Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: rL7XOBvFYf6GJhILL0q2HeSi6W34wThR/vikoy5pnnA=
Subject key identifier: BF:73:FC:D5:CB:DA:58:A4:18:AC:38:DF:B9:16:45:EE:09:75:47:45
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07C33B9BDD4ADDDFA72A608154BDFDCF66588357
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
Signing time: Wed 13 May 2026 14:30:34 +0000
ROA not before: Wed 13 May 2026 14:25:34 +0000
ROA not after: Wed 12 May 2027 14:30:34 +0000
asID: 9009
IP address blocks: 51.146.220.0/22 maxlen: 22
51.146.228.0/22 maxlen: 22
78.105.117.0/24 maxlen: 24
78.105.120.0/24 maxlen: 24
78.105.122.0/24 maxlen: 24
78.105.127.0/24 maxlen: 24
78.105.142.0/24 maxlen: 24
78.105.158.0/24 maxlen: 24
78.105.217.0/24 maxlen: 24
78.105.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c3:3b:9b:dd:4a:dd:df:a7:2a:60:81:54:bd:fd:cf:66:58:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 13 14:25:34 2026 GMT
Not After : May 12 14:30:34 2027 GMT
Subject: CN=BF73FCD5CBDA58A418AC38DFB91645EE09754745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:fd:66:83:8c:d2:92:50:51:80:80:96:66:
c6:96:26:74:1e:bc:50:fb:cd:e0:0b:f3:49:42:2d:
f8:1b:9d:9d:55:0a:e1:dc:ed:9f:f3:e7:19:19:86:
82:70:52:5b:cf:29:73:c0:01:c5:1c:41:1f:37:3b:
89:5c:72:7b:02:39:1f:8e:cf:9d:2c:7e:0b:a5:2f:
ae:dc:54:db:9e:72:b5:f9:53:73:ef:5a:9f:2a:46:
a3:2d:31:5a:08:39:0d:f1:cd:38:3d:e8:9c:d1:de:
a2:a3:a9:8f:a8:e1:ba:c9:48:e4:9e:e5:0e:51:ed:
95:9f:47:20:a6:7d:29:2a:91:30:13:70:1c:b5:23:
33:d9:b0:c6:a1:65:58:11:42:30:16:71:3c:0f:50:
d8:d5:47:1a:a1:dd:4c:06:79:39:d4:ba:8e:f1:40:
87:b4:a7:c9:f7:59:4b:56:c6:3c:b5:50:29:3b:a1:
fe:83:c0:ef:e6:1b:ce:97:80:48:0c:10:77:00:2c:
ba:b1:81:fc:fd:42:74:f6:cd:87:13:b0:b1:b9:96:
d3:ca:8b:a6:99:f0:18:0f:8b:a6:fc:25:30:dc:7d:
f8:a1:69:b2:e4:f8:9e:96:ef:63:18:42:24:a5:0e:
46:63:ac:ec:32:b2:12:71:5e:2e:f4:4c:7d:bd:07:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:FC:D5:CB:DA:58:A4:18:AC:38:DF:B9:16:45:EE:09:75:47:45
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.220.0/22
51.146.228.0/22
78.105.117.0/24
78.105.120.0/24
78.105.122.0/24
78.105.127.0/24
78.105.142.0/24
78.105.158.0/24
78.105.217.0/24
78.105.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:68:21:d6:be:ef:cf:75:53:bd:fa:64:36:4a:40:d8:31:01:
a5:ce:67:3f:ca:55:a2:ff:9e:6b:08:c8:55:80:59:57:19:d8:
76:8e:83:32:a3:ad:13:6a:04:6c:08:f3:1b:83:b4:d1:fb:ae:
14:cf:83:45:48:5e:07:6b:90:99:52:c6:3d:ef:df:23:59:b7:
45:21:39:6c:36:af:dd:fe:d2:d6:9d:fe:03:8e:db:75:fc:ef:
1d:88:a2:77:08:0c:cc:97:b0:63:22:19:04:73:2e:d9:8b:c5:
b8:0a:e2:51:a7:5e:50:d6:02:e2:20:ae:bf:73:1f:4a:3c:22:
05:a1:ef:b7:c2:f7:a3:e4:2c:53:7c:95:3b:59:9c:57:d2:d7:
c5:ec:7c:03:38:80:32:a5:e2:60:e4:6b:2a:34:4a:87:20:c2:
c5:8c:1c:74:fa:e4:71:85:fc:a5:05:0b:7a:91:1b:a3:60:e4:
5c:e7:05:38:16:33:5d:4b:28:f8:55:f8:42:80:f3:60:f4:4c:
71:f1:5d:56:c9:68:fa:69:b1:5d:93:df:9a:9d:af:ad:02:98:
b0:b7:19:af:6c:5a:1f:ab:64:cc:b5:a0:d5:5d:0d:20:be:88:
10:f3:c5:b5:e5:77:2c:d5:49:db:73:18:46:5e:e7:3c:0a:19:
93:bd:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:14 2026 by rpki-client