Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: pzp7bpvDA+m/ePXKrddiabcxXaaMpNrp41C+lXmhLAU=
Subject key identifier: DE:96:0C:AE:57:D5:2A:7A:91:83:BB:0F:A5:52:81:53:25:62:A1:37
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 32E28786B97D25A0B68C8C221861B6C608B468CE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
Signing time: Wed 19 Aug 2026 17:04:29 +0000
ROA not before: Wed 19 Aug 2026 16:59:29 +0000
ROA not after: Wed 18 Aug 2027 17:04:29 +0000
asID: 9009
IP address blocks: 82.21.138.0/24 maxlen: 24
82.21.217.0/24 maxlen: 24
82.21.240.0/24 maxlen: 24
82.22.242.0/24 maxlen: 24
82.23.7.0/24 maxlen: 24
82.23.8.0/24 maxlen: 24
82.23.9.0/24 maxlen: 24
82.23.10.0/24 maxlen: 24
82.23.11.0/24 maxlen: 24
82.23.12.0/24 maxlen: 24
82.23.216.0/24 maxlen: 24
82.23.232.0/24 maxlen: 24
82.24.8.0/24 maxlen: 24
82.24.25.0/24 maxlen: 24
82.24.86.0/24 maxlen: 24
82.24.223.0/24 maxlen: 24
82.24.230.0/24 maxlen: 24
82.25.214.0/24 maxlen: 24
82.25.227.0/24 maxlen: 24
82.26.121.0/24 maxlen: 24
82.26.217.0/24 maxlen: 24
82.27.226.0/24 maxlen: 24
82.29.95.0/24 maxlen: 24
82.29.113.0/24 maxlen: 24
82.29.114.0/24 maxlen: 24
82.29.116.0/24 maxlen: 24
82.29.117.0/24 maxlen: 24
82.29.238.0/24 maxlen: 24
82.38.14.0/24 maxlen: 24
82.47.252.0/23 maxlen: 24
178.83.10.0/24 maxlen: 24
178.83.99.0/24 maxlen: 24
2a13:9500:2::/48 maxlen: 48
2a13:9500:4::/48 maxlen: 48
2a13:9500:5::/48 maxlen: 48
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:11::/48 maxlen: 48
2a13:9500:12::/48 maxlen: 48
2a13:9500:13::/48 maxlen: 48
2a13:9500:14::/48 maxlen: 48
2a13:9500:15::/48 maxlen: 48
2a13:9500:16::/48 maxlen: 48
2a13:9500:17::/48 maxlen: 48
2a13:9500:18::/48 maxlen: 48
2a13:9500:19::/48 maxlen: 48
2a13:9500:1a::/48 maxlen: 48
2a13:9500:1b::/48 maxlen: 48
2a13:9500:29::/48 maxlen: 48
2a13:9500:2a::/48 maxlen: 48
2a13:9500:2b::/48 maxlen: 48
2a13:9500:2c::/48 maxlen: 48
2a13:9500:2f::/48 maxlen: 48
2a13:9500:30::/48 maxlen: 48
2a13:9500:31::/48 maxlen: 48
2a13:9500:34::/48 maxlen: 48
2a13:9500:35::/48 maxlen: 48
2a13:9500:3b::/48 maxlen: 48
2a13:9500:3c::/48 maxlen: 48
2a13:9500:3d::/48 maxlen: 48
2a13:9500:58::/48 maxlen: 48
2a13:9500:59::/48 maxlen: 48
2a13:9500:5a::/48 maxlen: 48
2a13:9500:f1::/48 maxlen: 48
2a13:9500:f2::/48 maxlen: 48
2a13:9500:f3::/48 maxlen: 48
2a13:9500:f4::/48 maxlen: 48
2a13:9500:f5::/48 maxlen: 48
2a13:9500:f6::/48 maxlen: 48
2a13:9500:f7::/48 maxlen: 48
2a13:9500:f8::/48 maxlen: 48
2a13:9500:f9::/48 maxlen: 48
2a13:9500:16b::/48 maxlen: 48
2a13:9500:1c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e2:87:86:b9:7d:25:a0:b6:8c:8c:22:18:61:b6:c6:08:b4:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 16:59:29 2026 GMT
Not After : Aug 18 17:04:29 2027 GMT
Subject: CN=DE960CAE57D52A7A9183BB0FA55281532562A137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:3d:e3:f8:2d:01:37:86:7e:8b:9d:93:70:
9b:21:e2:1b:f1:2c:86:62:80:9f:dd:44:c7:34:d4:
55:bd:4c:50:d9:c1:f8:a2:d4:5d:b9:b2:fb:21:b2:
a7:92:23:db:20:65:c1:b0:df:66:3d:8b:f4:0f:84:
c6:14:e9:d5:fb:57:eb:f5:3d:9a:18:25:40:61:e8:
22:24:d2:4f:6b:f5:05:93:ff:c5:39:23:4e:7e:79:
cc:ea:2d:84:cf:6d:f5:35:b2:b7:a0:0a:d3:76:fb:
1d:09:06:d7:e7:f7:1e:e4:82:c8:65:48:22:c1:f1:
73:d4:f1:f4:46:77:c8:13:d3:7e:1f:b6:65:7b:74:
3e:1d:48:02:30:7d:61:e8:1d:24:5b:82:57:c0:cd:
0c:89:66:dd:0f:8b:61:2b:b4:9f:20:fc:af:a4:0b:
16:54:ac:f1:62:64:c2:bf:2a:d8:d1:13:4e:5a:7a:
19:6f:d2:38:8e:09:dc:73:eb:15:7f:f3:53:5c:a0:
bd:25:61:84:2e:76:4c:9b:59:7a:a2:b8:4a:95:e7:
61:58:55:d8:42:7f:7d:ae:26:3d:fe:8f:f5:7a:a5:
df:dc:3b:da:49:f9:53:cd:68:c1:b3:0a:a0:25:9c:
9f:99:08:6f:29:d3:34:60:18:c2:e8:79:5d:69:20:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:0C:AE:57:D5:2A:7A:91:83:BB:0F:A5:52:81:53:25:62:A1:37
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.138.0/24
82.21.217.0/24
82.21.240.0/24
82.22.242.0/24
82.23.7.0-82.23.12.255
82.23.216.0/24
82.23.232.0/24
82.24.8.0/24
82.24.25.0/24
82.24.86.0/24
82.24.223.0/24
82.24.230.0/24
82.25.214.0/24
82.25.227.0/24
82.26.121.0/24
82.26.217.0/24
82.27.226.0/24
82.29.95.0/24
82.29.113.0-82.29.114.255
82.29.116.0/23
82.29.238.0/24
82.38.14.0/24
82.47.252.0/23
178.83.10.0/24
178.83.99.0/24
IPv6:
2a13:9500:2::/48
2a13:9500:4::-2a13:9500:1b:ffff:ffff:ffff:ffff:ffff
2a13:9500:29::-2a13:9500:2c:ffff:ffff:ffff:ffff:ffff
2a13:9500:2f::-2a13:9500:31:ffff:ffff:ffff:ffff:ffff
2a13:9500:34::/47
2a13:9500:3b::-2a13:9500:3d:ffff:ffff:ffff:ffff:ffff
2a13:9500:58::-2a13:9500:5a:ffff:ffff:ffff:ffff:ffff
2a13:9500:f1::-2a13:9500:f9:ffff:ffff:ffff:ffff:ffff
2a13:9500:16b::/48
2a13:9500:1c2::/48
Signature Algorithm: sha256WithRSAEncryption
9b:55:bf:f0:08:0d:f4:5f:9c:1e:56:36:16:66:eb:dd:90:53:
ea:dc:7b:89:e8:a2:ef:df:06:27:62:96:21:cc:63:a3:72:0b:
54:65:8b:c4:76:2d:2f:f5:40:61:01:61:04:45:bc:3e:2c:77:
de:39:36:64:3a:8f:83:21:ed:1a:1c:4e:c5:e2:c7:b7:88:14:
bf:94:d6:c7:3b:07:b5:8a:59:1c:e3:54:a6:64:04:54:c5:b0:
3a:b7:8d:23:50:45:26:10:39:89:5a:31:0c:9b:29:56:a4:6d:
9f:83:40:51:62:3b:f6:79:58:9a:71:9a:ee:1e:ae:af:d9:31:
96:55:37:b1:0c:24:7c:1a:07:18:f8:4a:87:9e:bb:b1:30:0a:
d7:66:7a:74:46:f3:a5:ac:b4:b0:a0:ef:35:98:da:d3:36:d4:
ab:db:05:d7:3f:2f:41:d0:19:a9:0c:92:00:83:7a:26:e4:0a:
b7:29:cc:04:17:11:cf:1d:c3:cf:7d:73:25:b4:56:69:84:b9:
27:94:98:d1:0a:ca:5c:63:1b:68:9b:cc:43:f5:22:13:7b:97:
30:8e:d7:8c:1c:fd:7c:22:2e:49:92:0d:21:22:33:31:5d:31:
f5:29:60:87:86:f3:c8:04:f1:fe:55:3c:d1:20:12:30:9b:7e:
44:b1:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:04 2026 by rpki-client