Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-ZjyydghIASK0KYrtMnXf6ATbnw.roa
File: 1-ZjyydghIASK0KYrtMnXf6ATbnw.roa (raw, json)
Hash identifier: uHBHODwKrkKVZ9OexyAz+CXG3VZE/NsmIFH7f9/4JPc=
Subject key identifier: F9:98:F2:C9:D8:21:20:04:8A:D0:A6:2B:B4:C9:D7:7F:A0:13:6E:7C
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019EAC5A50E526973B80C2DF9B4823F07E65
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-ZjyydghIASK0KYrtMnXf6ATbnw.roa
Signing time: Tue 09 Jun 2026 12:27:40 +0000
ROA not before: Tue 09 Jun 2026 12:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:5a:50:e5:26:97:3b:80:c2:df:9b:48:23:f0:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jun 9 12:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f998f2c9d82120048ad0a62bb4c9d77fa0136e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:7d:63:81:a9:54:1b:4b:42:f1:4f:f8:73:
2d:64:71:95:73:04:3c:88:90:0f:27:b6:19:7a:66:
d5:52:b2:9c:6e:82:eb:e0:26:81:e8:1f:b6:f0:4c:
57:b3:c1:06:3d:4d:72:d5:93:d9:cc:98:30:5b:bb:
80:5e:5f:f3:50:b5:87:0f:f4:96:6f:ea:5c:89:23:
0d:73:38:fa:84:40:fa:09:75:5e:42:5f:29:87:7e:
52:e3:e9:6c:94:2e:51:99:3b:86:40:45:6a:93:b8:
ae:5a:1e:70:12:e9:4b:40:ff:10:21:29:77:0c:73:
ef:0a:3f:7f:65:ea:59:00:73:8e:ce:a3:e1:96:be:
28:76:95:bb:26:bc:05:2b:62:14:3b:f9:5c:7a:46:
ec:34:31:a4:9b:03:c1:49:60:0d:ad:80:9f:3b:28:
5b:58:17:a7:a4:fa:5b:60:3a:13:35:30:5d:64:08:
50:15:70:4e:3d:4b:ce:c8:1a:b4:c6:77:5a:58:7e:
69:70:c4:3a:c4:95:05:6e:55:50:25:af:7d:3f:b3:
85:ba:3b:41:70:f5:30:0d:7e:e9:cf:7f:5b:bb:a8:
ec:9b:99:53:d6:3c:8b:f8:ef:ab:ae:15:ed:a8:0e:
3c:c6:bc:fb:7d:d7:75:3a:da:74:13:49:54:33:64:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:F2:C9:D8:21:20:04:8A:D0:A6:2B:B4:C9:D7:7F:A0:13:6E:7C
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-ZjyydghIASK0KYrtMnXf6ATbnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
4f:b3:67:df:14:04:a3:b7:09:e2:a1:02:75:e8:4c:37:bf:78:
e0:d9:f3:df:88:15:d6:25:e5:cf:c9:28:4a:73:59:b9:75:b1:
0e:e0:12:18:94:07:90:d4:82:cf:9b:a4:0c:42:fb:ee:95:35:
aa:ef:98:d8:4d:d2:d1:c2:71:7e:28:df:f4:d4:01:6e:98:ba:
66:e5:0a:b7:5f:b3:36:e0:4b:bc:68:ae:74:42:41:3e:30:a1:
fd:c5:a7:17:bd:e4:cf:8d:3a:a3:1d:a2:0c:fb:bd:8a:77:8f:
74:8f:1f:1e:df:92:47:ff:41:f7:17:f2:98:15:88:49:15:b0:
8f:96:e0:75:7b:2e:78:1f:37:4c:b2:10:88:f6:05:f7:cc:d7:
51:ba:b2:e8:2d:6e:a6:59:92:50:57:f7:d7:48:dd:bf:d1:10:
19:04:92:88:17:34:9e:8e:47:88:71:a6:a8:f9:96:09:5f:de:
ad:fe:39:25:4e:92:64:9e:95:b6:b0:54:4b:0c:01:f5:26:ac:
ad:c2:83:1f:db:66:97:84:a5:d0:a6:e0:41:c8:86:2c:ec:c7:
58:b8:d8:13:18:08:13:b0:dd:8c:3f:14:24:00:fa:df:ff:be:
06:98:aa:1e:1d:c0:92:1f:65:bb:9a:4a:e1:71:c6:13:0e:07:
15:61:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:46 2026 by rpki-client