Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: 1/airmFwt0i3k0kaVx+8t8qfckNRISKhMz9XKQleiQ0=
Subject key identifier: DE:3F:F8:63:71:AC:52:FF:EF:37:21:56:7F:B4:28:E5:B2:5A:A3:19
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58495E704EE5BD91B85CD4BE228EF167FA775941
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
Signing time: Mon 28 Sep 2026 16:34:41 +0000
ROA not before: Mon 28 Sep 2026 16:29:41 +0000
ROA not after: Mon 27 Sep 2027 16:34:41 +0000
asID: 9009
IP address blocks: 82.21.138.0/24 maxlen: 24
82.21.217.0/24 maxlen: 24
82.21.240.0/24 maxlen: 24
82.22.14.0/24 maxlen: 24
82.22.242.0/24 maxlen: 24
82.23.7.0/24 maxlen: 24
82.23.8.0/24 maxlen: 24
82.23.9.0/24 maxlen: 24
82.23.10.0/24 maxlen: 24
82.23.11.0/24 maxlen: 24
82.23.12.0/24 maxlen: 24
82.23.216.0/24 maxlen: 24
82.23.232.0/24 maxlen: 24
82.24.8.0/24 maxlen: 24
82.24.25.0/24 maxlen: 24
82.24.86.0/24 maxlen: 24
82.24.223.0/24 maxlen: 24
82.24.230.0/24 maxlen: 24
82.25.214.0/24 maxlen: 24
82.25.227.0/24 maxlen: 24
82.26.78.0/24 maxlen: 24
82.26.121.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
82.26.217.0/24 maxlen: 24
82.27.226.0/24 maxlen: 24
82.29.64.0/24 maxlen: 24
82.29.95.0/24 maxlen: 24
82.29.113.0/24 maxlen: 24
82.29.114.0/24 maxlen: 24
82.29.116.0/24 maxlen: 24
82.29.117.0/24 maxlen: 24
82.29.238.0/24 maxlen: 24
82.38.14.0/24 maxlen: 24
82.47.162.0/24 maxlen: 24
82.47.252.0/23 maxlen: 24
178.83.10.0/24 maxlen: 24
178.83.99.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.220.0/24 maxlen: 24
178.83.231.0/24 maxlen: 24
2a13:9500:2::/48 maxlen: 48
2a13:9500:4::/48 maxlen: 48
2a13:9500:5::/48 maxlen: 48
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:11::/48 maxlen: 48
2a13:9500:12::/48 maxlen: 48
2a13:9500:13::/48 maxlen: 48
2a13:9500:14::/48 maxlen: 48
2a13:9500:15::/48 maxlen: 48
2a13:9500:16::/48 maxlen: 48
2a13:9500:17::/48 maxlen: 48
2a13:9500:18::/48 maxlen: 48
2a13:9500:19::/48 maxlen: 48
2a13:9500:1a::/48 maxlen: 48
2a13:9500:1b::/48 maxlen: 48
2a13:9500:29::/48 maxlen: 48
2a13:9500:2a::/48 maxlen: 48
2a13:9500:2b::/48 maxlen: 48
2a13:9500:2c::/48 maxlen: 48
2a13:9500:2f::/48 maxlen: 48
2a13:9500:30::/48 maxlen: 48
2a13:9500:31::/48 maxlen: 48
2a13:9500:34::/48 maxlen: 48
2a13:9500:35::/48 maxlen: 48
2a13:9500:3b::/48 maxlen: 48
2a13:9500:3c::/48 maxlen: 48
2a13:9500:3d::/48 maxlen: 48
2a13:9500:58::/48 maxlen: 48
2a13:9500:59::/48 maxlen: 48
2a13:9500:5a::/48 maxlen: 48
2a13:9500:f1::/48 maxlen: 48
2a13:9500:f2::/48 maxlen: 48
2a13:9500:f3::/48 maxlen: 48
2a13:9500:f4::/48 maxlen: 48
2a13:9500:f5::/48 maxlen: 48
2a13:9500:f6::/48 maxlen: 48
2a13:9500:f7::/48 maxlen: 48
2a13:9500:f8::/48 maxlen: 48
2a13:9500:f9::/48 maxlen: 48
2a13:9500:16b::/48 maxlen: 48
2a13:9500:1c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:49:5e:70:4e:e5:bd:91:b8:5c:d4:be:22:8e:f1:67:fa:77:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 28 16:29:41 2026 GMT
Not After : Sep 27 16:34:41 2027 GMT
Subject: CN=DE3FF86371AC52FFEF3721567FB428E5B25AA319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:bb:0d:45:c1:49:66:cc:94:da:fe:4c:33:
3c:c4:c7:4a:8d:d8:58:23:57:96:1b:7d:42:90:c6:
00:df:cb:43:19:42:87:2f:37:ed:d9:d4:24:d3:b8:
82:1e:2a:e1:9d:84:c3:96:0c:5b:a6:80:52:d7:ab:
e2:8d:f7:7e:57:6e:01:b5:4f:da:96:9d:c9:6a:53:
f2:9c:2c:50:e6:9d:1f:a3:73:8f:19:e3:91:8e:56:
c0:7b:ba:19:e2:ef:70:a5:cb:7a:7f:c8:73:ad:0f:
88:ed:fd:b0:d5:9b:96:a5:cc:aa:f1:2b:87:fb:f2:
12:85:92:5e:e0:bb:7c:62:a8:4e:c1:0e:51:fc:b7:
a0:71:ef:6d:84:79:b9:ed:eb:1e:df:2c:19:f1:01:
22:3d:58:61:29:a7:20:d7:33:dd:c5:4c:cc:aa:5e:
39:ac:b6:d0:93:0d:a1:ec:c2:4b:f4:12:64:7b:f5:
a5:11:bf:0d:81:12:77:f8:b1:8e:09:ea:06:0d:04:
0a:95:00:d0:77:1f:35:de:3e:d7:59:3f:e1:97:7b:
e8:08:f5:d5:6f:21:02:80:6d:33:75:3b:79:b3:2b:
28:f9:09:1a:50:c3:45:3f:a4:39:8d:1c:54:38:98:
ca:07:85:00:9d:1b:1e:52:e3:05:a4:d2:99:09:26:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:F8:63:71:AC:52:FF:EF:37:21:56:7F:B4:28:E5:B2:5A:A3:19
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.138.0/24
82.21.217.0/24
82.21.240.0/24
82.22.14.0/24
82.22.242.0/24
82.23.7.0-82.23.12.255
82.23.216.0/24
82.23.232.0/24
82.24.8.0/24
82.24.25.0/24
82.24.86.0/24
82.24.223.0/24
82.24.230.0/24
82.25.214.0/24
82.25.227.0/24
82.26.78.0/24
82.26.121.0/24
82.26.141.0-82.26.142.255
82.26.217.0/24
82.27.226.0/24
82.29.64.0/24
82.29.95.0/24
82.29.113.0-82.29.114.255
82.29.116.0/23
82.29.238.0/24
82.38.14.0/24
82.47.162.0/24
82.47.252.0/23
178.83.10.0/24
178.83.99.0/24
178.83.129.0/24
178.83.131.0/24
178.83.220.0/24
178.83.231.0/24
IPv6:
2a13:9500:2::/48
2a13:9500:4::-2a13:9500:1b:ffff:ffff:ffff:ffff:ffff
2a13:9500:29::-2a13:9500:2c:ffff:ffff:ffff:ffff:ffff
2a13:9500:2f::-2a13:9500:31:ffff:ffff:ffff:ffff:ffff
2a13:9500:34::/47
2a13:9500:3b::-2a13:9500:3d:ffff:ffff:ffff:ffff:ffff
2a13:9500:58::-2a13:9500:5a:ffff:ffff:ffff:ffff:ffff
2a13:9500:f1::-2a13:9500:f9:ffff:ffff:ffff:ffff:ffff
2a13:9500:16b::/48
2a13:9500:1c2::/48
Signature Algorithm: sha256WithRSAEncryption
7c:2c:18:eb:db:c4:bd:69:0a:d7:77:18:d3:42:f8:0c:4b:51:
f5:1a:a1:8c:ba:03:0c:35:7d:c5:7f:fd:6a:37:b4:d2:de:f5:
1a:09:60:fd:c0:76:2c:4a:0d:8a:19:78:cf:e1:d2:09:53:53:
7b:0a:36:7a:59:4c:1f:56:91:c3:80:fc:b5:e8:0f:b9:c2:d7:
f9:c7:2d:d2:50:0b:33:94:b6:61:da:cf:fd:31:d2:83:ed:3d:
b9:f6:fc:ff:b6:32:35:b8:be:4e:1a:a8:8f:b9:0e:ff:12:42:
ce:bf:1b:ba:31:bd:c3:ad:eb:d5:c8:44:59:dc:64:9e:23:cd:
69:d5:86:12:8f:06:19:22:f9:90:f8:97:06:24:19:ae:11:b5:
1e:e3:c7:d6:94:cd:f9:29:46:a0:02:e3:03:62:a8:ac:e9:fd:
53:38:f6:5c:62:7e:0d:8d:ac:89:d7:8c:c4:08:5c:64:18:a5:
2e:49:cd:1d:a1:6f:62:ce:74:6e:6a:da:c4:0f:a5:b0:6e:f7:
7c:db:e2:47:81:bb:5a:e8:af:34:67:ad:1c:b7:e4:59:b4:11:
fe:f1:37:3b:c4:4a:47:b3:a7:0a:3f:6f:38:2c:c8:81:53:12:
25:b6:3d:11:85:dd:11:de:44:ed:e8:1e:ac:d8:59:9f:fd:80:
dc:ea:70:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 17 21:32:11 2026 by rpki-client