Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: xVzi7cqzSqfMDnQ3G4dsb9nyHPtRpfkANtyzG4WDY2s=
Subject key identifier: 79:EC:68:82:4D:08:5E:78:67:77:3F:04:28:3B:0B:19:10:F5:14:54
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1E0D545EAE478533E6A769DB516514C67AD97CC8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9009.roa
Signing time: Thu 08 Oct 2026 18:09:42 +0000
ROA not before: Thu 08 Oct 2026 18:04:42 +0000
ROA not after: Thu 07 Oct 2027 18:09:42 +0000
asID: 9009
IP address blocks: 2.58.29.0/24 maxlen: 24
2.58.172.0/24 maxlen: 24
5.45.38.0/24 maxlen: 24
5.181.127.0/24 maxlen: 24
37.143.60.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.95.14.0/24 maxlen: 24
45.95.37.0/24 maxlen: 24
45.133.175.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.137.132.0/24 maxlen: 24
45.137.133.0/24 maxlen: 24
45.137.134.0/24 maxlen: 24
45.137.135.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
92.242.185.0/24 maxlen: 24
179.61.131.0/24 maxlen: 24
179.61.133.0/24 maxlen: 24
179.61.165.0/24 maxlen: 24
179.61.171.0/24 maxlen: 24
179.61.183.0/24 maxlen: 24
179.61.186.0/24 maxlen: 24
179.61.201.0/24 maxlen: 24
181.41.205.0/24 maxlen: 24
181.41.216.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
181.214.55.0/24 maxlen: 24
181.214.60.0/24 maxlen: 24
181.214.65.0/24 maxlen: 24
181.214.68.0/24 maxlen: 24
181.214.69.0/24 maxlen: 24
181.214.71.0/24 maxlen: 24
181.214.72.0/24 maxlen: 24
181.214.92.0/24 maxlen: 24
181.214.103.0/24 maxlen: 24
181.214.109.0/24 maxlen: 24
181.214.114.0/24 maxlen: 24
181.214.115.0/24 maxlen: 24
181.214.116.0/24 maxlen: 24
181.214.126.0/24 maxlen: 24
181.214.127.0/24 maxlen: 24
181.214.170.0/24 maxlen: 24
181.214.175.0/24 maxlen: 24
181.214.200.0/24 maxlen: 24
181.214.202.0/24 maxlen: 24
181.214.203.0/24 maxlen: 24
181.214.204.0/24 maxlen: 24
181.214.207.0/24 maxlen: 24
181.214.251.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.81.0/24 maxlen: 24
181.215.82.0/24 maxlen: 24
181.215.83.0/24 maxlen: 24
181.215.86.0/24 maxlen: 24
181.215.96.0/24 maxlen: 24
181.215.98.0/24 maxlen: 24
181.215.100.0/24 maxlen: 24
181.215.103.0/24 maxlen: 24
181.215.105.0/24 maxlen: 24
181.215.107.0/24 maxlen: 24
181.215.116.0/24 maxlen: 24
181.215.119.0/24 maxlen: 24
181.215.124.0/24 maxlen: 24
181.215.130.0/24 maxlen: 24
181.215.132.0/24 maxlen: 24
181.215.137.0/24 maxlen: 24
181.215.150.0/24 maxlen: 24
181.215.151.0/24 maxlen: 24
181.215.157.0/24 maxlen: 24
181.215.192.0/24 maxlen: 24
181.215.199.0/24 maxlen: 24
181.215.209.0/24 maxlen: 24
181.215.217.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.235.0/24 maxlen: 24
181.215.251.0/24 maxlen: 24
185.135.156.0/24 maxlen: 24
185.143.231.0/24 maxlen: 24
185.145.36.0/24 maxlen: 24
185.145.39.0/24 maxlen: 24
185.151.56.0/24 maxlen: 24
185.151.57.0/24 maxlen: 24
185.172.66.0/24 maxlen: 24
191.96.23.0/24 maxlen: 24
191.96.35.0/24 maxlen: 24
191.96.147.0/24 maxlen: 24
191.96.172.0/24 maxlen: 24
191.96.195.0/24 maxlen: 24
191.96.210.0/24 maxlen: 24
191.96.213.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
191.96.232.0/24 maxlen: 24
191.101.6.0/24 maxlen: 24
191.101.10.0/24 maxlen: 24
191.101.23.0/24 maxlen: 24
191.101.61.0/24 maxlen: 24
191.101.72.0/24 maxlen: 24
191.101.74.0/24 maxlen: 24
191.101.75.0/24 maxlen: 24
191.101.77.0/24 maxlen: 24
191.101.90.0/24 maxlen: 24
191.101.98.0/24 maxlen: 24
191.101.105.0/24 maxlen: 24
191.101.107.0/24 maxlen: 24
191.101.108.0/24 maxlen: 24
191.101.115.0/24 maxlen: 24
191.101.117.0/24 maxlen: 24
191.101.156.0/24 maxlen: 24
191.101.159.0/24 maxlen: 24
191.101.167.0/24 maxlen: 24
191.101.226.0/24 maxlen: 24
193.58.107.0/24 maxlen: 24
194.110.15.0/24 maxlen: 24
194.110.242.0/24 maxlen: 24
213.109.168.0/24 maxlen: 24
2a00:d1a0::/48 maxlen: 48
2a00:d1a0:1::/48 maxlen: 48
2a00:d1a0:2::/48 maxlen: 48
2a00:d1a0:3::/48 maxlen: 48
2a00:d1a0:4::/48 maxlen: 48
2a00:d1a0:5::/48 maxlen: 48
2a00:d1a0:6::/48 maxlen: 48
2a00:d1a0:7::/48 maxlen: 48
2a00:d1a0:8::/48 maxlen: 48
2a00:d1a0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0d:54:5e:ae:47:85:33:e6:a7:69:db:51:65:14:c6:7a:d9:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 8 18:04:42 2026 GMT
Not After : Oct 7 18:09:42 2027 GMT
Subject: CN=79EC68824D085E7867773F04283B0B1910F51454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:f6:ad:bb:17:9c:b7:e3:44:08:c2:cc:9a:
db:23:fa:56:68:4c:ec:cf:64:bf:fd:80:a5:c9:01:
29:b5:8c:3b:0c:cf:e1:46:af:5a:9d:3d:30:da:e6:
3f:12:d3:dd:b9:d2:61:de:8b:c4:11:fe:1a:0d:93:
43:c6:69:9d:db:a0:85:67:ab:d3:43:35:83:09:e4:
ce:a4:cf:02:e8:19:5f:f7:81:48:cb:78:c2:73:3e:
76:1c:18:ef:13:57:72:67:68:0b:86:75:31:64:01:
64:4c:e8:7b:a4:d0:cd:57:fb:90:40:9e:59:98:c8:
53:30:75:e2:c7:25:c6:4b:01:0f:53:a9:0c:ca:de:
ef:32:7f:54:7a:b7:97:ae:9b:dd:2a:c9:b7:09:50:
b3:e7:4a:42:bb:87:f0:98:fe:f2:36:ed:ce:f9:2a:
fb:b7:76:c8:60:36:42:d4:27:6b:4d:8e:7c:06:28:
f6:f6:89:ec:f0:79:ab:42:08:6b:6d:19:d7:0a:c3:
9c:e9:3c:3f:60:04:4a:bb:b3:6f:d3:bc:40:36:31:
13:ef:4a:79:fb:69:49:12:bc:62:e7:7e:d6:76:29:
fd:09:3c:81:da:e9:ff:fe:11:32:34:52:f1:ef:51:
4b:34:46:da:d0:df:26:c0:7e:56:36:34:ad:38:3f:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:68:82:4D:08:5E:78:67:77:3F:04:28:3B:0B:19:10:F5:14:54
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0/24
2.58.172.0/24
5.45.38.0/24
5.181.127.0/24
37.143.60.0/24
45.89.251.0/24
45.95.14.0/24
45.95.37.0/24
45.133.175.0/24
45.137.31.0/24
45.137.132.0/22
45.139.181.0/24
92.242.185.0/24
179.61.131.0/24
179.61.133.0/24
179.61.165.0/24
179.61.171.0/24
179.61.183.0/24
179.61.186.0/24
179.61.201.0/24
181.41.205.0/24
181.41.216.0/24
181.214.5.0/24
181.214.45.0/24
181.214.55.0/24
181.214.60.0/24
181.214.65.0/24
181.214.68.0/23
181.214.71.0-181.214.72.255
181.214.92.0/24
181.214.103.0/24
181.214.109.0/24
181.214.114.0-181.214.116.255
181.214.126.0/23
181.214.170.0/24
181.214.175.0/24
181.214.200.0/24
181.214.202.0-181.214.204.255
181.214.207.0/24
181.214.251.0/24
181.215.22.0/24
181.215.81.0-181.215.83.255
181.215.86.0/24
181.215.96.0/24
181.215.98.0/24
181.215.100.0/24
181.215.103.0/24
181.215.105.0/24
181.215.107.0/24
181.215.116.0/24
181.215.119.0/24
181.215.124.0/24
181.215.130.0/24
181.215.132.0/24
181.215.137.0/24
181.215.150.0/23
181.215.157.0/24
181.215.192.0/24
181.215.199.0/24
181.215.209.0/24
181.215.217.0/24
181.215.228.0/24
181.215.235.0/24
181.215.251.0/24
185.135.156.0/24
185.143.231.0/24
185.145.36.0/24
185.145.39.0/24
185.151.56.0/23
185.172.66.0/24
191.96.23.0/24
191.96.35.0/24
191.96.147.0/24
191.96.172.0/24
191.96.195.0/24
191.96.210.0/24
191.96.213.0/24
191.96.215.0/24
191.96.232.0/24
191.101.6.0/24
191.101.10.0/24
191.101.23.0/24
191.101.61.0/24
191.101.72.0/24
191.101.74.0/23
191.101.77.0/24
191.101.90.0/24
191.101.98.0/24
191.101.105.0/24
191.101.107.0-191.101.108.255
191.101.115.0/24
191.101.117.0/24
191.101.156.0/24
191.101.159.0/24
191.101.167.0/24
191.101.226.0/24
193.58.107.0/24
194.110.15.0/24
194.110.242.0/24
213.109.168.0/24
IPv6:
2a00:d1a0::-2a00:d1a0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
42:e3:2a:13:45:0b:ca:49:64:d5:19:ff:ea:5e:eb:b8:52:41:
a2:97:9a:b3:1a:60:b5:76:cf:fc:33:95:81:4f:27:f8:e3:c2:
6b:5a:bc:43:20:bd:aa:18:9c:e8:8e:a7:4b:9b:b8:99:34:2d:
20:64:fa:31:b4:dd:d0:27:ca:29:0d:ce:0d:3b:43:43:2c:37:
7b:4a:28:b7:3f:c0:ae:ca:54:30:41:b8:56:e8:c2:37:24:36:
29:7b:f7:44:ea:eb:8b:08:c8:2e:51:ed:68:51:d9:41:46:76:
8d:f3:24:62:4e:64:cc:00:bb:0d:ac:74:c0:6f:99:b7:f8:97:
34:67:02:03:d3:bc:87:ba:38:13:7b:4f:d3:7e:8c:1c:32:8e:
b5:74:3a:d0:15:aa:73:ff:5f:f4:97:63:ec:ee:af:2e:da:67:
c1:1e:03:6d:83:41:74:b0:a9:68:17:15:7c:cc:64:04:1b:9d:
85:aa:3c:57:8e:27:a6:c2:79:cc:15:d6:dd:19:f4:b7:cc:3b:
ca:c0:51:d3:40:cf:ce:4e:32:4a:29:a2:18:38:e0:8a:4d:3a:
84:d6:df:d7:30:84:6e:92:5d:36:65:1b:2e:9d:45:d5:71:9c:
6d:19:6e:c9:50:f2:f9:3a:14:88:f2:ab:3b:61:36:2f:b5:a6:
c9:18:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:50:45 2026 by rpki-client