Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: pb7fE302tTS3DPGDCHHsNQuLWipZ34toVqHDiTqkfSA=
Subject key identifier: 2E:9D:D0:99:66:43:25:10:C2:4A:16:1C:F0:45:3F:22:C6:FF:29:AF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7DDEBFA3948F0C9582B6FFD238D48A24F9B1D56A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
Signing time: Sat 07 Nov 2026 06:33:01 +0000
ROA not before: Sat 07 Nov 2026 06:28:01 +0000
ROA not after: Sat 06 Nov 2027 06:33:01 +0000
asID: 9009
IP address blocks: 141.11.245.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 00:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:de:bf:a3:94:8f:0c:95:82:b6:ff:d2:38:d4:8a:24:f9:b1:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 7 06:28:01 2026 GMT
Not After : Nov 6 06:33:01 2027 GMT
Subject: CN=2E9DD09966432510C24A161CF0453F22C6FF29AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:f2:80:9d:27:4a:76:97:fc:89:f9:50:8d:
0a:57:1a:04:d5:89:ed:6f:64:d8:35:b2:7c:2e:a5:
16:08:b7:57:30:89:aa:34:e9:05:9d:af:5f:b4:34:
58:93:d1:58:c0:7c:04:18:ad:33:a6:f2:32:97:24:
73:a2:a5:c1:44:75:d2:46:e2:4c:2d:dc:9a:1d:fa:
1b:d1:5a:25:0a:43:2e:85:ba:4d:80:ba:fb:af:dd:
63:a3:88:0b:7b:1a:d1:14:40:60:c8:ee:e3:1d:44:
2e:b4:69:a7:ac:a6:a4:8e:2d:f1:42:67:5b:8b:a6:
0f:73:ac:cf:18:b5:6f:c8:93:f5:ba:7c:92:5a:fb:
a4:7d:89:5e:06:d6:8c:9b:1f:0a:45:30:ac:ed:5d:
14:87:ef:91:c6:b3:4b:62:20:c0:8d:60:af:cf:19:
22:e3:be:85:b1:bc:c7:4b:4d:0f:f4:0b:29:56:57:
41:f4:5d:bc:1c:c7:40:7a:47:cb:5d:63:8d:9a:97:
31:ab:c5:dd:99:ce:2e:24:af:f9:23:73:21:c5:5f:
16:8d:99:0f:65:02:7a:e4:f7:1a:ab:68:b6:05:f2:
21:4c:73:d8:e6:c2:66:6d:c2:8c:24:67:6e:00:3a:
35:80:b1:7c:47:29:c3:3e:f3:3d:77:4c:7b:63:1a:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:D0:99:66:43:25:10:C2:4A:16:1C:F0:45:3F:22:C6:FF:29:AF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3d:21:93:c5:02:5a:56:5f:f2:6f:8b:5a:96:ca:b0:47:ab:
ec:c4:f3:71:f1:7c:43:69:bf:36:f5:ea:10:3e:be:cb:de:08:
40:91:18:73:53:e8:e7:04:a1:96:11:c7:7e:b5:98:3c:f4:25:
8d:74:bb:14:e7:88:55:cc:a9:38:d3:f4:62:f0:38:02:1d:29:
3a:f1:aa:da:48:d1:57:20:ec:14:de:de:0e:04:6f:85:d3:f6:
17:e1:30:5d:55:b7:84:a7:c6:d4:3f:58:24:1d:65:ff:b9:8d:
af:37:ba:8c:2f:97:cb:7c:cd:c5:7f:43:49:96:4f:d3:27:88:
9e:75:30:8c:ac:33:65:3e:4d:69:cc:0f:c9:58:31:08:28:89:
05:8d:b8:dd:17:99:03:91:a5:f9:56:0d:27:97:b8:6e:53:b5:
70:e3:e5:7d:56:6b:77:b7:e2:15:6f:4c:b6:f5:0d:55:58:bb:
94:c0:59:c1:7d:9b:25:f5:77:5f:c0:46:7e:3e:c6:09:4b:55:
7f:68:75:5a:00:6e:cc:67:b8:1a:6c:17:3f:28:09:b9:62:38:
8a:47:2e:f8:78:54:96:7d:18:1d:61:fb:b9:2a:3e:48:54:a6:
53:61:1e:f2:34:ae:d7:29:29:5f:52:f8:97:2f:ec:e4:3e:88:
8a:e1:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:10:56 2026 by rpki-client