Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: tIM5epMK+4AuZ1e0mcrfSCTR1c9LQ/8cp2YcZUkI9ko=
Subject key identifier: CE:EE:3F:C6:D2:83:0C:D4:5D:C7:D9:05:DD:82:79:7A:23:F5:4D:3A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1739B3F43E78B56D4DE908B449F6E411C4018670
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
Signing time: Wed 23 Sep 2026 10:59:30 +0000
ROA not before: Wed 23 Sep 2026 10:54:30 +0000
ROA not after: Wed 22 Sep 2027 10:59:30 +0000
asID: 9009
IP address blocks: 96.62.251.0/24 maxlen: 24
96.62.254.0/24 maxlen: 24
136.143.248.0/24 maxlen: 24
136.143.249.0/24 maxlen: 24
136.143.250.0/24 maxlen: 24
143.14.51.0/24 maxlen: 24
143.14.250.0/24 maxlen: 24
145.223.41.0/24 maxlen: 24
145.223.47.0/24 maxlen: 24
147.79.28.0/24 maxlen: 24
148.135.212.0/22 maxlen: 24
148.135.220.0/22 maxlen: 24
148.135.228.0/22 maxlen: 24
148.135.236.0/22 maxlen: 24
148.135.244.0/22 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
150.241.240.0/24 maxlen: 24
158.140.194.0/24 maxlen: 24
158.140.196.0/24 maxlen: 24
158.140.199.0/24 maxlen: 24
158.140.200.0/24 maxlen: 24
158.140.202.0/24 maxlen: 24
158.140.203.0/24 maxlen: 24
158.140.205.0/24 maxlen: 24
158.140.214.0/24 maxlen: 24
162.141.12.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.87.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
203.160.116.0/24 maxlen: 24
203.160.117.0/24 maxlen: 24
203.160.125.0/24 maxlen: 24
203.160.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:39:b3:f4:3e:78:b5:6d:4d:e9:08:b4:49:f6:e4:11:c4:01:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 10:54:30 2026 GMT
Not After : Sep 22 10:59:30 2027 GMT
Subject: CN=CEEE3FC6D2830CD45DC7D905DD82797A23F54D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:e3:e3:01:b9:1f:d7:a1:74:12:53:87:e7:
e7:d2:e4:26:69:f1:9a:91:60:87:35:a0:55:d4:60:
f2:c3:23:cb:16:74:28:77:5a:62:4e:e1:29:13:d8:
2e:ed:9d:3d:6a:c0:34:60:eb:40:87:eb:e8:69:12:
9d:f1:2f:e5:d6:09:88:84:1a:b2:80:39:0e:20:32:
3f:bc:df:27:02:6c:c5:80:25:ce:85:b6:0e:3b:d4:
cb:1c:63:75:2a:33:85:ed:ce:3c:e8:d6:4f:54:02:
13:21:d3:74:71:10:6a:61:6a:77:3b:7e:02:ca:ab:
0a:0a:f0:06:4f:cd:79:95:c3:1c:d9:51:27:11:f0:
df:e1:88:5d:62:32:db:df:5a:34:a1:39:d3:2e:c1:
f1:17:e8:5f:cd:db:74:04:5d:ad:08:2d:a2:95:e2:
39:9e:fe:6e:04:22:8f:3d:3d:07:5a:2e:c6:d9:67:
3b:c0:2e:d4:16:4e:e1:7a:3c:a2:5c:e4:9d:67:a9:
d4:65:a1:40:96:70:96:18:14:2e:b1:6f:87:e0:6a:
6a:1c:a1:86:35:28:93:f8:24:d9:51:c3:d6:f7:17:
2c:f5:5b:8d:aa:96:8f:09:ec:7c:a5:2c:70:c2:3c:
69:54:a7:5a:6b:c5:bb:69:6a:72:79:89:d7:8a:6b:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:3F:C6:D2:83:0C:D4:5D:C7:D9:05:DD:82:79:7A:23:F5:4D:3A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.251.0/24
96.62.254.0/24
136.143.248.0-136.143.250.255
143.14.51.0/24
143.14.250.0/24
145.223.41.0/24
145.223.47.0/24
147.79.28.0/24
148.135.212.0/22
148.135.220.0/22
148.135.228.0/22
148.135.236.0/22
148.135.244.0/22
150.241.174.0/24
150.241.234.0/24
150.241.240.0/24
158.140.194.0/24
158.140.196.0/24
158.140.199.0-158.140.200.255
158.140.202.0/23
158.140.205.0/24
158.140.214.0/24
162.141.12.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.87.0/24
167.148.136.0/24
167.148.162.0/24
168.222.18.0/24
203.160.116.0/23
203.160.125.0/24
203.160.127.0/24
Signature Algorithm: sha256WithRSAEncryption
31:04:42:4d:77:79:82:1f:91:64:d8:b9:00:c4:04:50:65:69:
b4:5a:c9:d5:b7:86:95:07:e3:70:9e:f3:04:44:e7:76:eb:ee:
83:75:7b:12:f6:ac:91:04:59:3e:c3:b7:fb:84:6d:23:20:5f:
85:fe:cc:7c:2f:aa:54:da:dd:15:58:1d:c7:5a:d4:c5:6a:ee:
a3:c7:3c:4a:15:91:52:33:c1:19:e1:30:66:9d:f6:ba:5e:1c:
03:ca:a3:3c:17:ce:52:44:5c:5d:e9:62:ef:46:7a:8c:99:84:
43:41:90:5f:1f:38:50:f0:4a:2a:3c:20:6c:5f:9f:52:f1:0a:
d5:e5:b3:ba:f8:8b:9d:59:af:c5:2b:b3:50:5c:51:80:92:12:
dd:9f:34:b6:c8:6a:1a:09:19:6f:b6:93:36:0b:02:c6:92:ad:
76:8d:ec:6b:d3:fa:8f:d6:5b:fe:51:fe:6a:06:e3:83:a0:1a:
07:87:d2:7f:9c:17:cb:59:3d:08:c2:44:37:cd:e5:2b:1e:49:
ce:cc:fe:bf:87:0c:a7:a3:ed:e8:58:5d:61:84:30:1b:6a:e1:
4b:38:4d:69:e0:25:47:80:ef:d2:4e:93:7b:50:9e:1f:91:4b:
60:42:77:5e:78:dc:d2:47:6f:ac:6b:df:9e:7a:0b:f8:2c:88:
8a:e1:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:37:51 2026 by rpki-client