Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: sY1BGk/f/a2Y002dN29h9cISpOHYVz5wrFQlPfdIqLM=
Subject key identifier: B7:DA:D3:90:D3:97:35:B0:C9:E4:C2:3C:5B:0F:FB:FD:99:E6:58:5A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 74FC7B7763B3A6A60FF2D7DBEA57369A5B71CCF6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
Signing time: Thu 08 Oct 2026 18:09:40 +0000
ROA not before: Thu 08 Oct 2026 18:04:40 +0000
ROA not after: Thu 07 Oct 2027 18:09:40 +0000
asID: 9009
IP address blocks: 141.11.37.0/24 maxlen: 24
141.11.245.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fc:7b:77:63:b3:a6:a6:0f:f2:d7:db:ea:57:36:9a:5b:71:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 8 18:04:40 2026 GMT
Not After : Oct 7 18:09:40 2027 GMT
Subject: CN=B7DAD390D39735B0C9E4C23C5B0FFBFD99E6585A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:31:8a:8b:af:28:85:e5:19:9a:21:c5:9c:
a7:55:89:0f:07:d2:55:da:da:f4:16:0b:2d:9c:86:
c3:7e:bc:49:78:e5:2b:72:01:6f:90:c1:1f:2d:0d:
36:21:20:bd:4f:de:74:90:ab:25:a5:bc:e6:02:aa:
5a:75:00:8b:26:68:c6:44:3b:b7:9c:13:84:f5:95:
d5:03:3b:5f:98:90:2e:6c:e8:a7:81:82:0e:d1:b1:
6e:05:22:ba:1c:f7:c3:31:dd:d0:19:5b:fc:91:72:
a2:db:d2:22:15:59:76:e4:7f:cc:ed:b2:ca:f3:f1:
f7:e1:62:2a:4a:f2:55:5a:41:d5:ab:41:cc:5d:26:
8c:ea:c8:27:45:c7:ea:b1:c6:a0:fb:99:87:06:4a:
5b:28:85:68:fa:e4:68:e5:3d:bb:98:ce:10:04:d9:
38:e9:39:3a:f0:ba:9e:03:35:2e:d4:cc:7e:13:35:
84:18:8a:86:36:b3:b5:19:fe:18:4f:fa:0c:49:5a:
4c:d4:d8:33:01:87:e3:74:c0:16:06:b4:6d:32:c8:
85:76:33:51:ad:ce:44:10:58:9d:f0:d9:8a:0e:42:
ec:b8:6a:67:56:8f:69:31:d9:aa:db:cb:f4:5d:ea:
1e:b4:0a:74:50:a9:02:9a:07:dd:12:72:0b:3c:06:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:D3:90:D3:97:35:B0:C9:E4:C2:3C:5B:0F:FB:FD:99:E6:58:5A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
141.11.245.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:11:48:c2:d8:ee:31:d9:5d:5a:fd:81:19:8d:0c:39:a7:ba:
d2:0f:b4:f4:82:e4:30:47:e6:4b:6b:3c:41:4b:56:6f:35:28:
95:d8:6c:df:54:12:11:01:87:b1:fb:b3:12:d0:60:a0:22:78:
30:58:37:6a:0f:25:b6:fe:e0:50:f2:ea:f1:36:b0:1e:50:e0:
30:4d:20:6b:43:a6:c0:ed:c6:a3:36:25:78:6a:b6:47:9b:d3:
5b:23:7b:53:02:ff:83:56:23:4f:8f:a3:c2:9c:ed:06:2a:a4:
f7:96:26:cc:a9:64:c4:3d:7c:a9:84:10:72:c3:11:9a:1e:a4:
b8:fb:04:1e:4b:b0:03:9e:44:fb:72:d5:b3:45:45:aa:72:fa:
c2:d9:9f:75:c3:7b:d0:76:97:f8:cd:5e:a0:f2:66:c6:ca:ac:
f5:1e:21:4e:3e:33:51:df:b8:8a:34:ac:82:29:96:2a:34:a5:
51:1f:6e:d1:b5:6b:18:da:01:07:dc:41:0f:f8:96:12:34:4c:
a1:1c:a6:20:d6:aa:56:73:49:4d:fc:b8:e7:af:7c:3a:4f:83:
a9:4a:41:82:6b:33:f1:ee:2a:d8:51:20:d8:6c:41:e8:f5:3e:
a2:ee:33:6b:60:bd:b0:d3:e6:6a:8d:62:69:82:1d:e8:b8:9e:
17:c3:94:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 13:18:22 2026 by rpki-client