Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/X-nIksYLcM6UY700IvmpbbqFcRs.roa
File: X-nIksYLcM6UY700IvmpbbqFcRs.roa (raw, json)
Hash identifier: xh7dIh7S6zgSfiDoGX2DCG8s+xKjf0BQuO30Sz8XUQI=
Subject key identifier: 5F:E9:C8:92:C6:0B:70:CE:94:63:BD:34:22:F9:A9:6D:BA:85:71:1B
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 019B7DCA7C5271AD21ABF1FF8B7F425E23EF
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/X-nIksYLcM6UY700IvmpbbqFcRs.roa
Signing time: Fri 02 Jan 2026 08:19:40 +0000
ROA not before: Fri 02 Jan 2026 08:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41798
IP address blocks: 2.57.96.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
37.17.176.0/21 maxlen: 21
37.17.176.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.208.40.0/21 maxlen: 21
37.208.40.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.43.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
45.140.24.0/23 maxlen: 23
45.140.24.0/24 maxlen: 24
45.140.25.0/24 maxlen: 24
82.115.44.0/22 maxlen: 22
82.115.45.0/24 maxlen: 24
82.115.46.0/24 maxlen: 24
82.115.47.0/24 maxlen: 24
87.255.202.0/23 maxlen: 23
87.255.202.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.204.0/22 maxlen: 22
87.255.204.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.208.0/20 maxlen: 20
87.255.208.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.213.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
91.185.0.0/19 maxlen: 19
91.185.0.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.246.80.0/20 maxlen: 20
91.246.80.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.96.0/21 maxlen: 21
91.246.96.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
94.141.224.0/20 maxlen: 20
94.141.224.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.240.0/22 maxlen: 22
94.141.240.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.248.0/22 maxlen: 22
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
146.19.255.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.240.0/22 maxlen: 22
176.98.240.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
178.22.168.0/21 maxlen: 21
178.22.168.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
185.187.17.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
193.111.175.0/24 maxlen: 24
194.26.239.0/24 maxlen: 24
212.23.218.0/24 maxlen: 24
212.46.53.0/24 maxlen: 24
2a00:ab40::/32 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:7c:52:71:ad:21:ab:f1:ff:8b:7f:42:5e:23:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Jan 2 08:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe9c892c60b70ce9463bd3422f9a96dba85711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:de:ab:3b:08:22:dd:f5:71:70:a3:a8:89:
ce:5c:d2:87:35:97:03:2c:7c:dc:85:71:1e:e8:e7:
f7:cb:3b:97:e3:19:45:18:74:86:8f:59:fb:ff:12:
4b:f8:3e:06:e1:b7:8c:0f:77:f9:59:18:df:05:26:
5c:01:c7:c7:07:9e:18:17:5c:af:12:05:80:f0:c8:
6e:b9:cd:be:36:93:f5:93:75:cd:b5:d2:b6:1b:a0:
6c:74:47:c0:4f:0b:71:42:09:87:f5:65:0e:bd:76:
0b:5a:cd:f9:10:b0:d4:37:5c:70:3d:de:d2:21:40:
73:c5:3a:f3:f5:33:cf:92:08:db:09:f0:0d:81:1a:
64:25:0a:13:a4:ab:ca:e7:5d:ba:d9:78:6c:96:43:
a1:09:84:25:9c:f4:29:79:95:8b:e3:72:11:c4:dc:
64:21:0f:f2:58:8d:ad:c8:72:d0:f7:db:0f:c5:cb:
63:a2:26:61:de:4a:68:ae:5a:ee:97:96:bb:e7:a4:
02:6a:e1:a6:91:b7:c1:93:b3:7b:b8:0a:36:bd:b1:
bd:c1:0b:2d:bf:b2:19:d2:5c:eb:e8:ee:f3:9c:b2:
e9:6b:13:cc:f8:8f:33:db:9c:4e:92:83:43:2e:84:
09:6f:26:ce:8a:5a:a8:a2:06:52:2b:6f:5d:df:0a:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:C8:92:C6:0B:70:CE:94:63:BD:34:22:F9:A9:6D:BA:85:71:1B
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/X-nIksYLcM6UY700IvmpbbqFcRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
45.140.24.0/23
82.115.44.0/22
87.255.202.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
146.19.255.0/24
176.98.224.0-176.98.243.255
178.22.168.0/21
185.187.17.0/24
193.104.253.0/24
193.111.175.0/24
194.26.239.0/24
212.23.218.0/24
212.46.53.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
93:17:c8:5e:d1:b5:8b:5a:09:ba:79:e7:b4:81:e6:a8:36:72:
11:7a:64:a1:41:bc:c7:c3:cf:fa:0e:66:57:7b:21:54:37:e0:
ca:94:c3:8e:69:03:47:b4:05:29:0d:c6:74:23:de:aa:7f:4e:
17:ed:c6:55:31:4f:0e:e5:c6:07:ac:c4:99:2a:8c:bf:62:08:
f9:00:a0:f8:d1:1c:6c:80:a2:f3:b0:74:12:07:ef:67:e5:51:
ea:32:ae:64:0a:81:de:c6:e7:29:70:9d:0e:9e:f4:31:4e:28:
00:08:db:08:82:a9:2e:1c:f2:bf:c8:a0:8d:af:92:50:d5:08:
38:2d:2b:29:27:b3:a6:5f:f9:0f:a9:b3:bc:78:14:04:ee:38:
3a:48:1b:de:41:82:fc:df:cb:ce:88:b1:fe:1f:00:d1:df:e0:
58:6c:02:b1:c8:01:b3:44:b8:eb:83:9a:07:cb:10:9b:db:c7:
5c:f5:dc:a6:d9:d5:87:ad:e0:54:64:23:94:db:1e:61:e5:21:
c6:dd:e5:2e:22:e5:43:45:38:27:5d:ba:0d:22:c3:8a:14:00:
17:93:b2:0f:31:cd:79:cf:fb:64:a6:5c:78:e7:47:be:e1:48:
21:91:7e:e7:ba:5c:f5:5c:a7:d3:ad:b9:27:79:73:f4:9b:b4:
06:ac:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 14:02:22 2026 by rpki-client