Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/J8tFK1mRo88VcDifbvTtqbS4FgU.roa
File: J8tFK1mRo88VcDifbvTtqbS4FgU.roa (raw, json)
Hash identifier: qAoCsbYdSoVtbwyBJ0HwXii3Y1zSmnb4jsALdOaGTA4=
Subject key identifier: 27:CB:45:2B:59:91:A3:CF:15:70:38:9F:6E:F4:ED:A9:B4:B8:16:05
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0852CE7B78AEF3A34A422F4ECB50391A6
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/J8tFK1mRo88VcDifbvTtqbS4FgU.roa
Signing time: Wed 09 Sep 2026 07:58:27 +0000
ROA not before: Wed 09 Sep 2026 07:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
62.83.0.0/16 maxlen: 24
62.83.0.0/22 maxlen: 22
62.83.4.0/22 maxlen: 22
62.83.8.0/22 maxlen: 22
62.83.16.0/22 maxlen: 22
62.83.32.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:2c:e7:b7:8a:ef:3a:34:a4:22:f4:ec:b5:03:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 9 07:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27cb452b5991a3cf1570389f6ef4eda9b4b81605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:1d:91:2f:5b:8e:42:12:10:da:a4:92:88:
54:17:44:bb:2f:cb:43:6f:33:5f:98:66:b6:7d:9f:
cc:d0:8f:fb:d5:cc:08:d1:23:19:71:77:4e:26:c5:
b8:0e:75:12:9f:5f:8a:71:07:68:8d:3a:50:76:e4:
43:44:c2:7e:d0:bf:70:ec:68:84:6e:17:f6:8a:39:
40:bd:8b:61:4d:ec:b6:09:61:c0:61:21:e7:69:77:
2e:34:71:c4:20:87:63:7b:19:5e:6f:66:53:d2:6a:
64:b5:1a:e0:ce:1b:06:f7:ea:39:a7:84:65:66:bd:
2f:1e:44:14:fc:63:49:a7:e9:63:cf:a0:f7:13:19:
58:fd:93:41:05:8a:52:6b:b5:ab:e7:e5:0e:90:bd:
48:f7:21:e9:2a:04:0a:11:b6:c3:39:5b:34:39:5f:
12:d8:46:57:8f:94:8f:b1:21:81:65:75:34:f2:4f:
64:4f:8e:7a:c1:a1:ee:64:bb:3b:92:77:be:a9:26:
a8:28:35:4a:de:79:f9:d9:b5:23:25:d7:34:15:90:
58:96:c9:8d:2a:48:28:fb:6a:a8:73:ae:0b:01:c4:
32:dd:7e:3a:1d:3d:c9:b8:a6:84:e6:f5:8c:b6:7b:
73:0f:65:65:f3:d3:d2:e3:e0:4d:6a:3e:bb:ec:45:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CB:45:2B:59:91:A3:CF:15:70:38:9F:6E:F4:ED:A9:B4:B8:16:05
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/J8tFK1mRo88VcDifbvTtqbS4FgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
99:89:4a:c8:b8:3c:7a:b6:8a:ce:9d:1f:76:33:78:58:82:ab:
ab:8f:a7:f3:5e:72:27:7a:a5:2b:06:ff:52:58:1a:91:92:f6:
aa:f3:4f:ce:37:38:2d:47:5c:5d:1c:b9:c1:28:ea:c3:33:01:
22:60:a7:28:f8:97:6e:c7:7b:4b:cb:61:10:92:6f:83:e4:30:
79:a2:18:53:ea:55:36:67:7e:e5:b0:41:18:d7:01:17:10:cb:
f1:5d:7b:35:4a:3d:c9:b5:4f:a8:49:1c:e6:f0:02:54:e3:a5:
6d:a4:45:46:4d:9d:e7:32:0f:6e:28:b0:fb:d7:02:90:83:ed:
16:8b:27:77:24:cc:e7:84:2a:45:23:15:19:d4:8f:7b:7b:b1:
44:c6:4e:33:0c:63:3e:fb:64:33:8b:7e:d3:ae:f9:66:73:28:
93:7b:8a:f9:4f:b9:a0:a6:68:68:0e:bc:b8:a2:fe:a1:b2:9e:
f6:a1:f5:05:66:e5:db:fe:6e:6c:13:e0:07:5b:52:19:39:52:
9e:3f:67:ec:a7:ab:27:ac:b1:c8:65:db:e2:1f:e5:2c:f1:d6:
72:e4:9f:70:9c:56:e6:52:22:40:9d:99:a4:1a:b4:8c:9f:00:
fe:13:51:b3:23:cd:d5:a5:b6:31:2f:6e:35:ec:58:92:5a:fc:
d2:69:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:02:33 2026 by rpki-client