Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: Npzw8wXMW/vawcVK9PXEMbOuM4EtnQNUsUyC7lwFL/o=
Subject key identifier: FB:8F:F6:E8:23:B4:B7:74:6D:4C:0E:57:40:C5:8C:F1:3E:FA:FE:A2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A56CE4A144E03209B7B32EF83F0C5CEBF182E65
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
Signing time: Wed 04 Nov 2026 10:35:21 +0000
ROA not before: Wed 04 Nov 2026 10:30:21 +0000
ROA not after: Wed 03 Nov 2027 10:35:21 +0000
asID: 9009
IP address blocks: 82.21.93.0/24 maxlen: 24
82.21.138.0/24 maxlen: 24
82.21.217.0/24 maxlen: 24
82.21.240.0/24 maxlen: 24
82.22.14.0/24 maxlen: 24
82.22.242.0/24 maxlen: 24
82.23.7.0/24 maxlen: 24
82.23.8.0/24 maxlen: 24
82.23.9.0/24 maxlen: 24
82.23.10.0/24 maxlen: 24
82.23.11.0/24 maxlen: 24
82.23.12.0/24 maxlen: 24
82.23.216.0/24 maxlen: 24
82.23.232.0/24 maxlen: 24
82.24.8.0/24 maxlen: 24
82.24.25.0/24 maxlen: 24
82.24.86.0/24 maxlen: 24
82.24.223.0/24 maxlen: 24
82.24.230.0/24 maxlen: 24
82.25.214.0/24 maxlen: 24
82.25.227.0/24 maxlen: 24
82.26.78.0/24 maxlen: 24
82.26.121.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
82.26.217.0/24 maxlen: 24
82.27.226.0/24 maxlen: 24
82.29.64.0/24 maxlen: 24
82.29.95.0/24 maxlen: 24
82.29.113.0/24 maxlen: 24
82.29.114.0/24 maxlen: 24
82.29.116.0/24 maxlen: 24
82.29.117.0/24 maxlen: 24
82.29.238.0/24 maxlen: 24
82.38.14.0/24 maxlen: 24
82.47.162.0/24 maxlen: 24
82.47.252.0/23 maxlen: 24
178.83.10.0/24 maxlen: 24
178.83.99.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.220.0/24 maxlen: 24
178.83.231.0/24 maxlen: 24
178.83.245.0/24 maxlen: 24
2a13:9500:2::/48 maxlen: 48
2a13:9500:4::/48 maxlen: 48
2a13:9500:5::/48 maxlen: 48
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:11::/48 maxlen: 48
2a13:9500:12::/48 maxlen: 48
2a13:9500:13::/48 maxlen: 48
2a13:9500:14::/48 maxlen: 48
2a13:9500:15::/48 maxlen: 48
2a13:9500:16::/48 maxlen: 48
2a13:9500:17::/48 maxlen: 48
2a13:9500:18::/48 maxlen: 48
2a13:9500:19::/48 maxlen: 48
2a13:9500:1a::/48 maxlen: 48
2a13:9500:1b::/48 maxlen: 48
2a13:9500:29::/48 maxlen: 48
2a13:9500:2a::/48 maxlen: 48
2a13:9500:2b::/48 maxlen: 48
2a13:9500:2c::/48 maxlen: 48
2a13:9500:2f::/48 maxlen: 48
2a13:9500:30::/48 maxlen: 48
2a13:9500:31::/48 maxlen: 48
2a13:9500:34::/48 maxlen: 48
2a13:9500:35::/48 maxlen: 48
2a13:9500:3b::/48 maxlen: 48
2a13:9500:3c::/48 maxlen: 48
2a13:9500:3d::/48 maxlen: 48
2a13:9500:58::/48 maxlen: 48
2a13:9500:59::/48 maxlen: 48
2a13:9500:5a::/48 maxlen: 48
2a13:9500:f1::/48 maxlen: 48
2a13:9500:f2::/48 maxlen: 48
2a13:9500:f3::/48 maxlen: 48
2a13:9500:f4::/48 maxlen: 48
2a13:9500:f5::/48 maxlen: 48
2a13:9500:f6::/48 maxlen: 48
2a13:9500:f7::/48 maxlen: 48
2a13:9500:f8::/48 maxlen: 48
2a13:9500:f9::/48 maxlen: 48
2a13:9500:16b::/48 maxlen: 48
2a13:9500:1c2::/48 maxlen: 48
2a13:9500:1fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:56:ce:4a:14:4e:03:20:9b:7b:32:ef:83:f0:c5:ce:bf:18:2e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 10:30:21 2026 GMT
Not After : Nov 3 10:35:21 2027 GMT
Subject: CN=FB8FF6E823B4B7746D4C0E5740C58CF13EFAFEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:af:56:30:a4:0d:7d:92:f4:91:48:73:21:
bf:8e:f6:c6:ff:c9:df:74:dd:f8:7d:9a:cd:41:53:
e8:e9:8a:d0:48:70:24:19:8f:12:d1:b9:34:9a:74:
45:c9:6e:be:30:9b:eb:b3:c5:08:4a:f0:33:5c:99:
89:0f:8b:76:65:85:1e:04:56:1b:e4:e0:bb:74:c6:
5a:e3:35:66:50:43:5b:8a:7d:2a:d7:59:6f:6d:79:
bb:d4:41:ab:1a:a5:e5:af:12:c6:0f:29:26:ee:f1:
5e:3d:69:45:eb:dd:0e:fc:d1:af:d3:5d:18:ba:23:
d9:b3:b0:9b:94:99:1f:c0:34:13:94:93:cf:6a:6c:
df:88:98:ed:82:4e:b2:cb:51:0c:f3:37:9f:53:a2:
c5:8a:96:bb:2d:34:bb:54:45:77:b6:56:13:65:2a:
bc:3d:58:bf:cd:6c:83:4e:54:df:e8:f1:3f:d7:73:
67:48:29:d3:96:30:8f:82:91:6f:c4:49:95:df:d9:
3f:ca:d7:b3:c8:f3:57:f1:7e:d6:c5:36:d7:d8:93:
be:44:4f:d8:00:18:32:7d:01:19:b4:ed:0f:57:c9:
e3:0d:42:c7:43:e9:03:29:b8:f3:14:3d:1c:62:14:
7a:8e:c4:e9:82:e1:16:17:dc:e4:4e:de:3c:18:09:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:F6:E8:23:B4:B7:74:6D:4C:0E:57:40:C5:8C:F1:3E:FA:FE:A2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.93.0/24
82.21.138.0/24
82.21.217.0/24
82.21.240.0/24
82.22.14.0/24
82.22.242.0/24
82.23.7.0-82.23.12.255
82.23.216.0/24
82.23.232.0/24
82.24.8.0/24
82.24.25.0/24
82.24.86.0/24
82.24.223.0/24
82.24.230.0/24
82.25.214.0/24
82.25.227.0/24
82.26.78.0/24
82.26.121.0/24
82.26.141.0-82.26.142.255
82.26.217.0/24
82.27.226.0/24
82.29.64.0/24
82.29.95.0/24
82.29.113.0-82.29.114.255
82.29.116.0/23
82.29.238.0/24
82.38.14.0/24
82.47.162.0/24
82.47.252.0/23
178.83.10.0/24
178.83.99.0/24
178.83.129.0/24
178.83.131.0/24
178.83.220.0/24
178.83.231.0/24
178.83.245.0/24
IPv6:
2a13:9500:2::/48
2a13:9500:4::-2a13:9500:1b:ffff:ffff:ffff:ffff:ffff
2a13:9500:29::-2a13:9500:2c:ffff:ffff:ffff:ffff:ffff
2a13:9500:2f::-2a13:9500:31:ffff:ffff:ffff:ffff:ffff
2a13:9500:34::/47
2a13:9500:3b::-2a13:9500:3d:ffff:ffff:ffff:ffff:ffff
2a13:9500:58::-2a13:9500:5a:ffff:ffff:ffff:ffff:ffff
2a13:9500:f1::-2a13:9500:f9:ffff:ffff:ffff:ffff:ffff
2a13:9500:16b::/48
2a13:9500:1c2::/48
2a13:9500:1fa::/48
Signature Algorithm: sha256WithRSAEncryption
34:08:71:f9:74:eb:e1:5c:64:7b:62:0b:32:ea:77:f7:80:64:
88:56:3a:aa:45:60:d7:92:a5:24:12:11:ce:56:a7:19:64:95:
6f:03:35:8d:af:7b:d5:09:de:9d:39:31:f2:7f:be:00:0b:d9:
01:5d:dd:bd:91:74:3f:ae:05:09:8b:03:e4:ef:bf:cf:3a:d0:
28:3d:6e:21:6d:21:d8:5b:71:9a:fd:6c:c6:9b:d9:13:70:b7:
6f:c5:d5:e3:38:df:98:a6:50:57:aa:18:aa:33:17:44:5a:c6:
62:e9:75:e3:2d:7e:cd:51:0f:1b:c5:32:5d:82:f7:7e:f3:c0:
36:ab:87:c7:6c:15:2d:55:66:dc:6c:72:e1:1f:a4:25:7a:a8:
cd:81:4e:fb:a0:f1:23:e8:87:d2:8b:ca:24:1a:1a:47:72:12:
64:13:dc:48:47:eb:1c:05:90:77:42:16:e6:f4:5b:45:14:54:
07:9e:65:ce:df:54:56:a6:14:2b:08:c1:21:75:27:f3:a4:a3:
71:3b:bb:77:43:25:9e:f9:66:43:d2:55:5e:1e:27:f8:79:3d:
97:d4:e1:12:dc:09:42:e3:93:e3:97:4d:3e:0b:db:36:b2:fd:
e5:bc:e5:23:53:46:59:8e:55:1d:62:02:96:64:05:36:54:77:
dd:9e:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:35:24 2026 by rpki-client