69:77:93:04:41:6a:5b:bb:de:82:b1:83:d6:
3e:b1:40:b8:1c:81:f5:97:cc:4d:8d:14:5a:6c:69:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:F7:09:A7:D3:84:85:64:91:7D:E8:6F:B4:2F:DE:BA:BE:98:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.251.0/24
96.62.254.0/24
136.143.248.0-136.143.250.255
143.14.51.0/24
143.14.250.0/24
145.223.41.0/24
145.223.47.0/24
147.79.28.0/24
148.135.212.0/22
148.135.220.0/22
148.135.228.0/22
148.135.236.0/22
148.135.244.0/22
150.241.174.0/24
150.241.234.0/24
158.140.194.0/24
158.140.196.0/24
158.140.199.0-158.140.200.255
158.140.202.0/23
158.140.205.0/24
158.140.214.0/24
162.141.12.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.87.0/24
167.148.136.0/24
167.148.162.0/24
168.222.18.0/24
203.160.116.0/23
203.160.125.0/24
203.160.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:82:11:23:56:d0:23:bb:40:17:db:f3:5d:77:49:30:eb:b5:
ee:56:78:c4:af:ab:9f:c3:52:fb:32:7f:78:bc:c8:bc:e6:4d:
d2:c2:a2:42:72:d1:85:67:30:0c:1b:79:b1:30:47:a8:c5:a1:
30:d9:0f:dd:39:12:cb:38:52:eb:c8:c2:28:88:36:94:20:20:
5b:11:f7:83:2a:90:88:73:c5:b3:f1:21:de:a4:73:1e:27:fd:
42:19:fc:da:2f:c9:f0:9b:ec:58:1a:3e:a8:1e:df:3f:9d:ab:
d2:75:ba:7a:16:26:0c:16:db:13:b8:0f:c5:9c:be:ce:bb:3a:
82:c5:63:fd:31:6d:07:c1:1c:ff:57:16:8b:4a:df:cb:66:89:
88:4d:72:5c:f2:b4:c4:24:ea:46:9e:65:fd:93:4d:55:8f:7d:
7e:08:c5:4b:f7:77:55:5d:f2:27:50:22:44:3a:0d:22:20:2d:
21:1b:81:13:62:60:ad:5e:ef:06:f2:09:bb:28:04:ee:8e:99:
30:6f:65:11:40:1f:f0:99:e5:80:ae:bb:0b:4c:f8:05:93:c8:
57:ad:93:b0:eb:02:00:3d:aa:05:77:bf:93:0a:0d:a8:11:23:
fe:5b:c5:f7:0a:7a:fb:2b:a1:b3:63:5a:21:c1:fd:18:be:17:
2c:d3:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:35:08 2026 by rpki-client