Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3sd_AeCzlLdzUoaLZa1W-ExMius.roa
File: 3sd_AeCzlLdzUoaLZa1W-ExMius.roa (raw, json)
Hash identifier: 2ZO6LHppN03B5SUvTuk6J+jGwCUlVcSIN0UWNt2qQ7A=
Subject key identifier: DE:C7:7F:01:E0:B3:94:B7:73:52:86:8B:65:AD:56:F8:4C:4C:8A:EB
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A168CB44F5AB65C6E47B56337966AB45F3
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3sd_AeCzlLdzUoaLZa1W-ExMius.roa
Signing time: Fri 23 Oct 2026 12:45:14 +0000
ROA not before: Fri 23 Oct 2026 12:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
62.83.0.0/16 maxlen: 24
62.83.0.0/22 maxlen: 22
62.83.4.0/22 maxlen: 22
62.83.8.0/22 maxlen: 22
62.83.16.0/22 maxlen: 22
62.83.20.0/22 maxlen: 22
62.83.32.0/22 maxlen: 22
62.83.36.0/22 maxlen: 22
62.83.40.0/22 maxlen: 22
62.83.44.0/22 maxlen: 22
62.83.52.0/22 maxlen: 22
62.83.56.0/22 maxlen: 22
62.83.68.0/22 maxlen: 22
62.83.72.0/22 maxlen: 22
62.83.76.0/22 maxlen: 22
62.83.80.0/22 maxlen: 22
62.83.84.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 22
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:cb:44:f5:ab:65:c6:e4:7b:56:33:79:66:ab:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Oct 23 12:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dec77f01e0b394b77352868b65ad56f84c4c8aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:48:ec:7c:ef:8c:dc:c5:8b:11:ca:16:39:
50:0d:f8:c6:82:23:0c:03:10:19:76:58:d8:1d:ef:
dd:09:b7:d9:b4:5f:1c:58:66:92:5d:8f:cd:73:db:
b0:ee:6f:cd:d6:8c:25:93:fb:5d:94:0a:8b:45:07:
99:11:ab:99:6a:7c:c2:30:0a:e6:20:4f:48:47:6a:
aa:41:08:8d:d9:69:bf:f3:f5:da:c5:99:e2:a3:4a:
bc:ba:08:0e:5e:7f:d5:62:aa:79:ad:10:30:ad:9b:
cc:ea:a0:b5:43:1c:53:e0:76:2b:2a:d5:58:01:24:
13:2e:68:8a:56:23:92:72:f1:44:d1:81:03:f4:7e:
31:8f:75:cd:4c:68:91:71:c8:20:f5:90:05:30:af:
ab:65:4f:c2:1f:b8:e4:48:20:e2:3d:35:15:87:a6:
32:33:ec:0c:7d:50:a6:c1:96:37:21:ea:65:7b:f2:
2c:d1:d5:3f:e2:b1:46:27:d8:30:9f:32:16:a0:18:
5d:06:63:df:6d:2b:a1:d2:a7:12:5f:eb:d6:aa:eb:
c9:94:05:7a:ac:5d:3b:19:68:b0:5b:e1:3d:24:a5:
25:14:78:45:b5:84:6f:7b:0c:1e:0c:c6:74:91:1a:
0b:06:d7:0b:22:ab:75:34:6a:40:9a:3e:08:cb:1e:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:7F:01:E0:B3:94:B7:73:52:86:8B:65:AD:56:F8:4C:4C:8A:EB
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/3sd_AeCzlLdzUoaLZa1W-ExMius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
12:80:67:5f:09:0a:65:b1:c1:91:78:2c:1b:55:24:44:6a:c1:
e1:2c:94:ab:b1:1f:41:87:5e:66:ee:75:85:79:bd:22:3a:ac:
3d:22:b2:f7:3e:9b:7b:de:8c:34:cd:b1:dc:5b:eb:bc:6f:c6:
9e:4d:f0:bf:dc:a4:46:87:4a:eb:0c:65:01:d9:b2:47:ee:c3:
47:35:03:59:fd:ac:7d:a4:19:dd:f2:c6:fe:a7:21:6d:c0:a1:
44:cc:a3:10:30:b1:ce:d9:e0:64:62:46:61:07:ad:38:fd:a3:
44:55:46:2e:b1:81:d7:2d:e0:9d:3e:20:25:9b:06:e1:88:24:
51:83:67:40:4c:20:49:67:1d:b4:80:bd:26:2c:83:4e:8f:5c:
b3:19:10:06:65:78:44:c7:20:06:6a:80:3b:25:ad:3e:6b:b8:
4b:ef:bf:9b:07:4d:10:a1:df:2f:01:5e:55:16:40:a7:99:ea:
6b:a5:1f:60:16:49:56:2b:ab:bc:b0:20:8f:4c:33:81:cd:7c:
c2:83:4d:9b:6e:39:9c:61:99:51:18:78:ba:c2:57:fd:e9:83:
97:d3:19:ff:42:75:a9:f1:d4:9f:8a:b1:76:ca:6a:9a:84:cd:
3a:1e:0c:c4:c0:02:4e:11:9c:33:98:67:f9:a0:20:ea:e8:1f:
8d:ea:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:21 2026 by rpki-client