$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: PrWytbn9jV5CUfaRU2yvjINEJ9qlBmAleNh7cJq2tyc= Subject key identifier: 86:A3:95:EA:67:6C:BF:F7:AC:B5:50:95:60:A3:02:EC:53:88:D8:34 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6CCC09C104D9F60A85BBC2527D00121A68C50EC5 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa Signing time: Thu 08 Oct 2026 18:09:43 +0000 ROA not before: Thu 08 Oct 2026 18:04:43 +0000 ROA not after: Thu 07 Oct 2027 18:09:43 +0000 asID: 9009 IP address blocks: 79.180.17.0/24 maxlen: 24 79.180.19.0/24 maxlen: 24 79.182.15.0/24 maxlen: 24 79.182.24.0/24 maxlen: 24 79.183.11.0/24 maxlen: 24 109.65.13.0/24 maxlen: 24 109.66.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cc:09:c1:04:d9:f6:0a:85:bb:c2:52:7d:00:12:1a:68:c5:0e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 8 18:04:43 2026 GMT Not After : Oct 7 18:09:43 2027 GMT Subject: CN=86A395EA676CBFF7ACB5509560A302EC5388D834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:b4:b9:a4:9d:e7:b5:ef:e8:ba:16:83:49: cc:b3:82:d5:98:d3:67:50:5a:7e:21:d9:a5:e2:be: ef:66:a5:43:29:57:f4:9d:61:47:06:2d:3e:8b:30: 97:86:e3:67:6f:cb:67:0e:c0:06:0a:fa:16:02:13: d8:42:11:dd:03:84:6a:e7:93:76:de:d9:e0:88:4a: 76:65:36:5c:80:0f:b8:22:91:fb:ba:b3:9f:b4:67: 63:95:d2:f7:53:9e:a8:e4:42:3a:5b:53:26:91:cc: e9:0f:80:88:a6:fd:0e:22:40:87:75:6e:04:9d:4f: a0:6b:86:82:48:82:22:ea:8b:cb:e6:b6:ae:1a:04: 94:ea:60:52:f5:93:ff:8e:e2:4f:33:c2:f1:38:41: f6:7d:f0:65:98:55:d0:74:0c:49:c4:ed:bf:74:28: a7:be:bb:0a:fd:f6:69:89:03:56:4a:c9:00:2a:4f: 2f:b2:34:e3:b3:3f:c9:50:e2:16:97:72:f7:7a:47: 65:b9:8d:aa:1b:55:3a:7a:13:8c:9c:2f:2e:a7:50: 93:a9:59:67:61:73:09:3d:17:3b:0d:3c:b7:12:84: 2a:0c:da:85:d4:08:ca:b6:58:c7:ad:a5:2d:13:f8: ce:20:be:e6:25:9a:86:0e:c1:fa:8c:9e:c5:e9:ec: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A3:95:EA:67:6C:BF:F7:AC:B5:50:95:60:A3:02:EC:53:88:D8:34 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.17.0/24 79.180.19.0/24 79.182.15.0/24 79.182.24.0/24 79.183.11.0/24 109.65.13.0/24 109.66.13.0/24 Signature Algorithm: sha256WithRSAEncryption b3:b0:7e:8d:1e:d2:34:2f:68:cf:eb:05:99:fe:ae:6f:92:f2: 2e:f8:39:ed:62:87:9a:fc:c3:1c:38:4a:c8:ea:eb:b5:aa:a0: d7:04:fa:51:0b:24:7e:49:bf:70:ad:51:ff:5b:8d:03:dc:65: 75:ed:72:fb:d9:82:58:cb:8e:2c:0d:4f:39:96:8d:88:df:a5: 56:fb:a6:d4:29:a9:b9:47:a7:65:4e:3a:4c:fd:0a:84:d0:84: 4a:3d:53:45:56:4f:18:8a:e6:bb:66:6e:99:5e:1d:30:35:b8: e6:97:38:4c:ee:da:f6:39:7b:17:ec:22:3d:d4:73:db:5f:d5: d5:5b:57:55:19:a7:c4:ae:e5:ac:d6:b1:b9:32:16:9d:5a:8e: 8c:e0:84:b5:eb:08:c9:36:58:70:1b:40:0a:65:99:0a:47:69: 2c:c2:65:b0:6d:86:fa:21:49:de:7c:c9:51:51:9b:de:e6:54: d3:bc:19:99:a6:15:40:42:0a:c5:1f:59:60:e4:8d:49:d6:63: 4e:19:db:7f:4b:73:3e:1b:b2:a7:8c:a1:3d:a7:04:c3:01:c0: 1f:cd:32:20:f1:c0:d4:b2:f2:a6:ff:25:ed:55:03:be:cd:1f: 9a:52:7c:d2:04:66:b9:b2:3e:43:de:70:c5:6c:3b:b9:c7:e6: ae:b7:23:f6 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUbMwJwQTZ9gqFu8JSfQASGmjFDsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDgxODA0NDNaFw0yNzEwMDcxODA5NDNaMDMxMTAvBgNV BAMTKDg2QTM5NUVBNjc2Q0JGRjdBQ0I1NTA5NTYwQTMwMkVDNTM4OEQ4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/7S5pJ3nte/ouhaDScyzgtWY 02dQWn4h2aXivu9mpUMpV/SdYUcGLT6LMJeG42dvy2cOwAYK+hYCE9hCEd0DhGrn k3be2eCISnZlNlyAD7gikfu6s5+0Z2OV0vdTnqjkQjpbUyaRzOkPgIim/Q4iQId1 bgSdT6BrhoJIgiLqi8vmtq4aBJTqYFL1k/+O4k8zwvE4QfZ98GWYVdB0DEnE7b90 KKe+uwr99mmJA1ZKyQAqTy+yNOOzP8lQ4haXcvd6R2W5jaobVTp6E4ycLy6nUJOp WWdhcwk9FzsNPLcShCoM2oXUCMq2WMetpS0T+M4gvuYlmoYOwfqMnsXp7CONAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUhqOV6mdsv/estVCVYKMC7FOI2DQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5MDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIA ATAqAwQAT7QRAwQAT7QTAwQAT7YPAwQAT7YYAwQAT7cLAwQAbUENAwQAbUINMA0G CSqGSIb3DQEBCwUAA4IBAQCzsH6NHtI0L2jP6wWZ/q5vkvIu+DntYoea/MMcOErI 6uu1qqDXBPpRCyR+Sb9wrVH/W40D3GV17XL72YJYy44sDU85lo2I36VW+6bUKam5 R6dlTjpM/QqE0IRKPVNFVk8Yiua7Zm6ZXh0wNbjmlzhM7tr2OXsX7CI91HPbX9XV W1dVGafEruWs1rG5MhadWo6M4IS16wjJNlhwG0AKZZkKR2kswmWwbYb6IUnefMlR UZve5lTTvBmZphVAQgrFH1lg5I1J1mNOGdt/S3M+G7KnjKE9pwTDAcAfzTIg8cDU svKm/yXtVQO+zR+aUnzSBGa5sj5D3nDFbDu5x+autyP2 -----END CERTIFICATE-----Generated at Tue Oct 13 12:41:14 2026 by rpki-client