This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o= Subject key identifier: DB:9E:C6:82:42:B7:B0:F5:2F:23:45:44:E2:7B:89:64:54:B9:DA:45 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 7EFEE7E5D8C80CCED8FA22C4366E096307D07BD2 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa Signing time: Sun 04 Jan 2026 00:00:14 +0000 ROA not before: Sat 03 Jan 2026 23:55:14 +0000 ROA not after: Sun 03 Jan 2027 00:00:14 +0000 asID: 9009 IP address blocks: 82.139.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fe:e7:e5:d8:c8:0c:ce:d8:fa:22:c4:36:6e:09:63:07:d0:7b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 3 23:55:14 2026 GMT Not After : Jan 3 00:00:14 2027 GMT Subject: CN=DB9EC68242B7B0F52F234544E27B896454B9DA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:84:bf:02:02:25:ee:f4:87:7b:50:6c:bd: 34:05:ee:27:d4:17:ab:9c:aa:93:8e:5e:63:c6:56: 0d:fd:8a:1c:70:64:13:70:25:37:db:6d:09:af:22: a3:3f:b0:75:77:e2:ef:c6:b0:24:57:ca:96:16:fe: 62:08:28:c1:93:09:f6:57:37:e2:02:8e:42:84:98: b0:87:4a:49:77:4e:e6:9e:fc:04:fc:bd:89:a8:9e: ed:06:25:33:2a:5b:46:e2:c1:61:a5:d6:25:67:d1: a1:39:37:f8:e1:b3:53:2c:21:58:05:95:78:38:8d: 04:ca:94:fd:24:81:b0:3f:0e:6a:a8:0c:21:5d:98: 1f:9b:13:3f:2b:5a:46:de:df:de:0a:ea:17:8c:fb: 71:50:04:8a:60:70:d7:89:e0:2c:fd:4a:d4:77:13: 24:c7:a4:50:47:80:7c:bc:2f:9b:86:0b:4e:9f:64: ab:25:ae:8a:e9:83:60:5c:1c:69:d0:b5:3f:0a:d7: 99:39:29:62:59:6d:4a:45:32:51:df:09:6b:ba:c8: f0:e3:a7:94:db:64:23:0f:4d:54:93:8e:19:ba:fd: 57:2e:27:e0:d5:b3:3d:60:22:1f:c7:56:c0:89:62: 28:40:89:3e:18:24:0b:ef:cb:bb:cb:7a:b1:7b:10: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9E:C6:82:42:B7:B0:F5:2F:23:45:44:E2:7B:89:64:54:B9:DA:45 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:40:24:1d:65:d6:d4:1b:04:a9:bf:d4:99:c0:61:a7:3a:72: d3:53:0c:bc:c9:11:2b:1a:66:93:57:15:ce:c4:70:12:89:40: 3b:3f:49:aa:f7:0e:28:c6:26:31:df:41:fe:fa:78:13:33:f9: 89:95:90:e8:23:25:cf:9d:1b:65:02:01:a1:f7:3e:3d:31:1d: f3:f0:02:f9:c4:45:a7:98:c6:68:c6:1a:40:ad:67:5b:ba:0e: a8:b7:ff:a8:25:3e:56:e5:f3:19:af:98:1d:7b:36:42:d2:c6: 16:4a:37:ee:9c:b3:8b:88:bb:07:18:97:92:2e:84:58:99:c8: fe:76:b7:c4:a5:4f:ae:9c:c9:62:b1:56:b6:ba:71:7d:9c:f6: 8a:4c:e3:37:a4:35:ae:c2:f2:b5:8e:dc:03:6a:e9:fe:7d:63: 54:90:53:da:57:af:7a:a7:c4:28:0e:fd:c5:05:02:9b:0e:2e: 5c:7f:17:77:4e:61:4f:af:41:e7:fa:60:db:e5:f2:29:89:1e: 79:db:16:5f:d6:5d:bb:67:dd:96:b2:7a:d4:07:b0:13:90:51: db:50:ce:3c:59:e5:4c:1e:86:0a:fb:6f:12:8e:17:90:2b:ae: ee:ae:43:13:0b:5d:7c:f2:07:9b:ec:cb:d9:5b:7a:ea:17:70: cb:2e:90:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUfv7n5djIDM7Y+iLENm4JYwfQe9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMDMyMzU1MTRaFw0yNzAxMDMwMDAwMTRaMDMxMTAvBgNV BAMTKERCOUVDNjgyNDJCN0IwRjUyRjIzNDU0NEUyN0I4OTY0NTRCOURBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCON4S/AgIl7vSHe1BsvTQF7ifU F6ucqpOOXmPGVg39ihxwZBNwJTfbbQmvIqM/sHV34u/GsCRXypYW/mIIKMGTCfZX N+ICjkKEmLCHSkl3Tuae/AT8vYmonu0GJTMqW0biwWGl1iVn0aE5N/jhs1MsIVgF lXg4jQTKlP0kgbA/DmqoDCFdmB+bEz8rWkbe394K6heM+3FQBIpgcNeJ4Cz9StR3 EyTHpFBHgHy8L5uGC06fZKslrorpg2BcHGnQtT8K15k5KWJZbUpFMlHfCWu6yPDj p5TbZCMPTVSTjhm6/VcuJ+DVsz1gIh/HVsCJYihAiT4YJAvvy7vLerF7EPtJAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQU257GgkK3sPUvI0VE4nuJZFS52kUwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTOTAwOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFKL+jAN BgkqhkiG9w0BAQsFAAOCAQEALUAkHWXW1BsEqb/UmcBhpzpy01MMvMkRKxpmk1cV zsRwEolAOz9JqvcOKMYmMd9B/vp4EzP5iZWQ6CMlz50bZQIBofc+PTEd8/AC+cRF p5jGaMYaQK1nW7oOqLf/qCU+VuXzGa+YHXs2QtLGFko37pyzi4i7BxiXki6EWJnI /na3xKVPrpzJYrFWtrpxfZz2ikzjN6Q1rsLytY7cA2rp/n1jVJBT2leveqfEKA79 xQUCmw4uXH8Xd05hT69B5/pg2+XyKYkeedsWX9Zdu2fdlrJ61AewE5BR21DOPFnl TB6GCvtvEo4XkCuu7q5DEwtdfPIHm+zL2Vt66hdwyy6QFA== -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:46 2026 by rpki-client