Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/KNUqUjiO0GQDMZR0nypcKHQwH6Q.roa
File: KNUqUjiO0GQDMZR0nypcKHQwH6Q.roa (raw, json)
Hash identifier: CI7Nq8u7E5NWS27w9iH1vij5BsKG9VbX1nniJRBNiCs=
Subject key identifier: 28:D5:2A:52:38:8E:D0:64:03:31:94:74:9F:2A:5C:28:74:30:1F:A4
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0D323E14C03AFE423F72C8A4548E0262B
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/KNUqUjiO0GQDMZR0nypcKHQwH6Q.roa
Signing time: Thu 24 Sep 2026 11:18:59 +0000
ROA not before: Thu 24 Sep 2026 11:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
62.83.0.0/16 maxlen: 24
62.83.0.0/22 maxlen: 22
62.83.4.0/22 maxlen: 22
62.83.8.0/22 maxlen: 22
62.83.16.0/22 maxlen: 22
62.83.20.0/22 maxlen: 22
62.83.32.0/22 maxlen: 22
62.83.36.0/22 maxlen: 22
62.83.40.0/22 maxlen: 22
62.83.44.0/22 maxlen: 22
62.83.52.0/22 maxlen: 22
62.83.56.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 22
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:23:e1:4c:03:af:e4:23:f7:2c:8a:45:48:e0:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 24 11:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28d52a52388ed064033194749f2a5c2874301fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:cf:08:af:6a:a2:4f:41:f8:40:9b:72:d8:
24:03:c0:69:eb:1e:8f:31:8d:0c:5c:98:0f:be:eb:
0b:a5:c3:07:83:ae:6c:6c:71:67:51:35:f2:0f:63:
30:66:b1:e1:6d:9a:73:1e:56:ab:8b:f1:08:ba:a4:
7f:ed:d0:46:04:3a:d2:e7:b2:28:1d:4a:49:6e:c3:
52:a0:b0:4a:35:36:91:e7:6e:ee:32:55:ce:75:c4:
47:4d:1a:52:d8:18:16:6f:07:bb:c3:e1:b4:96:6c:
ea:e4:6a:ec:10:50:10:45:d5:17:8c:07:bb:9c:30:
0c:12:37:a7:de:00:22:93:73:0c:7c:05:54:00:1b:
f5:36:59:c3:08:5d:57:88:a0:82:53:cc:eb:cb:82:
a3:b3:ae:9d:85:0e:0c:d4:e6:6b:f0:2e:7c:ad:7d:
7d:6e:33:7c:a6:61:12:26:b0:4b:27:7a:46:79:d2:
b3:da:e8:16:1c:b6:60:cd:4e:d5:3c:26:56:a8:ba:
ef:b2:36:f4:bf:9f:5e:a3:47:4d:2d:84:d3:8b:9b:
3c:af:60:30:46:8a:c5:4b:3b:bd:bb:27:e1:72:e7:
5f:f6:ab:93:00:56:0f:a7:44:67:bb:36:72:06:85:
85:54:b8:7f:54:09:a6:e0:c7:e5:84:d5:ef:ce:22:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:2A:52:38:8E:D0:64:03:31:94:74:9F:2A:5C:28:74:30:1F:A4
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/KNUqUjiO0GQDMZR0nypcKHQwH6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
62:31:c3:27:e5:cb:ef:df:9a:7e:fc:ce:b0:1e:c8:8d:db:cc:
37:bb:3b:87:36:1a:23:21:26:b1:70:5b:35:da:63:67:35:db:
91:35:7a:79:78:29:1c:c6:b0:a1:eb:c2:6d:84:a7:f2:32:dc:
32:8b:d8:e6:a7:5e:61:6f:ab:7f:a2:3b:e5:e4:55:d5:08:b5:
22:d4:76:8f:23:96:2b:ac:dc:43:d1:4b:2d:e3:d9:b2:a5:4b:
16:d0:6a:3b:47:f5:54:1d:33:78:84:54:81:9c:85:8a:c3:9b:
3b:d8:1a:f8:4d:ff:2c:b9:9d:fa:60:af:a1:ad:dd:f7:88:81:
65:a2:4e:89:a0:0a:fc:b7:71:5a:1c:a2:59:4a:1b:f4:83:95:
8c:4f:d9:bc:b9:08:c7:f8:12:36:74:a7:0a:22:cc:4c:19:cc:
89:7c:53:9a:75:0d:df:d5:ff:00:dd:5f:21:96:26:b2:c5:0f:
0b:7a:e6:54:71:2e:1d:48:1f:4d:9b:6d:2f:71:2e:78:5e:b0:
82:12:63:8e:ca:49:c3:0d:a1:a6:91:47:ae:4c:ae:40:d9:80:
1d:8f:b4:39:b0:74:62:e6:2d:03:c2:ff:c5:56:dd:4d:38:73:
48:26:09:0b:58:08:0f:48:de:05:34:2a:f2:6e:73:a3:a2:b1:
3f:d6:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:32 2026 by rpki-client