$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: T+KA1sOtllZrpC5RzgpQIFK7BsOz1h0yBA+UYOpMLXw= Subject key identifier: 1C:7B:14:78:28:B0:86:4C:E8:0D:3F:DF:4A:14:95:86:F7:A4:AD:60 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 695EBDF18B151F78B4B5E0D18EC36DBA0E27148C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9009.roa Signing time: Mon 02 Nov 2026 08:57:25 +0000 ROA not before: Mon 02 Nov 2026 08:52:25 +0000 ROA not after: Mon 01 Nov 2027 08:57:25 +0000 asID: 9009 IP address blocks: 187.14.180.0/24 maxlen: 24 189.12.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5e:bd:f1:8b:15:1f:78:b4:b5:e0:d1:8e:c3:6d:ba:0e:27:14:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 2 08:52:25 2026 GMT Not After : Nov 1 08:57:25 2027 GMT Subject: CN=1C7B147828B0864CE80D3FDF4A149586F7A4AD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:b9:0a:ec:8f:7b:8d:52:69:4a:37:b2:e2: 57:11:7a:53:ac:02:ca:ac:bc:b6:93:ce:87:8e:37: 75:71:3a:81:af:f0:55:13:f3:ec:31:78:47:a1:e7: 52:be:a4:5c:db:4b:04:8a:a0:42:2f:f4:7a:b7:ce: 48:f0:95:d6:1e:53:54:b9:84:fd:fb:53:8d:70:8c: 7a:de:d6:3a:52:2d:38:4e:da:4d:03:b8:e2:cf:92: 2a:94:7f:d6:8b:fc:90:58:35:6a:f0:a2:1a:38:2f: 0e:fc:70:3a:c9:f9:3c:72:3b:ed:ef:14:e2:ec:1b: c7:ad:45:64:5c:cc:39:4c:2e:68:ce:a6:89:c2:2d: 4c:32:73:93:0a:81:ee:e7:d9:d8:b0:38:62:ed:c3: d5:ff:a0:31:d5:59:08:9b:91:09:2a:1c:d9:ae:21: 5f:2e:50:f9:f9:bf:37:a8:7b:0c:53:cf:cf:a5:3e: c8:c8:a2:ee:7f:0a:ea:ea:da:c6:81:db:77:3b:32: d6:29:1e:3f:fe:56:64:70:18:ea:d6:cc:c3:0a:c1: 2f:3e:5f:e5:1c:dc:9c:37:b3:94:51:79:26:bd:b6: 06:b4:f3:a7:0b:6b:b5:34:32:ad:df:81:77:8d:62: 6e:fb:86:5e:cf:3c:84:77:cd:ec:b9:d9:fc:89:70: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:14:78:28:B0:86:4C:E8:0D:3F:DF:4A:14:95:86:F7:A4:AD:60 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.180.0/24 189.12.157.0/24 Signature Algorithm: sha256WithRSAEncryption 77:4b:9f:3a:76:eb:d3:12:5b:79:13:7e:8c:06:ae:0e:85:35: 72:86:13:11:b9:d8:c7:0b:58:94:71:7d:ed:5d:b0:5a:e7:09: af:0e:11:b9:48:b0:2b:ac:d9:25:b2:ff:c5:c9:18:aa:87:b8: 8f:ab:de:d1:7b:85:b9:00:39:f8:13:17:95:89:7d:2d:d4:09: 51:10:f2:57:aa:fe:4d:d2:b7:9f:36:bd:97:2f:5b:12:38:6b: f1:b8:5c:24:25:ef:94:4e:e9:70:b6:92:df:94:4a:03:ad:c1: 41:9f:e5:86:01:21:c0:9f:21:dd:f6:de:11:3d:45:fd:93:1f: b5:ab:1b:50:d5:9a:8b:22:a1:7a:d8:30:ee:68:43:f8:77:df: 65:2b:eb:e0:a1:d5:a7:ae:ac:4b:3d:0b:7c:54:89:d1:f7:66: 80:14:29:ea:45:33:ba:2a:10:79:af:67:81:cd:e2:50:2f:59: 0a:3e:7d:28:6d:cb:bd:6f:f6:7f:fc:4a:44:a2:06:ff:ba:b3: 9c:c8:f4:2c:f6:08:81:df:76:f9:6f:28:22:39:94:73:d8:db: 5d:bd:cb:18:09:17:0a:91:60:10:0f:5d:a0:54:9a:d2:de:16: 69:e1:a9:97:11:99:15:16:d6:97:de:24:ef:12:04:be:0c:51: 6e:13:3a:11 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUaV698YsVH3i0teDRjsNtug4nFIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDIwODUyMjVaFw0yNzExMDEwODU3MjVaMDMxMTAvBgNV BAMTKDFDN0IxNDc4MjhCMDg2NENFODBEM0ZERjRBMTQ5NTg2RjdBNEFENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytrkK7I97jVJpSjey4lcRelOs AsqsvLaTzoeON3VxOoGv8FUT8+wxeEeh51K+pFzbSwSKoEIv9Hq3zkjwldYeU1S5 hP37U41wjHre1jpSLThO2k0DuOLPkiqUf9aL/JBYNWrwoho4Lw78cDrJ+TxyO+3v FOLsG8etRWRczDlMLmjOponCLUwyc5MKge7n2diwOGLtw9X/oDHVWQibkQkqHNmu IV8uUPn5vzeoewxTz8+lPsjIou5/Curq2saB23c7MtYpHj/+VmRwGOrWzMMKwS8+ X+Uc3Jw3s5RReSa9tga086cLa7U0Mq3fgXeNYm77hl7PPIR3zey52fyJcAarAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUHHsUeCiwhkzoDT/fShSVhvekrWAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM5MDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAuw60AwQAvQydMA0GCSqGSIb3DQEBCwUAA4IBAQB3S586duvTElt5E36M Bq4OhTVyhhMRudjHC1iUcX3tXbBa5wmvDhG5SLArrNklsv/FyRiqh7iPq97Re4W5 ADn4ExeViX0t1AlREPJXqv5N0refNr2XL1sSOGvxuFwkJe+UTulwtpLflEoDrcFB n+WGASHAnyHd9t4RPUX9kx+1qxtQ1ZqLIqF62DDuaEP4d99lK+vgodWnrqxLPQt8 VInR92aAFCnqRTO6KhB5r2eBzeJQL1kKPn0obcu9b/Z//EpEogb/urOcyPQs9giB 33b5bygiOZRz2NtdvcsYCRcKkWAQD12gVJrS3hZp4amXEZkVFtaX3iTvEgS+DFFu EzoR -----END CERTIFICATE-----Generated at Thu Nov 5 09:35:02 2026 by rpki-client