Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2W6KF4ZuQXQXIE5k8cSp6i2a1Y0.roa
File: 2W6KF4ZuQXQXIE5k8cSp6i2a1Y0.roa (raw, json)
Hash identifier: /mZ0iG0jpONh+gyxFwCH+h9oQ3x8hw3uCrxQnXWGQLg=
Subject key identifier: D9:6E:8A:17:86:6E:41:74:17:20:4E:64:F1:C4:A9:EA:2D:9A:D5:8D
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0C91BF26C7C298C13B607CED0222E8DEA
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2W6KF4ZuQXQXIE5k8cSp6i2a1Y0.roa
Signing time: Tue 22 Sep 2026 12:34:07 +0000
ROA not before: Tue 22 Sep 2026 12:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
62.83.0.0/16 maxlen: 24
62.83.0.0/22 maxlen: 22
62.83.4.0/22 maxlen: 22
62.83.8.0/22 maxlen: 22
62.83.16.0/22 maxlen: 22
62.83.20.0/22 maxlen: 22
62.83.32.0/22 maxlen: 22
62.83.36.0/22 maxlen: 22
62.83.40.0/22 maxlen: 22
62.83.44.0/22 maxlen: 22
62.83.52.0/22 maxlen: 22
62.83.56.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
159.195.224.0/22 maxlen: 22
159.195.228.0/22 maxlen: 22
159.195.240.0/22 maxlen: 22
159.195.244.0/22 maxlen: 22
159.195.248.0/22 maxlen: 22
159.195.252.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:1b:f2:6c:7c:29:8c:13:b6:07:ce:d0:22:2e:8d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 22 12:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d96e8a17866e417417204e64f1c4a9ea2d9ad58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:9f:b8:3c:48:c1:24:55:90:f2:fd:db:64:
e8:7b:24:fc:88:ba:15:db:e9:1f:8e:91:c0:a2:9f:
7d:bd:85:7f:71:ef:26:50:5a:9f:c3:63:16:b2:78:
12:6d:36:fe:23:1e:2e:1b:74:49:79:58:95:69:7b:
38:79:00:1e:34:52:b4:f0:11:ca:b5:5e:70:18:c2:
a3:e4:ec:b8:4d:99:5d:bf:70:70:dc:fa:c6:7d:14:
5b:40:5d:89:79:d3:df:1f:1a:79:0a:92:59:2d:63:
b7:b0:15:9f:42:7d:cd:e8:42:5f:fb:1e:de:51:09:
72:2f:97:41:5f:e9:8b:9c:4b:d9:09:c1:0f:49:6c:
dc:28:3c:10:62:f2:e6:bb:6e:21:72:39:d4:f7:93:
0d:de:98:37:0f:1e:04:71:c7:e2:93:f9:28:ea:3c:
6e:d7:ac:37:4b:53:59:b1:23:db:08:ac:49:70:d0:
a6:94:4d:6d:f1:6e:ea:aa:4d:11:b9:96:24:e1:d3:
ca:e1:1b:e6:35:b6:85:a4:81:61:15:d5:df:50:10:
38:35:bf:2b:f8:c3:1a:bf:84:e7:c4:9c:93:61:54:
46:2e:fb:db:8a:9a:aa:53:c8:00:87:e5:4a:c1:b3:
d6:26:25:52:12:c2:cd:f7:2a:64:8b:ed:af:ce:e2:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:8A:17:86:6E:41:74:17:20:4E:64:F1:C4:A9:EA:2D:9A:D5:8D
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2W6KF4ZuQXQXIE5k8cSp6i2a1Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
159.195.224.0/21
159.195.240.0/20
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
3e:fd:6c:75:8f:dc:b8:5f:a2:05:aa:9b:be:b7:4e:8c:26:30:
bf:99:27:33:94:c7:d0:49:d0:07:df:b8:16:eb:1c:5f:5b:8e:
ac:34:f6:b6:72:db:2b:5d:32:28:74:a3:1a:41:e6:34:3f:7d:
6e:76:10:13:72:59:c0:a5:b5:47:ba:9b:2e:0f:17:78:0c:f5:
15:4f:7b:b8:49:0d:22:40:ce:29:12:a4:0d:f9:6d:4e:fa:cf:
cc:c0:a3:5b:2f:ec:d1:6b:f3:a3:c5:de:da:70:6e:5c:d1:c7:
e9:97:99:02:97:ae:9a:cb:2f:b4:58:c7:4b:9b:61:db:ba:93:
a3:3f:02:4d:ab:a6:b0:da:97:f5:f3:44:f7:35:09:9b:04:bf:
07:d9:d7:14:5a:30:7f:67:fd:70:f9:26:9c:40:de:00:60:34:
ba:d5:98:83:ed:28:be:b5:5d:3f:41:71:70:69:16:3c:c2:3e:
dc:ec:e2:aa:95:c3:d3:a8:2c:6e:19:8b:55:87:73:02:32:16:
e3:cb:f0:34:d6:c5:c1:84:48:b4:e0:73:6b:2e:74:75:89:fd:
f2:3f:bd:09:7f:05:e3:14:34:6d:4f:2a:d7:37:94:d3:4f:fb:
7b:0c:1d:dc:e2:55:83:3c:4a:db:f4:4c:b6:bb:c3:e7:63:79:
00:9e:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:30 2026 by rpki-client