Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zW8HK6Qb6EhBcQOyL48nr-PTtEg.roa
File: zW8HK6Qb6EhBcQOyL48nr-PTtEg.roa (raw, json)
Hash identifier: kLLLrzUvaMaZ2fvT2NWgVzUu2a/AcNmBnOQGTnNQg0Q=
Subject key identifier: CD:6F:07:2B:A4:1B:E8:48:41:71:03:B2:2F:8F:27:AF:E3:D3:B4:48
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019CE1273C292EF69081628E838B33691308
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zW8HK6Qb6EhBcQOyL48nr-PTtEg.roa
Signing time: Thu 12 Mar 2026 08:26:10 +0000
ROA not before: Thu 12 Mar 2026 08:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:27:3c:29:2e:f6:90:81:62:8e:83:8b:33:69:13:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Mar 12 08:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd6f072ba41be848417103b22f8f27afe3d3b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:be:b7:76:44:6a:28:66:2a:99:a1:e0:da:
91:8b:b5:34:3b:66:57:38:a6:37:bd:84:8e:4e:d0:
8d:18:25:95:ef:11:d4:9a:e0:3e:e0:6c:14:bc:70:
cc:01:c9:43:0a:5c:83:fa:23:75:2e:cf:7f:c3:4c:
49:35:5b:02:49:aa:be:3c:c0:94:99:5f:8e:76:f6:
14:fa:61:c6:b2:e7:5f:84:7b:c2:8d:88:0d:7a:8f:
91:a4:21:c4:f5:c3:46:bd:92:b0:6e:9d:b4:ad:c7:
7a:e4:b6:98:92:97:8a:41:56:91:e3:4b:64:51:3e:
b6:a9:95:2c:ea:a5:ce:9b:f4:bc:c2:6c:76:23:83:
5c:44:80:38:96:72:6f:74:b4:c7:1e:a1:fe:1d:44:
d1:e8:9a:89:e8:71:65:59:eb:8d:98:b3:4b:fa:92:
a7:16:9e:b4:d3:d4:1f:82:9f:61:d8:41:c6:47:27:
9d:b8:da:39:7f:39:98:a6:bc:9b:8d:1c:dc:e1:0a:
7d:2d:f8:fc:b6:33:af:85:e5:7f:f6:82:38:ca:10:
be:e4:65:da:b5:af:10:94:0b:45:f3:c7:76:31:53:
81:67:67:8e:e6:fb:f0:9f:f4:90:d8:8a:af:50:cb:
21:e7:43:f3:41:55:6e:7c:9e:fc:3d:ab:fb:02:67:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:07:2B:A4:1B:E8:48:41:71:03:B2:2F:8F:27:AF:E3:D3:B4:48
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zW8HK6Qb6EhBcQOyL48nr-PTtEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.135.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
ac:76:87:92:d0:33:d8:f8:02:6f:f4:cd:f2:47:20:f3:bb:cd:
8b:92:5a:55:0e:40:df:d9:e0:f2:7a:a3:2e:65:9e:28:c8:b2:
ac:51:1c:f9:8a:f7:77:83:d8:03:d7:03:98:1c:64:4b:76:e4:
ec:f3:7f:27:2a:05:cb:82:30:2d:c6:45:8b:88:0a:82:20:87:
ca:fc:40:e0:01:8d:3c:a2:bc:67:d5:65:f2:4b:68:7a:4d:ab:
53:4f:44:6e:2b:35:f4:14:f8:63:62:be:4b:ba:4f:6e:4f:9e:
f5:e2:c8:10:42:d9:dd:05:ff:18:65:e2:c0:e1:dc:a1:a6:4e:
dd:0a:b5:75:2c:c0:2a:0e:54:03:bb:64:ab:69:39:96:f0:22:
52:8f:52:ab:1e:01:68:0b:40:c6:dd:ad:09:75:71:45:24:02:
81:b1:a6:b3:55:f7:09:97:ee:95:a5:fb:35:80:f2:6c:f0:5b:
93:83:3a:24:64:c9:e0:f5:19:c7:1c:21:39:a7:fe:dc:92:b9:
33:08:ba:8b:2b:e5:5f:21:bf:f0:ea:ec:d2:c3:db:c0:22:a4:
35:92:b3:95:36:d8:b0:e1:4a:0b:10:03:28:4d:7e:e8:ea:a1:
c9:03:00:dd:d4:4e:ae:4f:22:c2:6f:3e:a9:85:f9:3b:97:63:
25:0c:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:40:04 2026 by rpki-client