This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: 3Xt+kLkYr0AOLYU71hxVNM0goE/MIxNJEsmOva08MWQ= Subject key identifier: 63:CE:D3:8D:25:0E:B0:4E:47:73:93:18:54:AC:6D:22:02:D9:79:C0 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 2852CFB22A398EA6A4093D23FECEC7C935870B36 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa Signing time: Mon 17 Nov 2025 18:16:31 +0000 ROA not before: Mon 17 Nov 2025 18:11:31 +0000 ROA not after: Mon 16 Nov 2026 18:16:31 +0000 asID: 9009 IP address blocks: 46.236.241.0/24 maxlen: 24 82.139.225.0/24 maxlen: 24 82.139.235.0/24 maxlen: 24 82.139.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 01:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:52:cf:b2:2a:39:8e:a6:a4:09:3d:23:fe:ce:c7:c9:35:87:0b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 17 18:11:31 2025 GMT Not After : Nov 16 18:16:31 2026 GMT Subject: CN=63CED38D250EB04E4773931854AC6D2202D979C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:22:68:f9:34:5c:b7:10:8a:3e:6b:32:3c:be: 79:3f:85:cc:5d:99:e0:d0:c0:0a:b9:b7:3d:59:e7: 80:45:37:c2:6f:fa:e7:78:bb:4c:93:4c:31:cb:22: 47:63:dc:37:13:da:44:ef:6e:ae:38:fd:5d:8c:e9: a4:27:8e:8d:5c:d6:60:b5:c5:45:a5:c0:dd:76:71: fd:01:d4:48:22:88:65:d9:a7:da:1b:62:c0:26:a0: 92:e8:79:80:8f:d4:18:0e:56:d1:c2:8c:2b:3d:73: d5:98:f5:ca:4b:b5:b8:03:a1:a0:7d:7c:a6:e0:64: e7:99:1c:97:c4:5c:6f:8d:a9:9a:69:07:5a:72:6d: f6:76:68:86:54:bc:42:30:1c:13:9c:36:c0:71:58: d0:d6:96:e7:0e:16:55:c6:e5:75:9b:7e:58:f0:f6: 84:2f:59:c9:57:14:64:17:90:29:5f:26:15:21:eb: 5c:4d:33:95:a2:1e:50:0d:fe:2d:57:bf:01:c6:5a: 06:92:73:6e:a8:d0:61:09:de:a6:08:f4:38:6c:90: 3e:81:54:91:07:f5:e4:87:db:9f:2b:c4:65:53:32: de:d0:69:c8:5e:1b:6c:31:77:8c:8d:69:cf:ea:84: 95:a5:9e:fc:7e:6b:64:9e:67:53:a5:db:66:d3:b0: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CE:D3:8D:25:0E:B0:4E:47:73:93:18:54:AC:6D:22:02:D9:79:C0 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.241.0/24 82.139.225.0/24 82.139.235.0/24 82.139.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:f6:be:c8:9e:de:13:8b:89:63:2d:a9:1e:0d:72:9e:0a:d5: fc:2d:b7:6c:26:0b:f4:4c:44:d2:dc:8a:77:c8:84:2a:44:3a: a3:75:d5:78:a7:69:00:b7:de:55:b4:de:f1:19:45:c0:df:97: 5b:6e:6f:42:a5:d2:82:e5:96:ae:6c:e2:bc:b9:23:68:f1:fe: c4:e9:0d:c6:12:b4:1f:42:f9:3b:6f:96:87:4e:66:76:37:67: 9d:47:92:53:5b:38:90:34:a5:c8:b9:2e:ab:27:91:98:dc:75: ac:3a:80:b9:5d:4f:a7:28:fa:d4:03:5d:2c:4e:3c:be:1a:9d: 09:a0:42:19:58:08:c7:64:d9:d7:0a:2e:06:68:01:0f:75:ce: 2e:c8:45:83:de:bf:7f:5d:6a:43:10:13:5f:c4:aa:83:56:9d: d7:35:77:9b:69:95:03:e7:26:77:e9:54:c3:ad:9d:0d:91:bd: 51:41:46:97:a7:51:37:58:d3:ce:7f:a8:05:bf:41:53:df:6d: 5e:67:10:bf:bb:97:82:30:26:7b:43:a4:0f:3b:38:23:76:8d: f1:9f:0b:c6:c2:bc:28:1e:ef:9c:aa:1a:b9:4a:04:25:8e:d5: 8e:a1:64:76:cf:9b:9a:9a:77:3f:e1:da:79:a0:2b:d2:e7:96: bf:b1:3f:d6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKFLPsio5jqakCT0j/s7HyTWHCzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMTcxODExMzFaFw0yNjExMTYxODE2MzFaMDMxMTAvBgNV BAMTKDYzQ0VEMzhEMjUwRUIwNEU0NzczOTMxODU0QUM2RDIyMDJEOTc5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLImj5NFy3EIo+azI8vnk/hcxd meDQwAq5tz1Z54BFN8Jv+ud4u0yTTDHLIkdj3DcT2kTvbq44/V2M6aQnjo1c1mC1 xUWlwN12cf0B1EgiiGXZp9obYsAmoJLoeYCP1BgOVtHCjCs9c9WY9cpLtbgDoaB9 fKbgZOeZHJfEXG+NqZppB1pybfZ2aIZUvEIwHBOcNsBxWNDWlucOFlXG5XWbfljw 9oQvWclXFGQXkClfJhUh61xNM5WiHlAN/i1XvwHGWgaSc26o0GEJ3qYI9DhskD6B VJEH9eSH258rxGVTMt7QacheG2wxd4yNac/qhJWlnvx+a2SeZ1Ol22bTsHvjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUY87TjSUOsE5Hc5MYVKxtIgLZecAwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTOTAwOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC7s8QME AFKL4QMEAFKL6wMEAFKL+jANBgkqhkiG9w0BAQsFAAOCAQEAP/a+yJ7eE4uJYy2p Hg1yngrV/C23bCYL9ExE0tyKd8iEKkQ6o3XVeKdpALfeVbTe8RlFwN+XW25vQqXS guWWrmzivLkjaPH+xOkNxhK0H0L5O2+Wh05mdjdnnUeSU1s4kDSlyLkuqyeRmNx1 rDqAuV1Ppyj61ANdLE48vhqdCaBCGVgIx2TZ1wouBmgBD3XOLshFg96/f11qQxAT X8Sqg1ad1zV3m2mVA+cmd+lUw62dDZG9UUFGl6dRN1jTzn+oBb9BU99tXmcQv7uX gjAme0OkDzs4I3aN8Z8LxsK8KB7vnKoauUoEJY7VjqFkds+bmpp3P+HaeaAr0ueW v7E/1g== -----END CERTIFICATE-----Generated at Wed Dec 3 11:47:43 2025 by rpki-client