Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: /jyJNg4uCgyv5dVLJCrn066XqkyVA1EtbYFEO1JiFlY=
Subject key identifier: BF:5A:72:56:C4:FD:92:4D:BB:22:06:84:68:4C:45:FB:F9:F1:C3:5A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 27CE17BECB9C0A26C9B98B561FED2037F8F3603E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
Signing time: Sat 01 Aug 2026 00:11:54 +0000
ROA not before: Sat 01 Aug 2026 00:06:54 +0000
ROA not after: Sat 31 Jul 2027 00:11:54 +0000
asID: 9009
IP address blocks: 46.202.228.0/22 maxlen: 24
46.202.236.0/22 maxlen: 24
46.202.244.0/22 maxlen: 24
46.203.16.0/23 maxlen: 24
46.203.94.0/23 maxlen: 24
46.203.100.0/23 maxlen: 24
46.203.122.0/23 maxlen: 24
46.203.132.0/23 maxlen: 24
46.203.158.0/24 maxlen: 24
46.203.162.0/23 maxlen: 24
46.203.236.0/22 maxlen: 24
46.203.244.0/22 maxlen: 24
46.203.252.0/22 maxlen: 24
91.124.31.0/24 maxlen: 24
91.124.140.0/24 maxlen: 24
91.124.220.0/24 maxlen: 24
91.124.243.0/24 maxlen: 24
91.124.252.0/24 maxlen: 24
92.112.2.0/23 maxlen: 24
92.112.59.0/24 maxlen: 24
92.112.72.0/23 maxlen: 24
92.112.79.0/24 maxlen: 24
92.112.100.0/22 maxlen: 24
92.112.120.0/22 maxlen: 24
92.112.214.0/24 maxlen: 24
92.112.221.0/24 maxlen: 24
92.112.234.0/24 maxlen: 24
92.112.237.0/24 maxlen: 24
92.113.2.0/24 maxlen: 24
92.113.5.0/24 maxlen: 24
92.113.8.0/24 maxlen: 24
92.113.94.0/23 maxlen: 24
92.113.96.0/22 maxlen: 24
92.113.108.0/22 maxlen: 24
92.113.120.0/22 maxlen: 24
92.113.130.0/23 maxlen: 24
95.134.8.0/22 maxlen: 22
95.134.24.0/22 maxlen: 22
95.134.36.0/22 maxlen: 22
95.134.44.0/22 maxlen: 22
95.134.56.0/22 maxlen: 22
95.134.72.0/22 maxlen: 22
95.134.102.0/24 maxlen: 24
95.134.144.0/22 maxlen: 22
95.134.188.0/22 maxlen: 22
95.134.208.0/22 maxlen: 22
95.134.216.0/22 maxlen: 22
95.135.96.0/22 maxlen: 22
95.135.120.0/22 maxlen: 22
95.135.137.0/24 maxlen: 24
95.135.197.0/24 maxlen: 24
95.135.209.0/24 maxlen: 24
95.135.217.0/24 maxlen: 24
95.135.218.0/24 maxlen: 24
95.135.225.0/24 maxlen: 24
95.135.229.0/24 maxlen: 24
95.135.234.0/24 maxlen: 24
95.135.237.0/24 maxlen: 24
95.135.248.0/24 maxlen: 24
178.93.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ce:17:be:cb:9c:0a:26:c9:b9:8b:56:1f:ed:20:37:f8:f3:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 1 00:06:54 2026 GMT
Not After : Jul 31 00:11:54 2027 GMT
Subject: CN=BF5A7256C4FD924DBB220684684C45FBF9F1C35A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:f7:e8:e5:fe:52:fb:e3:d4:0c:8e:ea:23:
ef:8b:a7:11:ea:59:b2:b7:ab:cf:eb:8c:b7:4b:9e:
24:fb:8d:dc:de:85:c9:1c:97:96:00:c0:d8:1a:85:
b7:2a:80:e4:21:c0:8c:a1:d0:06:fb:22:b0:79:55:
ee:b5:8d:d1:94:69:42:9f:1a:21:99:91:ea:82:44:
6b:cd:33:6c:7a:e9:74:71:dd:4a:17:c0:aa:3f:f3:
22:47:62:e0:59:5a:35:33:2b:4d:8e:ae:75:53:33:
f8:92:d6:f8:d9:cb:47:67:48:1a:80:ca:af:8b:87:
d4:42:f4:1e:96:4c:1d:c5:c6:44:1b:a5:40:8d:4b:
13:ce:9c:e1:7f:91:8d:a1:fb:8b:e4:1c:0e:d4:f6:
04:61:fe:5a:27:aa:69:2d:ae:07:8a:9c:0e:4c:96:
b6:cf:8b:34:a6:ce:9d:03:2b:d2:88:4a:4a:c1:c0:
d4:12:11:47:a1:af:de:9a:a7:e0:c9:45:9e:86:13:
8f:0d:43:02:e3:61:10:06:eb:be:12:1b:6c:6f:59:
bf:8d:8d:f0:c1:50:25:66:b3:ce:71:5e:50:16:8b:
74:e7:04:34:38:a1:80:64:fd:f4:23:bd:6b:b2:27:
d7:76:72:a3:b6:52:10:da:9c:e9:78:da:b2:79:ef:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:72:56:C4:FD:92:4D:BB:22:06:84:68:4C:45:FB:F9:F1:C3:5A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.228.0/22
46.202.236.0/22
46.202.244.0/22
46.203.16.0/23
46.203.94.0/23
46.203.100.0/23
46.203.122.0/23
46.203.132.0/23
46.203.158.0/24
46.203.162.0/23
46.203.236.0/22
46.203.244.0/22
46.203.252.0/22
91.124.31.0/24
91.124.140.0/24
91.124.220.0/24
91.124.243.0/24
91.124.252.0/24
92.112.2.0/23
92.112.59.0/24
92.112.72.0/23
92.112.79.0/24
92.112.100.0/22
92.112.120.0/22
92.112.214.0/24
92.112.221.0/24
92.112.234.0/24
92.112.237.0/24
92.113.2.0/24
92.113.5.0/24
92.113.8.0/24
92.113.94.0-92.113.99.255
92.113.108.0/22
92.113.120.0/22
92.113.130.0/23
95.134.8.0/22
95.134.24.0/22
95.134.36.0/22
95.134.44.0/22
95.134.56.0/22
95.134.72.0/22
95.134.102.0/24
95.134.144.0/22
95.134.188.0/22
95.134.208.0/22
95.134.216.0/22
95.135.96.0/22
95.135.120.0/22
95.135.137.0/24
95.135.197.0/24
95.135.209.0/24
95.135.217.0-95.135.218.255
95.135.225.0/24
95.135.229.0/24
95.135.234.0/24
95.135.237.0/24
95.135.248.0/24
178.93.116.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ef:13:19:29:15:bf:f1:ee:0b:71:31:f1:bd:aa:4c:cf:80:
f4:af:ce:0f:3d:37:a5:63:95:b4:05:4d:da:93:c5:99:5d:a1:
49:d3:3d:25:db:6b:6b:5d:d9:2a:96:97:88:bd:06:f4:33:cc:
6c:92:76:c3:36:b7:7b:80:ac:65:51:cd:a6:3f:b3:97:93:9d:
2b:29:93:85:ea:bb:8e:10:b8:82:7b:6e:03:58:ab:18:88:ef:
84:8e:82:69:8d:c0:de:b5:67:24:d8:e8:55:04:ae:99:89:3d:
1a:9f:d6:ac:9b:c3:75:d1:ce:91:f8:08:b0:fc:c9:df:7b:7d:
22:e6:db:3e:c8:23:97:0f:5d:13:53:bb:a2:cc:fd:cf:c7:25:
7c:6d:cf:d4:84:b7:12:30:e9:2b:32:e5:b5:5d:0e:5f:77:af:
77:f1:b7:7f:06:02:52:c9:41:d8:78:2e:80:65:5c:47:d5:3f:
bd:bb:c1:b9:e6:c0:c9:bd:f3:e1:c1:18:f9:26:a1:98:c3:d3:
44:ca:8d:01:ef:23:42:23:ec:f8:9f:97:8f:d0:10:6c:47:c4:
7e:0e:32:c9:92:91:80:81:e8:a0:d6:8d:1a:f5:44:15:28:39:
d2:d6:68:ea:53:e8:0d:66:7c:a6:e7:3e:ce:2b:9a:57:ea:64:
45:45:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:16:18 2026 by rpki-client