Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: GKijPytWv2HBCqDm6BiQdpXz6d7LYxX99R3PujTj6Ak=
Subject key identifier: 77:AD:9E:B6:82:7E:08:FE:01:BB:45:F4:5B:AA:BC:5F:C6:F2:8B:D7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6DB7D57E68201BAD1FDF007CF499C33166AE6FBB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
Signing time: Wed 06 May 2026 15:19:26 +0000
ROA not before: Wed 06 May 2026 15:14:26 +0000
ROA not after: Wed 05 May 2027 15:19:26 +0000
asID: 9009
IP address blocks: 78.105.117.0/24 maxlen: 24
78.105.120.0/24 maxlen: 24
78.105.122.0/24 maxlen: 24
78.105.127.0/24 maxlen: 24
78.105.142.0/24 maxlen: 24
78.105.158.0/24 maxlen: 24
78.105.217.0/24 maxlen: 24
78.105.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b7:d5:7e:68:20:1b:ad:1f:df:00:7c:f4:99:c3:31:66:ae:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 6 15:14:26 2026 GMT
Not After : May 5 15:19:26 2027 GMT
Subject: CN=77AD9EB6827E08FE01BB45F45BAABC5FC6F28BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:8d:7a:8b:29:c6:ba:84:3c:7e:bb:3a:22:
cf:57:ba:4d:4b:90:05:50:59:7e:69:d2:27:22:4b:
b1:48:1b:65:1b:8c:b7:2e:c9:6a:5c:bf:7e:4e:7e:
d5:ab:db:b2:92:33:fe:b3:38:ea:9a:d3:13:fa:6c:
55:79:2e:40:ae:2d:21:ce:3e:57:20:8a:2d:df:64:
0d:7e:ff:2e:f9:b3:f4:09:d0:bf:7a:4c:06:d3:70:
e7:b4:77:61:24:a1:04:1e:e1:6d:f0:ec:76:a0:e2:
e5:88:11:a8:2f:9a:bf:ea:6f:f0:2c:6f:6a:fe:26:
e5:69:f7:a3:d1:29:7d:b5:95:05:7d:2e:6b:cf:88:
83:86:c4:da:8a:90:ac:95:50:86:2c:0b:41:c3:5a:
e4:e7:e9:2f:ed:43:ca:62:31:11:8c:b2:fc:15:0c:
aa:d3:aa:3b:a8:5a:f8:a3:a7:dc:bc:28:e9:eb:e5:
dc:25:6a:60:b8:b5:f5:b3:93:f3:31:c4:c2:c8:4c:
84:6d:8b:e6:89:d4:cb:6b:b1:e5:cc:76:95:0e:cd:
48:d9:df:49:99:91:9e:c2:e8:d2:b8:06:f3:d3:be:
ef:07:ee:e9:84:93:b4:df:79:10:94:30:74:73:a4:
1b:86:33:04:fd:a6:fd:16:a6:a1:6e:8f:05:ac:71:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:9E:B6:82:7E:08:FE:01:BB:45:F4:5B:AA:BC:5F:C6:F2:8B:D7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.117.0/24
78.105.120.0/24
78.105.122.0/24
78.105.127.0/24
78.105.142.0/24
78.105.158.0/24
78.105.217.0/24
78.105.234.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:02:4d:7d:de:07:e1:70:1d:2d:16:94:66:80:8c:d4:c3:
70:dd:a8:eb:c9:3d:03:9e:78:ef:96:c9:e9:87:16:ac:92:0c:
f1:36:37:cd:80:57:00:77:6f:65:6d:dc:f3:81:aa:f4:0d:e4:
44:b8:06:40:ef:69:c8:37:ce:6b:d2:f4:50:c5:49:b5:11:43:
92:5f:0c:9d:5f:e5:7f:80:1d:5c:a7:15:1c:35:ce:2b:98:a2:
15:8a:3c:57:72:7b:01:1f:f2:0f:3d:fd:15:aa:da:3a:fd:2a:
a3:df:9b:93:41:ce:a1:5d:5e:f2:46:38:e0:82:ad:68:03:81:
5d:f6:b1:05:e1:a0:69:d3:47:2d:d9:7e:56:35:11:fb:d4:ae:
76:0a:51:da:bb:1f:13:3f:dd:c2:f8:3b:a1:d8:ac:e7:d7:d0:
8c:21:6b:e2:f1:91:84:da:54:3f:dc:1a:9b:8e:c9:92:38:1d:
7c:8a:0f:59:d6:ed:69:78:e0:fc:fb:f9:03:1c:f0:56:51:b2:
a5:f1:48:23:1e:cf:19:d8:72:81:0d:1e:ea:fa:53:27:2c:e3:
05:6c:50:ab:61:96:1c:6e:c5:48:fe:04:0f:a3:44:e9:49:2b:
78:53:ff:be:58:75:da:88:d6:b6:fd:da:72:7c:e7:9d:61:7b:
d8:f5:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:20 2026 by rpki-client