Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: Uw1SUj3qHKiQ+ByPYk1sxAxNALDfZPF2cAWmoq+ZfXY=
Subject key identifier: F3:EC:A1:3D:E7:30:69:9C:17:0C:72:7D:04:D8:F3:5F:A1:DB:F9:8F
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 078E0F6D26B8B34E84AC50DC4F734D60C4B4B460
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa
Signing time: Fri 11 Sep 2026 09:01:17 +0000
ROA not before: Fri 11 Sep 2026 08:56:17 +0000
ROA not after: Fri 10 Sep 2027 09:01:17 +0000
asID: 9009
IP address blocks: 82.139.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8e:0f:6d:26:b8:b3:4e:84:ac:50:dc:4f:73:4d:60:c4:b4:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 11 08:56:17 2026 GMT
Not After : Sep 10 09:01:17 2027 GMT
Subject: CN=F3ECA13DE730699C170C727D04D8F35FA1DBF98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:cd:92:08:db:af:da:86:69:f2:fd:cb:0d:
09:70:46:89:03:58:c5:ce:77:2e:20:77:64:e4:6f:
63:65:3e:df:6d:7d:96:3e:1e:10:0d:58:18:2f:98:
03:01:96:fc:b3:ef:03:fe:3a:45:d2:4f:83:6a:a0:
9e:4d:50:c0:02:18:29:ce:f8:8c:ca:6b:6b:fb:21:
a4:d0:f7:bd:13:3f:c5:f3:12:49:85:cd:60:12:65:
bd:75:d2:83:41:a3:5b:09:6e:d0:25:99:e5:ef:cc:
9f:c8:32:e1:c9:57:46:d3:9c:7b:0e:80:48:31:7a:
77:2b:9b:b0:0d:9e:4b:18:fc:67:e9:8e:34:17:9a:
58:c3:8c:15:22:27:da:40:b5:69:5c:3b:73:db:c0:
0a:85:21:5d:30:21:74:be:f5:26:2a:49:91:ea:7c:
e4:8e:0c:3f:d5:85:d5:ab:0c:b1:54:f3:4c:35:53:
c4:e0:5a:f5:b5:e9:11:98:35:53:ea:07:7a:98:6e:
fa:e6:07:fc:10:47:23:59:c3:51:a5:50:77:c8:22:
d1:7f:a1:bc:b0:15:c5:9d:62:93:a3:40:cb:f5:81:
24:76:17:81:70:32:55:13:28:da:4c:f1:79:3b:cf:
11:25:09:a7:a2:0b:67:ac:30:ee:49:c9:16:b4:e1:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:A1:3D:E7:30:69:9C:17:0C:72:7D:04:D8:F3:5F:A1:DB:F9:8F
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:aa:2a:90:73:44:ff:6a:2c:19:20:ad:85:46:56:4d:db:c1:
d1:76:05:2e:98:f4:e9:74:92:5e:e9:c5:ac:e1:3d:04:67:1b:
43:00:83:19:cb:9b:2a:20:9d:5f:03:3d:1e:62:06:4f:8c:c7:
7e:9b:60:81:3e:bc:9c:7a:05:f5:0a:b2:1f:bf:45:0d:c4:27:
12:7a:ab:f5:b1:d8:65:c9:9e:61:a0:56:09:3a:83:b6:c7:4d:
e3:1b:6d:0c:9e:38:99:59:9d:26:fe:1d:8a:67:b4:51:fb:c5:
80:32:b8:45:f6:75:5e:5d:ee:c1:dc:58:e5:44:8c:a7:be:ec:
ce:0f:47:18:0c:04:e1:d2:8b:0a:3c:65:27:54:08:6a:75:c5:
21:f0:4c:8a:4a:3e:cc:55:fc:54:17:65:9f:90:33:dc:fe:26:
bf:0b:3d:ab:02:43:f7:d3:f6:73:86:0e:dd:08:18:40:72:f7:
7a:99:c3:a5:29:c6:12:b5:3c:d7:fc:3d:90:1e:a7:3e:00:e0:
85:4a:64:3f:a7:18:62:03:2d:55:0a:a8:c1:fa:4d:a8:3a:84:
91:b3:fb:b0:dd:b8:9e:30:d3:f4:e4:f2:f0:15:17:84:49:59:
24:90:83:4d:e2:a3:43:8c:93:fb:32:9e:46:24:b9:3f:e5:36:
8f:3b:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:09 2026 by rpki-client