Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: fz/1g9jUvafggTzG2m/09RTG+IR32iwogDwmEV73Zbc=
Subject key identifier: 2C:00:EB:08:02:CF:A2:0A:70:D3:D0:31:5D:DF:B8:2B:DD:E0:D3:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 41B398EAD7A64D20694F297EA4431706C0C5163C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
Signing time: Fri 03 Apr 2026 10:35:43 +0000
ROA not before: Fri 03 Apr 2026 10:30:43 +0000
ROA not after: Fri 02 Apr 2027 10:35:43 +0000
asID: 9009
IP address blocks: 141.11.245.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b3:98:ea:d7:a6:4d:20:69:4f:29:7e:a4:43:17:06:c0:c5:16:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 10:30:43 2026 GMT
Not After : Apr 2 10:35:43 2027 GMT
Subject: CN=2C00EB0802CFA20A70D3D0315DDFB82BDDE0D3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:2e:ba:1f:b2:5e:31:62:8c:d8:d7:04:46:
36:9c:09:7e:78:60:ba:91:db:8e:e9:f4:06:c2:81:
44:d0:63:ed:cd:8a:d6:4d:77:57:7d:3d:3a:78:a2:
8c:96:78:00:e4:76:5c:e8:09:02:04:88:73:1a:7e:
f0:3b:7e:93:3c:03:81:bb:ca:b9:a9:f4:65:9e:7b:
52:a1:c1:12:4e:a4:30:06:a2:a5:1d:d1:e5:3f:5b:
2b:49:71:dd:70:e4:31:0c:a6:b7:e7:1e:a2:6a:a8:
5e:93:8a:4f:4f:e1:34:e9:9e:c3:33:b3:1f:3d:f5:
da:6a:ca:73:ad:5d:67:90:45:38:ad:dc:13:bc:6d:
eb:33:f6:49:41:a1:11:2d:52:2c:ca:9c:1e:fb:64:
db:8f:45:2b:c7:7c:22:0d:79:ff:30:70:60:86:87:
f8:06:53:bd:d1:c5:12:c3:bc:84:45:fa:82:4f:f4:
c8:ae:c7:4e:ef:33:df:64:c9:c4:2f:5f:07:20:7b:
d0:04:e8:5e:bc:2d:2f:d1:71:75:5b:87:ac:6a:1f:
ac:1f:fb:c4:e8:63:f7:20:82:bb:6f:7b:c8:c7:c9:
b5:ae:7d:e8:ba:38:43:0c:ea:da:e9:24:b4:cf:89:
9b:3d:ec:cc:05:4a:79:d4:51:d2:c9:fd:1d:23:c7:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:EB:08:02:CF:A2:0A:70:D3:D0:31:5D:DF:B8:2B:DD:E0:D3:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f8:93:d7:4d:5e:58:f1:66:a7:38:6d:0e:3f:31:5f:73:ae:
e5:63:66:94:87:d8:fc:bf:72:e4:f6:a8:f7:70:38:99:d3:23:
95:53:2f:16:75:3c:a2:a6:17:96:c9:9c:cb:ee:af:07:d5:85:
67:ba:0f:ab:9a:3c:e2:c9:39:16:49:3d:44:ee:d9:48:b5:8e:
76:71:78:1d:d5:ab:3b:4f:b0:fc:5b:64:a4:3c:16:9a:91:7e:
32:4f:e0:66:50:30:c7:57:5e:9f:de:14:10:80:52:6a:d2:4b:
f3:40:1b:88:7f:cb:98:29:12:88:33:88:38:04:05:62:16:b8:
fb:68:d1:c9:82:bd:f4:15:15:23:c2:4a:9f:e7:24:c7:b9:ec:
35:b7:7b:6b:80:63:08:14:4c:7f:41:81:9d:1b:77:1f:d9:d9:
52:f1:91:8e:4d:41:3b:09:14:ab:e5:81:3e:21:36:e1:3c:10:
a3:cf:be:f2:56:3e:d3:94:6c:8e:ce:83:de:69:8d:c7:5f:5a:
df:9f:bc:13:0d:e8:b1:a9:fb:4e:f1:c4:7c:75:d7:16:e9:90:
5f:30:50:3a:60:c2:18:1f:e1:34:a4:78:88:77:c8:c3:b2:3d:
ca:e5:8e:b8:ba:08:2c:1a:98:3e:08:a5:a0:7b:89:7d:d8:ec:
cd:dc:0b:dc
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUQbOY6temTSBpTyl+pEMXBsDFFjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA0MDMxMDMwNDNaFw0yNzA0MDIxMDM1NDNaMDMxMTAvBgNV
BAMTKDJDMDBFQjA4MDJDRkEyMEE3MEQzRDAzMTVEREZCODJCRERFMEQzQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/S66H7JeMWKM2NcERjacCX54
YLqR247p9AbCgUTQY+3NitZNd1d9PTp4ooyWeADkdlzoCQIEiHMafvA7fpM8A4G7
yrmp9GWee1KhwRJOpDAGoqUd0eU/WytJcd1w5DEMprfnHqJqqF6Tik9P4TTpnsMz
sx899dpqynOtXWeQRTit3BO8besz9klBoREtUizKnB77ZNuPRSvHfCINef8wcGCG
h/gGU73RxRLDvIRF+oJP9Miux07vM99kycQvXwcge9AE6F68LS/RcXVbh6xqH6wf
+8ToY/cggrtve8jHybWufei6OEMM6trpJLTPiZs97MwFSnnUUdLJ/R0jx11XAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQULADrCALPogpw09AxXd+4K93g080wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTAwOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAI0L9QME
AMI8WjANBgkqhkiG9w0BAQsFAAOCAQEAUfiT101eWPFmpzhtDj8xX3Ou5WNmlIfY
/L9y5Pao93A4mdMjlVMvFnU8oqYXlsmcy+6vB9WFZ7oPq5o84sk5Fkk9RO7ZSLWO
dnF4HdWrO0+w/FtkpDwWmpF+Mk/gZlAwx1den94UEIBSatJL80AbiH/LmCkSiDOI
OAQFYha4+2jRyYK99BUVI8JKn+ckx7nsNbd7a4BjCBRMf0GBnRt3H9nZUvGRjk1B
OwkUq+WBPiE24TwQo8++8lY+05Rsjs6D3mmNx19a35+8Ew3osan7TvHEfHXXFumQ
XzBQOmDCGB/hNKR4iHfIw7I9yuWOuLoILBqYPgiloHuJfdjszdwL3A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:43:42 2026 by rpki-client