Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: 5UMjMJszEotbgEIyn8H97phxIkbnYZvBGkF7uHwVxb0=
Subject key identifier: 3C:EF:46:78:84:AF:B7:16:8C:3C:52:6E:EE:42:FF:BE:18:D0:89:8A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 76FF9FB926A9243041D84FAAF7C58E224AB02DCF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
Signing time: Tue 30 Jun 2026 10:32:12 +0000
ROA not before: Tue 30 Jun 2026 10:27:12 +0000
ROA not after: Tue 29 Jun 2027 10:32:12 +0000
asID: 9009
IP address blocks: 51.146.220.0/22 maxlen: 22
51.146.228.0/22 maxlen: 22
78.105.117.0/24 maxlen: 24
78.105.120.0/24 maxlen: 24
78.105.122.0/24 maxlen: 24
78.105.127.0/24 maxlen: 24
78.105.142.0/24 maxlen: 24
78.105.158.0/24 maxlen: 24
78.105.207.0/24 maxlen: 24
78.105.209.0/24 maxlen: 24
78.105.217.0/24 maxlen: 24
78.105.234.0/24 maxlen: 24
188.221.214.0/24 maxlen: 24
188.221.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ff:9f:b9:26:a9:24:30:41:d8:4f:aa:f7:c5:8e:22:4a:b0:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 30 10:27:12 2026 GMT
Not After : Jun 29 10:32:12 2027 GMT
Subject: CN=3CEF467884AFB7168C3C526EEE42FFBE18D0898A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:db:f1:75:ee:7b:51:2d:80:65:91:09:22:
e9:92:2f:70:d7:cf:4d:fa:b7:e9:af:ac:45:45:5f:
b7:22:e4:7c:54:bb:f6:98:b8:35:15:16:59:b2:78:
a7:34:75:ce:e6:b9:f2:11:5c:3b:2d:cb:23:41:69:
25:86:79:4f:60:d4:89:d5:fb:86:ed:74:8d:91:7e:
d9:a9:04:16:36:b4:90:ba:8e:63:ad:83:a2:9f:a1:
7c:36:4f:96:ac:0b:f3:11:0e:c7:e0:76:c2:d3:04:
3c:75:3c:bf:ec:17:db:9e:5f:21:d8:9f:7f:02:5e:
fc:0a:13:bf:ed:86:f7:2d:ec:bd:16:b5:22:a3:7d:
86:db:ff:23:6b:35:eb:06:04:da:f5:08:94:30:6f:
a5:46:eb:d0:81:36:f1:0a:07:a4:c5:2d:69:18:97:
4c:fa:3c:9d:62:9a:21:04:48:5d:72:16:23:dd:cf:
c3:79:7c:93:43:f0:98:9f:0a:cd:f5:70:41:5b:28:
f9:be:2f:65:d3:d8:b4:4d:19:bc:98:00:e6:b0:5b:
60:f9:27:c1:ab:c6:f5:4e:c1:55:dc:a4:0e:4e:8a:
5e:b4:c4:72:4f:4a:bd:c5:b4:b5:28:d0:91:09:ff:
08:41:7f:c1:24:9d:a8:9e:1c:aa:e7:34:eb:90:8e:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:46:78:84:AF:B7:16:8C:3C:52:6E:EE:42:FF:BE:18:D0:89:8A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.220.0/22
51.146.228.0/22
78.105.117.0/24
78.105.120.0/24
78.105.122.0/24
78.105.127.0/24
78.105.142.0/24
78.105.158.0/24
78.105.207.0/24
78.105.209.0/24
78.105.217.0/24
78.105.234.0/24
188.221.214.0/24
188.221.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:03:f0:83:fa:52:28:f4:58:84:4a:e8:8d:99:ad:ae:71:c3:
7e:e5:9e:ff:e3:3a:a8:0f:71:d3:5c:d0:0a:df:dc:f8:c2:29:
66:a2:42:cd:39:68:5a:0d:0c:e9:1b:9b:3a:d7:9a:23:7b:a4:
60:94:e6:2b:e5:8b:57:24:a1:dc:a8:38:5d:7b:e4:6c:31:f2:
32:c7:01:a6:7c:84:8b:7a:92:31:6f:5b:c5:1a:7f:e9:dc:1d:
de:c7:cc:ca:ba:77:09:9b:4c:16:a1:79:88:dd:d6:95:11:91:
b6:99:9b:75:e6:26:1e:2c:84:4b:51:46:82:85:08:1e:45:c8:
a4:7a:f6:aa:88:49:65:54:18:92:d2:10:08:16:31:13:1f:39:
15:19:1e:dc:14:62:78:34:57:10:f3:8c:b4:8a:b2:e8:b4:7a:
57:57:05:59:7c:76:0b:09:ca:a1:43:7c:22:a7:f8:c9:99:da:
e3:6d:77:1f:6b:f0:fa:66:d6:a7:86:bc:4d:0b:f8:47:1c:35:
ec:42:41:31:3e:20:46:8a:40:db:fd:1d:0e:17:69:1e:39:56:
11:ea:f9:ef:5b:77:c9:8a:95:7a:b6:a8:f3:c7:c7:b1:93:3b:
1e:67:d6:47:20:87:66:a7:e7:ef:c2:3d:80:ca:e8:1c:97:7e:
4a:53:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:44 2026 by rpki-client