Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: Myrwk6sw/OqQMXV+SuO0MuevLVqE3uBn88T7gIuZo8U=
Subject key identifier: 9D:6C:55:3C:FC:7E:38:B2:D5:EA:94:28:E2:8B:70:43:DA:1D:0B:29
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4269C7A417CE307B824273029DA2D0242993CAE2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
Signing time: Fri 11 Sep 2026 09:01:19 +0000
ROA not before: Fri 11 Sep 2026 08:56:19 +0000
ROA not after: Fri 10 Sep 2027 09:01:19 +0000
asID: 9009
IP address blocks: 96.62.251.0/24 maxlen: 24
96.62.254.0/24 maxlen: 24
136.143.248.0/24 maxlen: 24
136.143.249.0/24 maxlen: 24
136.143.250.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.250.0/24 maxlen: 24
145.223.41.0/24 maxlen: 24
145.223.47.0/24 maxlen: 24
147.79.28.0/24 maxlen: 24
148.135.212.0/22 maxlen: 24
148.135.220.0/22 maxlen: 24
148.135.228.0/22 maxlen: 24
148.135.236.0/22 maxlen: 24
148.135.244.0/22 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
158.140.194.0/24 maxlen: 24
158.140.196.0/24 maxlen: 24
158.140.199.0/24 maxlen: 24
158.140.200.0/24 maxlen: 24
158.140.202.0/24 maxlen: 24
158.140.203.0/24 maxlen: 24
158.140.205.0/24 maxlen: 24
158.140.214.0/24 maxlen: 24
162.141.12.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.87.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
203.160.116.0/24 maxlen: 24
203.160.117.0/24 maxlen: 24
203.160.125.0/24 maxlen: 24
203.160.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:69:c7:a4:17:ce:30:7b:82:42:73:02:9d:a2:d0:24:29:93:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 11 08:56:19 2026 GMT
Not After : Sep 10 09:01:19 2027 GMT
Subject: CN=9D6C553CFC7E38B2D5EA9428E28B7043DA1D0B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:0d:36:11:ad:d4:70:44:3c:0f:b5:40:e8:
31:d7:b2:51:97:e1:bc:b5:0b:b6:ae:5f:84:47:ea:
60:bf:47:14:68:95:85:f6:93:ae:db:de:22:6c:08:
9a:3a:d7:8c:6b:3d:65:de:d7:45:8e:0f:4b:fb:dd:
2c:27:04:a3:9b:c8:01:bb:e0:4b:e4:03:87:f8:ca:
56:43:e7:bc:b2:a9:c9:07:3f:9d:9b:d7:7b:05:2f:
5a:7a:40:7f:2c:15:99:96:47:60:3a:59:58:f0:50:
47:70:d6:45:e3:16:18:77:cd:59:5f:30:94:68:a0:
3d:49:16:ef:d6:c4:39:a2:f4:46:bd:36:7d:b2:c0:
69:e8:a4:0b:bb:9c:63:53:ab:16:88:e9:14:ca:23:
7f:04:f7:d5:21:2a:f7:e2:b4:6f:bd:3a:38:de:b3:
e2:c9:4e:7a:86:3f:80:b2:b9:06:08:7e:e7:b4:fe:
fe:b1:53:65:8b:c2:a3:8d:ed:ea:63:7b:39:13:a7:
97:6f:18:72:c6:8d:43:97:7d:5a:57:7f:4a:2a:f4:
98:ed:2c:37:ad:ee:73:94:41:2d:eb:c4:58:d7:12:
69:2b:0d:d2:a5:15:2e:6b:b3:65:03:1b:f9:5a:61:
ec:4b:85:5c:80:36:0a:03:d9:2c:09:e9:25:e3:04:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:55:3C:FC:7E:38:B2:D5:EA:94:28:E2:8B:70:43:DA:1D:0B:29
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.251.0/24
96.62.254.0/24
136.143.248.0-136.143.250.255
143.14.51.0/24
143.14.250.0/24
145.223.41.0/24
145.223.47.0/24
147.79.28.0/24
148.135.212.0/22
148.135.220.0/22
148.135.228.0/22
148.135.236.0/22
148.135.244.0/22
150.241.174.0/24
150.241.234.0/24
158.140.194.0/24
158.140.196.0/24
158.140.199.0-158.140.200.255
158.140.202.0/23
158.140.205.0/24
158.140.214.0/24
162.141.12.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.87.0/24
167.148.136.0/24
167.148.162.0/24
168.222.18.0/24
203.160.116.0/23
203.160.125.0/24
203.160.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:87:20:21:1f:52:4a:ef:de:f4:67:bd:af:0c:1d:5d:73:c0:
62:ea:12:ed:d8:45:9e:d6:38:4e:26:16:e6:32:c0:88:f5:f5:
90:ee:cc:f1:8e:5e:ed:55:bd:c7:f0:14:4c:64:cd:6f:2f:7d:
68:99:37:7f:4c:df:2c:16:b2:17:98:fb:5a:a4:1e:ae:4e:57:
00:00:c6:cc:7e:b0:b1:3d:86:29:7d:ad:b4:55:28:ac:60:00:
e4:26:e4:af:99:cb:ed:b1:3c:e2:92:79:59:a0:0b:a2:1d:40:
77:6f:df:cf:b4:bf:9a:b6:37:a8:a2:1b:90:9b:6a:01:24:05:
7b:a0:9f:9f:10:bb:69:10:aa:e9:29:ad:0a:8d:3c:f2:11:9c:
8f:8d:9e:35:e2:50:a7:96:f0:ab:31:be:fe:f3:d3:dd:ef:d6:
f5:75:cd:76:74:f1:b7:3a:d8:1e:43:19:03:08:bb:e3:71:90:
3e:25:e5:7b:ec:fc:c1:bd:50:de:a4:41:e6:d2:b6:59:72:7b:
76:4c:88:79:3f:eb:35:b6:97:8b:b8:9d:35:b3:65:40:17:cc:
58:dd:1c:3e:d9:f9:62:79:ac:0e:01:1b:c9:4d:44:1f:34:b6:
3a:24:35:93:a9:6c:7e:f7:3a:d3:2c:e7:15:35:d0:b8:72:bf:
ef:78:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:01:51 2026 by rpki-client