Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kak3JE8MRfofu1BSVUfu_YJGlcE.roa
File: kak3JE8MRfofu1BSVUfu_YJGlcE.roa (raw, json)
Hash identifier: HkWTQuIKcR63cILN0f/PpdEpTJgbslNQYLXom+Eyudg=
Subject key identifier: 91:A9:37:24:4F:0C:45:FA:1F:BB:50:52:55:47:EE:FD:82:46:95:C1
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019A105B7F1566F899411E6EA66F47774C37
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kak3JE8MRfofu1BSVUfu_YJGlcE.roa
Signing time: Thu 23 Oct 2025 09:17:02 +0000
ROA not before: Thu 23 Oct 2025 09:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:5b:7f:15:66:f8:99:41:1e:6e:a6:6f:47:77:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Oct 23 09:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a937244f0c45fa1fbb50525547eefd824695c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:9a:03:cd:95:da:29:e6:fd:5b:64:6d:58:
b3:10:32:74:6b:9a:b7:c2:cd:41:c3:64:ad:70:86:
a7:c9:d0:1b:a1:9b:20:26:b2:84:bd:26:5f:ba:f8:
2c:09:93:e5:21:eb:56:2f:e7:71:8f:dd:e6:be:1b:
85:c2:76:f8:18:bf:45:e7:9b:68:cf:a9:94:a1:aa:
46:29:55:8c:6b:d7:2e:0a:c8:76:e1:e0:fe:d5:c9:
54:ae:02:01:25:28:84:b8:2d:7a:e8:23:0b:1e:c6:
b8:62:c0:73:d9:16:3c:b3:87:1c:3a:43:15:5d:ea:
4c:ef:2f:f0:b1:ab:d4:53:14:df:46:76:30:18:bc:
6d:8d:a8:f0:4a:68:37:ca:e6:f2:d7:9f:01:7d:6f:
8e:cf:22:ed:ad:84:e3:7e:e8:27:f4:6f:53:57:2a:
fd:28:e6:fa:09:dc:c3:2c:49:08:71:a7:a3:70:b2:
0d:f3:d3:45:14:7e:3d:2f:0c:2b:17:35:c4:33:0a:
21:c9:67:b7:37:5e:e3:50:0f:1d:fc:55:55:89:2d:
32:6b:3a:65:c5:76:ea:17:9e:67:e4:dc:2b:82:5b:
81:c2:73:41:31:84:93:49:89:01:9f:3d:6a:fa:ff:
04:69:3b:5c:4d:62:9e:d9:f4:6c:e2:fb:fd:2a:0c:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:37:24:4F:0C:45:FA:1F:BB:50:52:55:47:EE:FD:82:46:95:C1
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kak3JE8MRfofu1BSVUfu_YJGlcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.4.0-159.195.11.255
159.195.20.0-159.195.31.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
Signature Algorithm: sha256WithRSAEncryption
ac:ff:4f:71:ea:36:90:a7:49:83:80:57:2a:98:9c:be:97:2c:
ce:ad:5a:df:90:57:58:53:05:4f:6f:af:f5:3d:83:6b:c7:7d:
f2:86:2c:bb:88:6a:91:91:24:f1:36:6e:76:11:03:d5:20:46:
40:32:6b:33:e4:74:c4:d5:0b:2e:18:fd:bd:ac:73:6a:88:98:
3f:af:c2:ec:70:a4:90:a6:e1:d6:91:9c:30:40:c0:74:d2:14:
85:6e:f1:c1:48:ba:8a:a7:7c:7e:7d:f7:c8:e3:e0:c9:38:39:
4a:2d:42:60:a0:96:16:ed:15:0a:8e:59:40:76:1b:bb:89:c2:
a9:32:b1:8a:17:c9:e5:34:ac:cc:20:35:3b:fd:c0:62:08:ec:
2d:da:c9:0d:f1:2b:61:b8:35:87:52:ed:6a:3c:1d:a8:09:5e:
2f:84:bd:f0:2a:2e:bc:e5:c6:ca:8e:e4:ab:55:9d:64:0d:f0:
28:c1:59:07:81:ad:00:86:5b:98:cb:e8:6d:c1:94:91:8b:29:
97:9c:13:b2:8e:92:7a:8d:86:0b:78:26:df:bd:98:e8:4d:45:
e1:e0:69:55:62:e6:1b:f2:37:9b:1c:61:b2:97:39:65:38:06:
c5:31:ab:12:30:14:6f:58:07:7a:ce:69:52:52:a2:8a:df:ad:
00:7a:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:40:01 2025 by rpki-client