Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/xLSZNUcYipnlzFKrMFLEht9TUSg.roa
File: xLSZNUcYipnlzFKrMFLEht9TUSg.roa (raw, json)
Hash identifier: twmH1yWPUe/Hi79YMdDB7x2ltkNrwCgcnb+wVA498JI=
Subject key identifier: C4:B4:99:35:47:18:8A:99:E5:CC:52:AB:30:52:C4:86:DF:53:51:28
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019FEB5172AE9B94F5344D3C396834AEDDE8
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/xLSZNUcYipnlzFKrMFLEht9TUSg.roa
Signing time: Mon 10 Aug 2026 10:56:51 +0000
ROA not before: Mon 10 Aug 2026 10:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:51:72:ae:9b:94:f5:34:4d:3c:39:68:34:ae:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Aug 10 10:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4b4993547188a99e5cc52ab3052c486df535128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:17:9c:3e:e9:16:95:b3:e2:a9:f3:e7:0e:
bd:cb:d3:9b:d7:0e:fb:00:d4:c4:a8:34:82:65:7c:
51:1e:ab:6d:2d:6b:60:92:a7:65:37:3c:72:50:0e:
48:c2:eb:70:7d:c0:06:3d:95:3b:31:81:fa:26:31:
be:61:2d:86:df:ec:ff:08:a8:57:11:a6:c6:b5:46:
19:1f:4d:1c:5e:1c:54:9e:74:20:3c:fe:a5:fb:36:
27:b3:3e:42:b7:96:a3:19:fe:5a:c3:44:4e:78:86:
4e:d5:9f:bd:23:77:37:63:32:b7:5b:05:ef:e7:87:
9e:af:27:b3:ef:d3:01:5a:c3:56:80:67:b7:ed:16:
96:00:ed:8d:31:85:a5:f4:37:11:f7:92:ba:10:5a:
0e:1e:61:05:6d:f9:81:cd:8a:2d:de:21:e3:c9:14:
68:99:15:0c:8c:b4:0f:43:a1:61:b4:dc:4d:05:2e:
5a:12:37:af:24:a0:e0:a8:4f:55:78:cb:50:f0:31:
7e:9c:d0:3a:55:a2:a2:57:d3:4f:01:25:92:8b:69:
89:80:40:b9:2c:c9:79:6a:09:48:7a:83:30:59:70:
cb:7d:5f:03:31:46:e9:82:2e:47:24:7c:81:dd:c0:
cf:91:fd:9f:e9:80:90:73:7a:8a:79:a6:29:8a:ef:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:99:35:47:18:8A:99:E5:CC:52:AB:30:52:C4:86:DF:53:51:28
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/xLSZNUcYipnlzFKrMFLEht9TUSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
10:32:5a:94:07:1b:f4:a7:08:41:86:a0:a0:8e:12:bd:ca:18:
43:18:da:02:39:0e:56:9d:ee:71:5f:5d:67:c3:54:bd:e2:fd:
b0:55:cb:1b:29:60:a1:9c:bf:0b:10:ff:b4:b7:b1:54:2e:93:
f1:8d:1d:8e:85:a5:a1:1f:c0:a1:8f:a0:bb:d2:0f:5f:cb:0d:
6b:77:e2:3d:5e:50:bf:f3:fe:e7:93:9f:72:5b:e2:e9:64:f9:
13:45:0c:05:c5:9f:bd:f7:d4:d8:53:3b:04:6d:92:f2:1a:ab:
b7:01:04:c6:4b:74:ff:0a:42:36:b6:c4:df:a6:49:96:48:c2:
be:ab:6e:a4:80:50:1a:21:af:73:55:1a:92:dd:90:f8:fa:cc:
87:5d:37:52:04:e3:0a:4e:d1:41:e3:5c:e1:69:f6:48:63:5c:
0c:bd:ba:3b:8e:fe:9c:e6:b9:21:0b:62:18:74:a4:6d:4f:cf:
4b:10:4c:7c:76:91:13:92:ea:74:6f:90:2e:79:1e:46:c7:78:
37:3f:50:07:03:c2:54:66:19:cb:a5:93:83:1c:4e:59:22:b1:
18:8d:57:be:8e:a3:b2:29:c0:c6:c1:89:41:b8:59:26:cc:d2:
d6:31:55:e6:23:1c:3b:84:ea:cf:30:75:ef:19:f9:29:42:77:
f8:27:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:38 2026 by rpki-client