Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: FtUV8aGaiKo5NM8z105aa0PJnLrvieyTnVF2FrQ/EY8=
Subject key identifier: 2E:29:10:71:83:11:97:28:91:15:4D:6F:67:14:B9:8F:AB:05:A7:27
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 10F8E60290DD9A0168D6E966A846A5D34EAAC66D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
Signing time: Thu 01 Oct 2026 00:13:38 +0000
ROA not before: Thu 01 Oct 2026 00:08:38 +0000
ROA not after: Thu 30 Sep 2027 00:13:38 +0000
asID: 9009
IP address blocks: 46.202.228.0/22 maxlen: 24
46.202.236.0/22 maxlen: 24
46.202.244.0/22 maxlen: 24
46.203.16.0/23 maxlen: 24
46.203.94.0/23 maxlen: 24
46.203.100.0/23 maxlen: 24
46.203.122.0/23 maxlen: 24
46.203.132.0/23 maxlen: 24
46.203.158.0/24 maxlen: 24
46.203.162.0/23 maxlen: 24
46.203.236.0/22 maxlen: 24
46.203.244.0/22 maxlen: 24
46.203.252.0/22 maxlen: 24
91.124.31.0/24 maxlen: 24
91.124.140.0/24 maxlen: 24
91.124.220.0/24 maxlen: 24
91.124.243.0/24 maxlen: 24
91.124.252.0/24 maxlen: 24
92.112.2.0/23 maxlen: 24
92.112.59.0/24 maxlen: 24
92.112.72.0/23 maxlen: 24
92.112.79.0/24 maxlen: 24
92.112.100.0/22 maxlen: 24
92.112.120.0/22 maxlen: 24
92.112.221.0/24 maxlen: 24
92.112.234.0/24 maxlen: 24
92.112.237.0/24 maxlen: 24
92.113.2.0/24 maxlen: 24
92.113.5.0/24 maxlen: 24
92.113.8.0/24 maxlen: 24
92.113.94.0/23 maxlen: 24
92.113.96.0/22 maxlen: 24
92.113.108.0/22 maxlen: 24
92.113.120.0/22 maxlen: 24
92.113.130.0/23 maxlen: 24
95.134.8.0/22 maxlen: 22
95.134.24.0/22 maxlen: 22
95.134.36.0/22 maxlen: 22
95.134.44.0/22 maxlen: 22
95.134.56.0/22 maxlen: 22
95.134.72.0/22 maxlen: 22
95.134.102.0/24 maxlen: 24
95.134.144.0/22 maxlen: 22
95.134.188.0/22 maxlen: 22
95.134.208.0/22 maxlen: 22
95.134.216.0/22 maxlen: 22
95.135.96.0/22 maxlen: 22
95.135.120.0/22 maxlen: 22
95.135.137.0/24 maxlen: 24
95.135.197.0/24 maxlen: 24
95.135.209.0/24 maxlen: 24
95.135.217.0/24 maxlen: 24
95.135.218.0/24 maxlen: 24
95.135.225.0/24 maxlen: 24
95.135.229.0/24 maxlen: 24
95.135.234.0/24 maxlen: 24
95.135.237.0/24 maxlen: 24
95.135.248.0/24 maxlen: 24
178.93.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f8:e6:02:90:dd:9a:01:68:d6:e9:66:a8:46:a5:d3:4e:aa:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 1 00:08:38 2026 GMT
Not After : Sep 30 00:13:38 2027 GMT
Subject: CN=2E2910718311972891154D6F6714B98FAB05A727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:f4:ef:02:c4:82:47:3d:93:14:1c:5d:f9:
7f:a2:a5:dd:08:ac:c7:ea:56:36:1b:6b:fd:68:b4:
84:1e:8f:ed:2a:54:8d:aa:a4:c7:a5:ba:31:d4:88:
21:ac:7f:ba:06:84:81:87:bf:52:75:5c:94:c0:74:
a9:1a:e1:37:cc:57:1c:9e:dd:bd:bf:59:a0:c6:85:
ae:2f:30:fa:3a:9b:0f:87:cb:ba:41:75:80:e0:a3:
3d:e2:65:a9:7b:df:0e:5e:03:ce:79:25:23:de:3f:
32:34:21:57:e3:4b:ad:50:a5:38:c3:57:95:cc:23:
ab:de:d8:40:62:de:6b:c9:c8:c0:fe:a4:7b:91:88:
3a:ab:fb:43:45:d3:08:a1:b2:ca:5d:41:29:11:2e:
ff:95:87:52:90:25:8d:8c:42:da:d2:ce:68:da:e0:
ff:90:5a:08:15:5e:1d:9d:0e:93:95:31:58:fa:32:
dc:15:2c:5c:4c:15:54:14:b5:8e:9e:37:de:de:67:
fb:eb:4c:64:27:0f:88:d3:67:6b:ec:21:6d:e4:27:
9e:7e:a0:b9:34:d2:ee:b9:a8:a6:29:af:08:ab:ff:
16:6f:d3:37:5d:63:c8:c7:7f:78:23:64:fb:32:b9:
5e:dc:b1:ed:ee:5c:59:af:0b:a5:48:ee:b4:84:49:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:10:71:83:11:97:28:91:15:4D:6F:67:14:B9:8F:AB:05:A7:27
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.228.0/22
46.202.236.0/22
46.202.244.0/22
46.203.16.0/23
46.203.94.0/23
46.203.100.0/23
46.203.122.0/23
46.203.132.0/23
46.203.158.0/24
46.203.162.0/23
46.203.236.0/22
46.203.244.0/22
46.203.252.0/22
91.124.31.0/24
91.124.140.0/24
91.124.220.0/24
91.124.243.0/24
91.124.252.0/24
92.112.2.0/23
92.112.59.0/24
92.112.72.0/23
92.112.79.0/24
92.112.100.0/22
92.112.120.0/22
92.112.221.0/24
92.112.234.0/24
92.112.237.0/24
92.113.2.0/24
92.113.5.0/24
92.113.8.0/24
92.113.94.0-92.113.99.255
92.113.108.0/22
92.113.120.0/22
92.113.130.0/23
95.134.8.0/22
95.134.24.0/22
95.134.36.0/22
95.134.44.0/22
95.134.56.0/22
95.134.72.0/22
95.134.102.0/24
95.134.144.0/22
95.134.188.0/22
95.134.208.0/22
95.134.216.0/22
95.135.96.0/22
95.135.120.0/22
95.135.137.0/24
95.135.197.0/24
95.135.209.0/24
95.135.217.0-95.135.218.255
95.135.225.0/24
95.135.229.0/24
95.135.234.0/24
95.135.237.0/24
95.135.248.0/24
178.93.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ae:33:4a:6d:32:79:4f:7a:92:8d:c3:30:c0:ac:0c:a3:86:
4a:f8:88:37:82:18:54:52:ff:2c:f7:ba:58:b3:ec:e5:13:ab:
6c:ad:25:9a:65:8e:88:da:e0:83:d5:1e:db:58:a9:55:05:b4:
5b:a6:d8:5c:bb:56:a7:81:c5:c5:ae:22:30:c4:6d:5e:8d:bc:
5c:94:8e:b4:69:9e:30:45:a7:62:4f:2d:0e:e9:4a:f4:aa:3e:
a7:0b:09:61:b6:06:7e:34:96:92:9d:f9:5d:58:a0:9d:52:74:
67:94:10:3e:9f:96:39:d6:8a:50:80:61:4c:09:04:a1:62:fe:
00:13:b4:ff:1b:fe:a9:d8:fa:c6:4b:3c:ec:4b:e3:8e:9a:e2:
d0:c7:ff:98:27:88:b5:80:67:4d:cc:a6:8d:74:0c:7f:2b:9a:
83:d0:25:95:f9:55:de:22:6c:5d:51:48:70:1e:21:86:1a:2e:
3b:f5:e7:90:84:7b:bc:90:f9:9e:5f:74:6e:a6:45:30:c2:e2:
e4:ff:b2:33:ec:05:e6:ed:05:c1:e4:ca:f6:b8:5b:43:34:39:
88:c4:2f:31:6f:7f:d4:64:87:9e:89:c5:fb:ad:23:e5:c6:b5:
79:e7:8d:5a:8d:57:9a:da:42:2c:af:77:29:a0:d0:7f:6e:d8:
50:7d:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:42:28 2026 by rpki-client