Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/lpoQtLPz0_D6-Is_9zMTIK3m0R4.roa
File: lpoQtLPz0_D6-Is_9zMTIK3m0R4.roa (raw, json)
Hash identifier: 1ueURDBCEwN2/7dV2pfwjFxmd3tfaz9axAXSaA/Oa0c=
Subject key identifier: 96:9A:10:B4:B3:F3:D3:F0:FA:F8:8B:3F:F7:33:13:20:AD:E6:D1:1E
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019DBA393D4AE40796F0C2382FC411F4F327
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/lpoQtLPz0_D6-Is_9zMTIK3m0R4.roa
Signing time: Thu 23 Apr 2026 12:03:26 +0000
ROA not before: Thu 23 Apr 2026 12:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:39:3d:4a:e4:07:96:f0:c2:38:2f:c4:11:f4:f3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Apr 23 12:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=969a10b4b3f3d3f0faf88b3ff7331320ade6d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:14:8b:99:3c:8b:21:99:ef:a7:22:14:d0:
64:61:77:85:e7:57:1b:b4:c4:3c:d3:97:56:1b:3f:
93:1f:96:49:25:24:8b:ab:22:9c:7d:c9:14:4c:bc:
71:fa:59:bc:72:b7:b7:85:fa:e7:ea:cb:ba:9c:8e:
8f:38:47:e7:9a:c4:3d:a7:bd:45:e9:df:93:f1:83:
fc:95:08:4a:dc:2b:65:80:96:5d:dc:d2:95:c8:7b:
f5:45:42:a4:31:58:8a:d3:06:c5:48:cd:17:16:69:
5f:2e:bf:bc:6a:b3:82:ab:0b:d1:9f:2b:03:f6:1e:
d6:25:a6:6c:ca:92:5c:c7:da:18:33:b5:04:16:24:
01:03:a0:68:4b:f6:b6:81:cc:a5:a4:2c:81:f2:82:
66:f3:19:29:a1:c8:89:e3:ba:c6:7f:3b:0d:a5:e0:
f5:8a:1e:a3:20:05:94:8b:0d:4b:60:a6:b4:70:14:
10:db:39:b0:26:b1:8c:e0:7e:b1:ae:e6:f4:75:e3:
db:ad:93:53:e4:6a:a7:46:ea:dd:18:6b:19:1c:1a:
89:82:5b:d1:73:ec:a9:d0:81:13:fe:72:3b:2c:27:
41:9f:7e:80:5e:7b:d5:62:81:ff:70:9a:b1:ca:b5:
e3:90:b1:97:4c:4a:61:56:ad:44:96:5d:50:a3:58:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:10:B4:B3:F3:D3:F0:FA:F8:8B:3F:F7:33:13:20:AD:E6:D1:1E
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/lpoQtLPz0_D6-Is_9zMTIK3m0R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.144.0-159.195.152.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
00:e0:28:0c:56:92:84:59:6e:e9:6e:f4:99:25:7f:4b:86:aa:
4b:5c:da:b9:b2:32:14:13:91:67:cd:ed:16:e4:71:96:22:b4:
11:11:f6:43:d1:45:b6:66:c8:ea:ee:fd:a2:d3:c1:e6:0c:34:
21:2c:fa:09:14:b0:51:6e:72:bb:78:22:0a:d4:df:a7:1f:b9:
27:82:cf:3a:86:bd:37:d3:13:19:25:ee:c6:c0:ae:c9:19:24:
cf:18:99:91:f9:f6:d1:4f:a7:a4:cc:a8:77:04:92:66:d8:33:
b9:25:15:8e:52:0f:6b:23:76:95:49:58:cc:70:e6:b1:d1:1a:
74:70:64:78:aa:7a:c6:b8:de:ca:0f:32:be:7e:9b:68:d6:4c:
18:d2:2b:19:7a:13:b8:0d:5f:ab:e6:c8:74:1e:22:aa:ba:3d:
dc:c0:58:5f:09:18:d5:95:0b:12:cc:19:ea:a9:72:a9:6f:90:
22:8e:2e:97:e2:ac:7c:9d:71:96:07:59:ad:cc:ee:7b:39:67:
2a:6c:fe:03:0a:c8:de:4d:5b:7f:38:20:03:39:fd:92:2e:81:
d6:f6:61:e3:4f:40:20:18:b5:f3:5b:26:68:c9:b2:42:50:6c:
68:57:a2:4a:a7:10:ef:85:f6:93:0c:18:be:21:ac:45:ee:fb:
b1:27:ef:85
-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgISAZ26OT1K5AeW8MI4L8QR9PMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjYwNDIzMTIwMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjlhMTBiNGIzZjNkM2YwZmFmODhiM2ZmNzMzMTMyMGFkZTZkMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq0Ui5k8iyGZ76ciFNBkYXeF51cb
tMQ805dWGz+TH5ZJJSSLqyKcfckUTLxx+lm8cre3hfrn6su6nI6POEfnmsQ9p71F
6d+T8YP8lQhK3CtlgJZd3NKVyHv1RUKkMViK0wbFSM0XFmlfLr+8arOCqwvRnysD
9h7WJaZsypJcx9oYM7UEFiQBA6BoS/a2gcylpCyB8oJm8xkpociJ47rGfzsNpeD1
ih6jIAWUiw1LYKa0cBQQ2zmwJrGM4H6xrub0dePbrZNT5GqnRurdGGsZHBqJglvR
c+yp0IET/nI7LCdBn36AXnvVYoH/cJqxyrXjkLGXTEphVq1Ell1Qo1j7BQIDAQAB
o4IDszCCA68wHQYDVR0OBBYEFJaaELSz89Pw+viLP/czEyCt5tEeMB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvbHBvUXRMUHowX0Q2LUlzXzl6TVRJSzNtMFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxwYIKwYBBQUHAQcBAf8EggG2MIIBsjCCAXAEAgABMIIB
aAMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T
aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o
+AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x
QAMEAphZaAMEAJ/DATAMAwQCn8MEAwQCn8MIMAwDBAKfwxQDBAGfw1gwDAMEBZ/D
YAMEAJ/DajAMAwQCn8NsAwQCn8NwMAwDBAGfw3YDBAGfw4wwDAMEBJ/DkAMEAJ/D
mAMEArkQPAMEArmi+AMEArmjdAMEArmqcAMEArm3nAMEArnCjAMEArnPaAMEArnk
iAMEArnpaAMEArnzCAMEArn0wAMEBbxEIAMEAsCRLAMEAsEeeAMEAsEfGAMEAsIN
UAMEAsI3DAMEAsI7zAMEAsOAZAMEAtVtoDA8BAIAAjA2AwUBKgNAADAQAwUGKgpM
wAMHACoKTMABAAMHACoKTMABBAMIACoKTMAgAEADCAAqCkzAIABCMA0GCSqGSIb3
DQEBCwUAA4IBAQAA4CgMVpKEWW7pbvSZJX9LhqpLXNq5sjIUE5Fnze0W5HGWIrQR
EfZD0UW2Zsjq7v2i08HmDDQhLPoJFLBRbnK7eCIK1N+nH7kngs86hr030xMZJe7G
wK7JGSTPGJmR+fbRT6ekzKh3BJJm2DO5JRWOUg9rI3aVSVjMcOax0Rp0cGR4qnrG
uN7KDzK+fpto1kwY0isZehO4DV+r5sh0HiKquj3cwFhfCRjVlQsSzBnqqXKpb5Ai
ji6X4qx8nXGWB1mtzO57OWcqbP4DCsjeTVt/OCADOf2SLoHW9mHjT0AgGLXzWyZo
ybJCUGxoV6JKpxDvhfaTDBi+IaxF7vuxJ++F
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:18:45 2026 by rpki-client