Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/hI_XWMZylrpW0BGfUaAJnKEJmGA.roa
File: hI_XWMZylrpW0BGfUaAJnKEJmGA.roa (raw, json)
Hash identifier: ESQ8FEFlzl4DbPXywzgxAsSvfIAdbE8AOO7tm5PLU1I=
Subject key identifier: 84:8F:D7:58:C6:72:96:BA:56:D0:11:9F:51:A0:09:9C:A1:09:98:60
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0198F02F3C5C5F073E494DDB3709CF715B72
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/hI_XWMZylrpW0BGfUaAJnKEJmGA.roa
Signing time: Thu 28 Aug 2025 10:18:04 +0000
ROA not before: Thu 28 Aug 2025 10:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.4.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:2000:4000::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:2f:3c:5c:5f:07:3e:49:4d:db:37:09:cf:71:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Aug 28 10:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848fd758c67296ba56d0119f51a0099ca1099860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:9a:b3:90:f5:cd:73:69:b3:88:b8:4a:b8:
d2:e4:2c:53:ec:60:2b:77:db:4e:bf:e6:d7:27:e2:
8a:52:e4:5e:87:5d:d2:37:38:a3:6d:e0:85:87:81:
83:ed:37:bd:10:73:eb:51:98:ad:cd:82:e4:09:7f:
63:71:92:13:fd:82:c0:93:5a:61:1d:58:95:49:ee:
d0:35:b4:be:a4:ea:26:58:44:5b:7e:ec:f6:03:30:
7d:d4:f8:c7:9d:17:33:5f:f4:86:83:ce:e5:96:4a:
b6:9a:c5:c2:c4:bc:fd:aa:54:fd:36:d5:ed:b1:3c:
d4:41:dc:2e:be:58:0e:1e:0f:19:be:34:df:1f:8f:
ac:ed:e4:9f:86:99:66:aa:2a:55:74:f2:e8:47:6b:
71:82:63:8d:ad:2b:0d:cc:48:56:d9:98:5e:a5:c1:
c1:b3:87:48:53:c5:24:c3:8d:8e:ab:46:fa:aa:c1:
9b:14:a6:2b:5f:e7:98:ce:6d:8f:f7:2a:07:f3:5d:
51:7e:e0:b3:6c:3c:d7:50:6b:84:fc:b0:67:fc:d4:
34:09:0d:cd:43:cb:f3:0b:6d:b6:49:78:c0:df:1d:
96:23:df:d2:e4:2e:0a:fa:c4:ca:7e:7e:b7:3c:d8:
bb:28:26:24:98:e8:5b:3f:e0:d4:be:70:e3:50:df:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:D7:58:C6:72:96:BA:56:D0:11:9F:51:A0:09:9C:A1:09:98:60
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/hI_XWMZylrpW0BGfUaAJnKEJmGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.4.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:2000:4000::/56
Signature Algorithm: sha256WithRSAEncryption
2d:74:1d:96:22:65:68:54:cf:d5:de:3b:fd:0f:3f:88:60:ba:
30:ec:6e:d5:b2:f4:65:49:32:b8:82:07:a0:ff:c2:ab:72:35:
6a:d0:b6:b9:d6:aa:35:22:a6:42:06:8a:3d:f4:90:5f:5a:1f:
86:8f:d4:63:16:e0:d2:fd:7f:10:3b:5b:67:f7:99:6a:0c:39:
4c:52:f6:22:db:d1:2f:28:74:35:9a:b8:d4:19:35:24:e1:be:
5a:3c:0a:c3:36:10:41:86:56:fc:cb:e7:af:71:02:b6:66:7b:
43:17:28:c4:95:b0:aa:7f:95:4f:97:f3:9e:f0:e3:27:22:d4:
ac:9d:74:37:b1:d9:63:5b:19:c4:29:37:d3:b6:43:6d:b2:1f:
44:fd:ec:71:76:e2:64:10:dd:68:a5:86:d9:ff:b1:f1:7f:72:
9e:3c:4e:43:07:6b:d8:b0:ef:7b:70:14:7a:2c:f2:2c:80:f6:
94:1d:e5:01:1e:5d:10:a0:27:fe:d6:d5:6c:1b:65:36:22:46:
c0:2a:61:32:f3:bb:27:34:9b:06:58:06:8b:f7:ed:45:75:83:
d1:a8:d5:35:57:c4:92:5c:27:27:ed:b0:ac:c2:9c:db:fa:31:
28:58:7e:cf:10:cc:b9:42:96:d6:1d:0f:f8:4b:1e:87:96:a8:
2c:90:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:07:30 2025 by rpki-client