This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: EEI0RKLpZX/4x5/om0HO5wXpFCYHw95EZYdkJ/t82+U= Subject key identifier: B3:0E:72:6A:C7:0F:E2:B1:E1:5A:73:88:CD:FD:49:D9:A0:4D:E9:AE Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 4A39BEFDEC283DA6C2FE8EE85ABF1C4734CB0E52 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa Signing time: Thu 04 Dec 2025 17:31:46 +0000 ROA not before: Thu 04 Dec 2025 17:26:46 +0000 ROA not after: Thu 03 Dec 2026 17:31:46 +0000 asID: 9009 IP address blocks: 46.202.12.0/22 maxlen: 24 46.202.100.0/22 maxlen: 24 46.202.116.0/22 maxlen: 24 46.202.228.0/22 maxlen: 24 46.202.236.0/22 maxlen: 24 46.202.244.0/22 maxlen: 24 46.203.16.0/23 maxlen: 24 46.203.36.0/22 maxlen: 24 46.203.94.0/23 maxlen: 24 46.203.100.0/23 maxlen: 24 46.203.122.0/23 maxlen: 24 46.203.132.0/23 maxlen: 24 46.203.158.0/24 maxlen: 24 46.203.162.0/23 maxlen: 24 46.203.236.0/22 maxlen: 24 46.203.241.0/24 maxlen: 24 46.203.242.0/24 maxlen: 24 46.203.243.0/24 maxlen: 24 46.203.244.0/22 maxlen: 24 46.203.252.0/22 maxlen: 24 91.124.31.0/24 maxlen: 24 91.124.140.0/24 maxlen: 24 91.124.220.0/24 maxlen: 24 91.124.243.0/24 maxlen: 24 91.124.252.0/24 maxlen: 24 92.112.2.0/23 maxlen: 24 92.112.59.0/24 maxlen: 24 92.112.72.0/23 maxlen: 24 92.112.79.0/24 maxlen: 24 92.112.100.0/22 maxlen: 24 92.112.120.0/22 maxlen: 24 92.112.214.0/24 maxlen: 24 92.112.215.0/24 maxlen: 24 92.112.218.0/24 maxlen: 24 92.112.219.0/24 maxlen: 24 92.112.220.0/24 maxlen: 24 92.112.221.0/24 maxlen: 24 92.112.223.0/24 maxlen: 24 92.112.224.0/24 maxlen: 24 92.112.225.0/24 maxlen: 24 92.112.226.0/24 maxlen: 24 92.112.229.0/24 maxlen: 24 92.112.230.0/24 maxlen: 24 92.112.232.0/24 maxlen: 24 92.112.233.0/24 maxlen: 24 92.112.234.0/24 maxlen: 24 92.112.237.0/24 maxlen: 24 92.113.2.0/24 maxlen: 24 92.113.5.0/24 maxlen: 24 92.113.8.0/24 maxlen: 24 92.113.94.0/23 maxlen: 24 92.113.96.0/22 maxlen: 24 92.113.108.0/22 maxlen: 24 92.113.120.0/22 maxlen: 24 92.113.130.0/23 maxlen: 24 95.134.8.0/22 maxlen: 22 95.134.24.0/22 maxlen: 22 95.134.36.0/22 maxlen: 22 95.134.44.0/22 maxlen: 22 95.134.56.0/22 maxlen: 22 95.134.72.0/22 maxlen: 22 95.134.102.0/24 maxlen: 24 95.134.144.0/22 maxlen: 22 95.134.188.0/22 maxlen: 22 95.134.208.0/22 maxlen: 22 95.134.216.0/22 maxlen: 22 95.135.96.0/22 maxlen: 22 95.135.120.0/22 maxlen: 22 95.135.137.0/24 maxlen: 24 95.135.197.0/24 maxlen: 24 95.135.209.0/24 maxlen: 24 95.135.217.0/24 maxlen: 24 95.135.218.0/24 maxlen: 24 95.135.225.0/24 maxlen: 24 95.135.229.0/24 maxlen: 24 95.135.234.0/24 maxlen: 24 95.135.237.0/24 maxlen: 24 95.135.248.0/24 maxlen: 24 178.93.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:39:be:fd:ec:28:3d:a6:c2:fe:8e:e8:5a:bf:1c:47:34:cb:0e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 4 17:26:46 2025 GMT Not After : Dec 3 17:31:46 2026 GMT Subject: CN=B30E726AC70FE2B1E15A7388CDFD49D9A04DE9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:c0:13:9c:9f:4e:f8:84:01:36:3b:72:21: f6:83:56:05:e9:c6:48:4e:b2:da:f5:73:03:08:77: eb:e4:9b:d5:ac:ce:9f:e0:d5:5d:75:ac:c9:6c:4b: 77:56:e0:df:18:96:12:04:2a:ef:be:a4:49:f1:7e: ae:ba:c8:a8:14:b5:62:e1:9f:a5:20:55:a5:c3:f8: 53:1a:c9:7c:47:ca:be:6c:98:f2:bc:d9:9a:06:25: 39:42:db:df:0c:c5:dc:ee:63:6d:83:8b:75:23:1e: b2:19:70:0a:13:c3:bc:d9:c5:0c:6e:4e:da:7b:4e: ff:fa:99:71:38:7e:7e:63:7b:43:73:d0:81:9e:e0: 53:03:f4:b7:f5:13:d0:ac:ba:ce:06:b9:8e:5b:b9: ac:6e:7e:e7:9a:a6:71:e9:f3:9c:58:00:74:a8:2a: b0:40:9d:84:7a:1b:d7:e7:a1:5c:e9:16:71:5d:b3: 09:92:8e:bf:fa:83:69:14:3d:57:8c:43:a5:79:9c: 8a:74:4d:7b:8f:72:0e:b1:d0:93:08:d4:f4:58:ef: f5:f1:cd:c3:0d:ca:31:71:a6:2c:98:5d:1b:fa:d3: 2b:fc:f7:0b:82:7f:1f:8c:27:48:58:59:f2:a7:2a: 9d:af:bb:4f:9f:09:e6:57:f3:60:fe:21:d3:94:14: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0E:72:6A:C7:0F:E2:B1:E1:5A:73:88:CD:FD:49:D9:A0:4D:E9:AE X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.12.0/22 46.202.100.0/22 46.202.116.0/22 46.202.228.0/22 46.202.236.0/22 46.202.244.0/22 46.203.16.0/23 46.203.36.0/22 46.203.94.0/23 46.203.100.0/23 46.203.122.0/23 46.203.132.0/23 46.203.158.0/24 46.203.162.0/23 46.203.236.0/22 46.203.241.0-46.203.247.255 46.203.252.0/22 91.124.31.0/24 91.124.140.0/24 91.124.220.0/24 91.124.243.0/24 91.124.252.0/24 92.112.2.0/23 92.112.59.0/24 92.112.72.0/23 92.112.79.0/24 92.112.100.0/22 92.112.120.0/22 92.112.214.0/23 92.112.218.0-92.112.221.255 92.112.223.0-92.112.226.255 92.112.229.0-92.112.230.255 92.112.232.0-92.112.234.255 92.112.237.0/24 92.113.2.0/24 92.113.5.0/24 92.113.8.0/24 92.113.94.0-92.113.99.255 92.113.108.0/22 92.113.120.0/22 92.113.130.0/23 95.134.8.0/22 95.134.24.0/22 95.134.36.0/22 95.134.44.0/22 95.134.56.0/22 95.134.72.0/22 95.134.102.0/24 95.134.144.0/22 95.134.188.0/22 95.134.208.0/22 95.134.216.0/22 95.135.96.0/22 95.135.120.0/22 95.135.137.0/24 95.135.197.0/24 95.135.209.0/24 95.135.217.0-95.135.218.255 95.135.225.0/24 95.135.229.0/24 95.135.234.0/24 95.135.237.0/24 95.135.248.0/24 178.93.116.0/24 Signature Algorithm: sha256WithRSAEncryption 59:04:30:4d:5d:6e:bc:a2:2d:26:00:42:9d:88:1e:81:a4:37: 57:f9:f2:ee:da:4c:77:2b:fc:0b:30:aa:27:07:01:71:c9:93: 6f:79:01:6d:4a:f9:29:44:3c:ad:24:fb:c0:44:96:be:69:13: 19:35:d1:46:ac:cb:d9:4c:4d:0c:6d:11:f7:d5:43:8c:37:39: 1b:f9:03:aa:74:1d:ed:16:07:7d:db:84:7b:a4:6f:56:1f:8d: 6c:8e:50:e4:e9:e0:42:ce:7d:f8:73:d0:d1:31:20:36:2c:db: 02:61:4b:91:ac:c6:2e:a8:14:d5:05:e8:22:1c:4f:b5:1c:a9: 60:93:c4:f3:18:0d:c4:74:76:4b:01:11:f5:b5:4c:ce:06:87: a0:21:9d:48:e0:33:99:bf:e6:04:a4:4d:9b:f7:fc:a8:61:3d: c3:65:84:5d:b8:74:cd:2f:e6:40:40:6a:a0:da:57:8d:79:09: b1:0c:4b:93:7a:b4:46:d1:5a:77:f3:aa:ff:c9:99:7b:10:8f: 4b:dd:e4:d1:0e:4e:78:51:6a:2a:9b:a6:f1:30:82:9c:bf:c3: d1:d7:16:c6:fe:18:32:52:d9:1a:92:1a:10:4a:06:76:e8:30: bb:d9:4b:74:d2:f7:f6:82:d6:2b:f6:b8:33:a4:98:d8:24:28: 15:dc:0d:ac -----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgIUSjm+/ewoPabC/o7oWr8cRzTLDlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDQxNzI2NDZaFw0yNjEyMDMxNzMxNDZaMDMxMTAvBgNV BAMTKEIzMEU3MjZBQzcwRkUyQjFFMTVBNzM4OENERkQ0OUQ5QTA0REU5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJ8ATnJ9O+IQBNjtyIfaDVgXp xkhOstr1cwMId+vkm9Wszp/g1V11rMlsS3dW4N8YlhIEKu++pEnxfq66yKgUtWLh n6UgVaXD+FMayXxHyr5smPK82ZoGJTlC298MxdzuY22Di3UjHrIZcAoTw7zZxQxu Ttp7Tv/6mXE4fn5je0Nz0IGe4FMD9Lf1E9Csus4GuY5buaxufueapnHp85xYAHSo KrBAnYR6G9fnoVzpFnFdswmSjr/6g2kUPVeMQ6V5nIp0TXuPcg6x0JMI1PRY7/Xx zcMNyjFxpiyYXRv60yv89wuCfx+MJ0hYWfKnKp2vu0+fCeZX82D+IdOUFKsjAgMB AAGjggPEMIIDwDAdBgNVHQ4EFgQUsw5yascP4rHhWnOIzf1J2aBN6a4wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTOTAwOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAdkGCCsGAQUFBwEHAQH/BIIByDCCAcQwggHABAIAATCC AbgDBAIuygwDBAIuymQDBAIuynQDBAIuyuQDBAIuyuwDBAIuyvQDBAEuyxADBAIu yyQDBAEuy14DBAEuy2QDBAEuy3oDBAEuy4QDBAAuy54DBAEuy6IDBAIuy+wwDAME AC7L8QMEAy7L8AMEAi7L/AMEAFt8HwMEAFt8jAMEAFt83AMEAFt88wMEAFt8/AME AVxwAgMEAFxwOwMEAVxwSAMEAFxwTwMEAlxwZAMEAlxweAMEAVxw1jAMAwQBXHDa AwQBXHDcMAwDBABccN8DBABccOIwDAMEAFxw5QMEAFxw5jAMAwQDXHDoAwQAXHDq AwQAXHDtAwQAXHECAwQAXHEFAwQAXHEIMAwDBAFccV4DBAJccWADBAJccWwDBAJc cXgDBAFccYIDBAJfhggDBAJfhhgDBAJfhiQDBAJfhiwDBAJfhjgDBAJfhkgDBABf hmYDBAJfhpADBAJfhrwDBAJfhtADBAJfhtgDBAJfh2ADBAJfh3gDBABfh4kDBABf h8UDBABfh9EwDAMEAF+H2QMEAF+H2gMEAF+H4QMEAF+H5QMEAF+H6gMEAF+H7QME AF+H+AMEALJddDANBgkqhkiG9w0BAQsFAAOCAQEAWQQwTV1uvKItJgBCnYgegaQ3 V/ny7tpMdyv8CzCqJwcBccmTb3kBbUr5KUQ8rST7wESWvmkTGTXRRqzL2UxNDG0R 99VDjDc5G/kDqnQd7RYHfduEe6RvVh+NbI5Q5OngQs59+HPQ0TEgNizbAmFLkazG LqgU1QXoIhxPtRypYJPE8xgNxHR2SwER9bVMzgaHoCGdSOAzmb/mBKRNm/f8qGE9 w2WEXbh0zS/mQEBqoNpXjXkJsQxLk3q0RtFad/Oq/8mZexCPS93k0Q5OeFFqKpum 8TCCnL/D0dcWxv4YMlLZGpIaEEoGdugwu9lLdNL39oLWK/a4M6SY2CQoFdwNrA== -----END CERTIFICATE-----Generated at Sat Dec 27 01:39:51 2025 by rpki-client