Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: AjynohX/vEzB0zQgQsmVe3IbxGuzvyGrnAP5OwpVCB0=
Subject key identifier: C5:FF:7E:CA:89:7F:DB:49:F4:48:B0:B6:A2:50:2E:EB:5A:05:1A:B5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70B7151D447AC0766504E32EF7FBCF3C16B73D5E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
Signing time: Thu 20 Mar 2025 10:16:39 +0000
ROA not before: Thu 20 Mar 2025 10:11:39 +0000
ROA not after: Thu 19 Mar 2026 10:16:39 +0000
asID: 9009
IP address blocks: 46.202.12.0/22 maxlen: 24
46.202.100.0/22 maxlen: 24
46.202.116.0/22 maxlen: 24
46.202.228.0/22 maxlen: 24
46.202.236.0/22 maxlen: 24
46.202.244.0/22 maxlen: 24
46.203.16.0/23 maxlen: 24
46.203.36.0/22 maxlen: 24
46.203.94.0/23 maxlen: 24
46.203.100.0/23 maxlen: 24
46.203.122.0/23 maxlen: 24
46.203.132.0/23 maxlen: 24
46.203.162.0/23 maxlen: 24
46.203.236.0/22 maxlen: 24
46.203.241.0/24 maxlen: 24
46.203.242.0/24 maxlen: 24
46.203.243.0/24 maxlen: 24
46.203.244.0/22 maxlen: 24
46.203.252.0/22 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.220.0/24 maxlen: 24
92.112.2.0/23 maxlen: 24
92.112.72.0/23 maxlen: 24
92.112.100.0/22 maxlen: 24
92.112.120.0/22 maxlen: 24
92.112.214.0/24 maxlen: 24
92.112.215.0/24 maxlen: 24
92.112.218.0/24 maxlen: 24
92.112.219.0/24 maxlen: 24
92.112.220.0/24 maxlen: 24
92.112.221.0/24 maxlen: 24
92.112.223.0/24 maxlen: 24
92.112.224.0/24 maxlen: 24
92.112.225.0/24 maxlen: 24
92.112.226.0/24 maxlen: 24
92.112.229.0/24 maxlen: 24
92.112.230.0/24 maxlen: 24
92.112.232.0/24 maxlen: 24
92.112.233.0/24 maxlen: 24
92.112.234.0/24 maxlen: 24
92.112.237.0/24 maxlen: 24
92.113.94.0/23 maxlen: 24
92.113.96.0/22 maxlen: 24
92.113.108.0/22 maxlen: 24
92.113.120.0/22 maxlen: 24
92.113.130.0/23 maxlen: 24
95.134.8.0/22 maxlen: 22
95.134.24.0/22 maxlen: 22
95.134.36.0/22 maxlen: 22
95.134.44.0/22 maxlen: 22
95.134.56.0/22 maxlen: 22
95.134.72.0/22 maxlen: 22
95.134.144.0/22 maxlen: 22
95.134.188.0/22 maxlen: 22
95.134.208.0/22 maxlen: 22
95.134.216.0/22 maxlen: 22
95.135.96.0/22 maxlen: 22
95.135.120.0/22 maxlen: 22
95.135.197.0/24 maxlen: 24
95.135.209.0/24 maxlen: 24
95.135.217.0/24 maxlen: 24
95.135.218.0/24 maxlen: 24
95.135.225.0/24 maxlen: 24
95.135.229.0/24 maxlen: 24
95.135.234.0/24 maxlen: 24
95.135.237.0/24 maxlen: 24
95.135.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b7:15:1d:44:7a:c0:76:65:04:e3:2e:f7:fb:cf:3c:16:b7:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 20 10:11:39 2025 GMT
Not After : Mar 19 10:16:39 2026 GMT
Subject: CN=C5FF7ECA897FDB49F448B0B6A2502EEB5A051AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:16:e1:b7:46:d2:4d:16:8a:85:c6:49:30:
8b:c6:8a:3a:7a:46:f3:d2:06:9c:a7:3c:44:c8:27:
99:4a:72:dd:0f:6c:f9:b6:97:f4:84:95:e2:9b:0b:
d8:52:45:44:07:1d:48:0a:4b:2c:67:47:87:fa:f3:
ae:13:3f:5d:05:6a:6b:fa:18:d2:b7:74:12:26:18:
2a:f7:e9:54:c4:91:91:8d:8e:ce:b8:58:dd:eb:5b:
b3:79:ec:38:b1:e1:87:3b:2b:d9:2b:b2:d5:f7:7a:
21:9a:5b:ec:08:13:1d:43:9c:d9:66:f7:09:90:73:
97:64:07:74:16:ba:84:7e:14:1d:55:7b:bd:58:33:
95:f6:8e:8a:b7:10:9e:ae:69:9c:20:e6:7d:e3:74:
c1:02:10:53:a4:53:67:84:59:29:72:f6:67:b2:2d:
92:bb:61:4e:35:84:c4:7b:c0:48:85:da:5f:68:97:
fe:66:ed:c8:14:17:68:c0:85:06:62:8b:df:65:10:
15:7e:e6:4f:d6:97:33:41:27:4d:2d:27:bd:83:8e:
61:fb:59:e4:7f:6e:67:59:f5:21:8f:ed:ba:ed:d6:
8f:4a:c3:f7:8e:3c:b0:f0:8b:10:1c:c0:76:4d:1e:
1e:95:97:76:68:e2:cc:b7:0f:86:6a:ac:83:9e:6e:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:7E:CA:89:7F:DB:49:F4:48:B0:B6:A2:50:2E:EB:5A:05:1A:B5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.12.0/22
46.202.100.0/22
46.202.116.0/22
46.202.228.0/22
46.202.236.0/22
46.202.244.0/22
46.203.16.0/23
46.203.36.0/22
46.203.94.0/23
46.203.100.0/23
46.203.122.0/23
46.203.132.0/23
46.203.162.0/23
46.203.236.0/22
46.203.241.0-46.203.247.255
46.203.252.0/22
91.124.122.0/24
91.124.220.0/24
92.112.2.0/23
92.112.72.0/23
92.112.100.0/22
92.112.120.0/22
92.112.214.0/23
92.112.218.0-92.112.221.255
92.112.223.0-92.112.226.255
92.112.229.0-92.112.230.255
92.112.232.0-92.112.234.255
92.112.237.0/24
92.113.94.0-92.113.99.255
92.113.108.0/22
92.113.120.0/22
92.113.130.0/23
95.134.8.0/22
95.134.24.0/22
95.134.36.0/22
95.134.44.0/22
95.134.56.0/22
95.134.72.0/22
95.134.144.0/22
95.134.188.0/22
95.134.208.0/22
95.134.216.0/22
95.135.96.0/22
95.135.120.0/22
95.135.197.0/24
95.135.209.0/24
95.135.217.0-95.135.218.255
95.135.225.0/24
95.135.229.0/24
95.135.234.0/24
95.135.237.0/24
95.135.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e5:86:df:7b:95:ef:1c:2c:19:38:d4:fd:60:ba:3b:f7:06:
91:2b:3e:d3:f8:c6:36:f0:f4:ba:c0:d5:6a:7a:a1:a3:8d:98:
7d:f4:a3:49:85:a4:39:41:6f:04:40:f5:02:ce:b1:0c:64:b1:
9e:79:6f:fa:72:46:2f:7a:e2:64:29:05:93:97:ca:3d:98:02:
c3:84:b2:95:29:ed:30:a4:ff:8e:14:b3:d2:ee:23:c6:dd:ea:
48:4a:b5:4b:a4:cf:62:21:a0:00:02:74:13:6c:41:ec:60:c4:
b6:9a:7a:95:28:ec:e2:36:bd:83:06:db:36:5f:dc:19:f5:5a:
e1:e1:2c:f3:30:54:68:62:9b:6a:77:b3:da:14:de:34:93:c6:
00:bc:21:7a:e0:47:9c:81:a6:7a:60:fa:e6:36:22:45:9c:fc:
f1:26:56:b4:66:d8:db:60:33:83:28:11:ea:2c:45:64:4b:15:
51:3f:aa:36:6d:00:5e:d5:90:f9:13:b3:56:86:94:05:91:dd:
fa:52:5a:22:94:db:37:fb:3d:dc:be:39:86:3b:d4:8f:05:43:
95:94:19:b2:f7:da:f0:98:4d:a1:4f:64:17:87:c3:5d:b4:b7:
b4:36:9c:bd:fa:58:7a:f3:0a:da:f9:79:d0:e8:a0:b7:dc:bc:
dd:61:68:69
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUcLcVHUR6wHZlBOMu9/vPPBa3PV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMjAxMDExMzlaFw0yNjAzMTkxMDE2MzlaMDMxMTAvBgNV
BAMTKEM1RkY3RUNBODk3RkRCNDlGNDQ4QjBCNkEyNTAyRUVCNUEwNTFBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1Rbht0bSTRaKhcZJMIvGijp6
RvPSBpynPETIJ5lKct0PbPm2l/SEleKbC9hSRUQHHUgKSyxnR4f6864TP10Famv6
GNK3dBImGCr36VTEkZGNjs64WN3rW7N57Dix4Yc7K9krstX3eiGaW+wIEx1DnNlm
9wmQc5dkB3QWuoR+FB1Ve71YM5X2joq3EJ6uaZwg5n3jdMECEFOkU2eEWSly9mey
LZK7YU41hMR7wEiF2l9ol/5m7cgUF2jAhQZii99lEBV+5k/WlzNBJ00tJ72DjmH7
WeR/bmdZ9SGP7brt1o9Kw/eOPLDwixAcwHZNHh6Vl3Zo4sy3D4ZqrIOebtWtAgMB
AAGjggN8MIIDeDAdBgNVHQ4EFgQUxf9+yol/20n0SLC2olAu61oFGrUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTOTAwOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAZEGCCsGAQUFBwEHAQH/BIIBgDCCAXwwggF4BAIAATCC
AXADBAIuygwDBAIuymQDBAIuynQDBAIuyuQDBAIuyuwDBAIuyvQDBAEuyxADBAIu
yyQDBAEuy14DBAEuy2QDBAEuy3oDBAEuy4QDBAEuy6IDBAIuy+wwDAMEAC7L8QME
Ay7L8AMEAi7L/AMEAFt8egMEAFt83AMEAVxwAgMEAVxwSAMEAlxwZAMEAlxweAME
AVxw1jAMAwQBXHDaAwQBXHDcMAwDBABccN8DBABccOIwDAMEAFxw5QMEAFxw5jAM
AwQDXHDoAwQAXHDqAwQAXHDtMAwDBAFccV4DBAJccWADBAJccWwDBAJccXgDBAFc
cYIDBAJfhggDBAJfhhgDBAJfhiQDBAJfhiwDBAJfhjgDBAJfhkgDBAJfhpADBAJf
hrwDBAJfhtADBAJfhtgDBAJfh2ADBAJfh3gDBABfh8UDBABfh9EwDAMEAF+H2QME
AF+H2gMEAF+H4QMEAF+H5QMEAF+H6gMEAF+H7QMEAF+H+DANBgkqhkiG9w0BAQsF
AAOCAQEAj+WG33uV7xwsGTjU/WC6O/cGkSs+0/jGNvD0usDVanqho42YffSjSYWk
OUFvBED1As6xDGSxnnlv+nJGL3riZCkFk5fKPZgCw4SylSntMKT/jhSz0u4jxt3q
SEq1S6TPYiGgAAJ0E2xB7GDEtpp6lSjs4ja9gwbbNl/cGfVa4eEs8zBUaGKbanez
2hTeNJPGALwheuBHnIGmemD65jYiRZz88SZWtGbY22AzgygR6ixFZEsVUT+qNm0A
XtWQ+ROzVoaUBZHd+lJaIpTbN/s93L45hjvUjwVDlZQZsvfa8JhNoU9kF4fDXbS3
tDacvfpYevMK2vl50Oigt9y83WFoaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:13 2025 by rpki-client