Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/QJTkOmElpeJHG2eadXYZEfdH9Ew.roa
File: QJTkOmElpeJHG2eadXYZEfdH9Ew.roa (raw, json)
Hash identifier: QajHiauxJnpQk0ZVdLy5C2eged/kBvFsMhoSIGwW6WM=
Subject key identifier: 40:94:E4:3A:61:25:A5:E2:47:1B:67:9A:75:76:19:11:F7:47:F4:4C
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019E06C818F52B486CE62068FC8D4033FEEF
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/QJTkOmElpeJHG2eadXYZEfdH9Ew.roa
Signing time: Fri 08 May 2026 08:50:37 +0000
ROA not before: Fri 08 May 2026 08:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.192.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:c8:18:f5:2b:48:6c:e6:20:68:fc:8d:40:33:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: May 8 08:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4094e43a6125a5e2471b679a75761911f747f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:19:ac:7f:a7:71:36:59:34:36:28:d2:43:
6b:09:88:f9:29:bc:90:61:7e:27:e3:95:a3:a4:67:
86:c2:5c:c7:82:19:16:72:d3:65:2d:f8:28:01:79:
4d:d5:1f:ca:f7:61:2d:64:29:08:e1:02:c3:72:27:
ab:51:e9:51:44:58:3b:fd:89:7f:d5:32:8f:15:e5:
e1:9b:aa:3b:4e:1b:73:bf:fa:26:85:b0:38:d9:67:
e1:7c:46:19:34:01:a2:46:ef:7c:31:6a:5b:ba:fd:
25:41:34:70:f3:15:bc:5a:15:13:17:3e:46:15:81:
28:4b:21:b3:9b:4d:43:3c:27:d8:af:63:2f:23:97:
9e:29:52:11:33:be:b2:5b:c9:55:79:16:fd:db:52:
f9:c7:02:bf:84:9e:6f:26:48:3a:00:74:e7:c8:db:
0d:88:91:b4:b2:d1:b5:18:7d:c0:84:43:83:42:bd:
48:6d:74:7f:58:ca:33:76:e3:4b:27:dd:ba:38:7d:
ec:5e:3f:3f:d0:1d:3b:48:32:a7:66:f2:29:20:be:
43:93:2f:d8:dc:d7:55:b9:53:ca:e5:cc:28:01:e0:
0a:db:4b:65:d4:d5:15:ac:00:56:ff:e8:95:5d:cc:
39:93:11:18:25:0d:f7:6e:e1:4f:b5:ca:f0:76:18:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:94:E4:3A:61:25:A5:E2:47:1B:67:9A:75:76:19:11:F7:47:F4:4C
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/QJTkOmElpeJHG2eadXYZEfdH9Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.192.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
86:ca:24:77:5b:16:c1:b8:c4:02:ef:13:3a:74:95:df:d2:4f:
50:b4:2d:f4:49:80:b0:a8:8f:4c:50:20:0a:c3:ce:ea:1a:80:
60:22:f3:a2:46:7a:32:36:27:11:f7:31:21:9a:a4:3f:52:ee:
3c:c1:17:2d:4e:5e:11:0e:43:30:0b:e4:ce:c6:74:ff:91:12:
24:e9:7b:66:c1:56:53:a5:4f:38:46:39:eb:ae:e3:5b:51:e3:
c5:89:32:95:cf:f7:7a:7c:d8:f4:35:40:e1:7f:ff:62:81:25:
6f:d7:c8:ac:82:94:da:e7:7a:36:ee:df:6a:25:6c:c2:b9:6f:
29:f6:06:20:d4:14:d1:9f:d6:59:4b:d7:fb:a9:c8:bb:c7:d8:
3f:bc:21:92:d2:aa:69:d1:00:fb:0e:06:fa:92:6b:83:04:f5:
0b:56:ed:3c:f4:b0:96:34:51:31:83:08:a5:c0:a0:23:b4:74:
0a:12:4e:01:f1:1b:07:a1:2e:37:2a:f8:3b:af:b0:57:2f:c1:
64:dc:8d:1b:4e:c0:4c:3e:fc:34:35:24:54:25:46:e4:56:ed:
34:75:9d:95:bf:e6:6c:46:3c:23:40:1e:99:c5:e9:9a:69:d0:
94:11:04:f6:27:35:67:d3:54:46:2c:0b:11:b3:52:c8:9a:1f:
1c:93:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:00 2026 by rpki-client