Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/afKpLSzkRBXzV4BjT3BpJM7Spxc.roa
File: afKpLSzkRBXzV4BjT3BpJM7Spxc.roa (raw, json)
Hash identifier: j0zroS1QN9AcRS6ak5G4uapit2hUYLDInrxtzYQvIDc=
Subject key identifier: 69:F2:A9:2D:2C:E4:44:15:F3:57:80:63:4F:70:69:24:CE:D2:A7:17
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019F6F272F607FA35D9A96C0CEEAD0E44473
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/afKpLSzkRBXzV4BjT3BpJM7Spxc.roa
Signing time: Fri 17 Jul 2026 08:17:46 +0000
ROA not before: Fri 17 Jul 2026 08:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.143.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
159.195.152.0/24 maxlen: 24
159.195.153.0/24 maxlen: 24
159.195.154.0/24 maxlen: 24
159.195.156.0/22 maxlen: 22
159.195.192.0/22 maxlen: 22
159.195.196.0/22 maxlen: 22
159.195.200.0/22 maxlen: 22
159.195.204.0/22 maxlen: 22
159.195.208.0/22 maxlen: 22
159.195.212.0/22 maxlen: 22
159.195.216.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:c2:6000::/52 maxlen: 52
2a0a:4cc0:c3::/52 maxlen: 52
2a0a:4cc0:c4::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:27:2f:60:7f:a3:5d:9a:96:c0:ce:ea:d0:e4:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jul 17 08:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f2a92d2ce44415f35780634f706924ced2a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:9e:62:6a:c5:8f:29:55:58:62:0c:32:ed:
13:5f:5f:85:9e:e1:1c:86:1c:0e:99:c5:3f:6b:3d:
c0:9d:f9:76:c5:ff:48:e1:9f:5a:a3:44:6a:02:a9:
6f:4d:b9:43:43:6d:97:10:9f:ba:37:1b:ef:a0:b5:
4e:85:65:a0:62:d1:1f:82:5d:b9:0a:3b:13:12:0d:
d9:21:af:47:1e:0c:c3:83:96:2b:15:91:c2:72:74:
d5:ca:26:14:16:75:52:a7:64:96:66:b3:57:0b:4f:
ef:67:ea:bd:ae:b6:cb:0c:bb:e9:65:df:74:9e:da:
18:df:ea:53:ca:54:9f:ea:1c:33:84:aa:fa:26:6a:
ca:48:d2:19:82:85:39:30:91:bd:96:0c:8a:20:05:
7c:1e:ed:c4:83:54:8f:2f:38:01:21:73:61:f2:20:
29:34:29:63:dc:41:de:ff:38:95:c0:f7:2a:d6:05:
c0:02:44:7d:6a:3c:ea:45:53:72:e4:71:19:c1:8d:
3c:02:a0:bd:6b:0c:5b:1e:cc:b1:db:0a:9e:d9:f1:
ea:01:f3:1a:db:f7:5f:f4:aa:44:40:81:6a:e9:c0:
3e:47:0a:82:ec:d5:f3:c7:ca:01:01:e8:57:00:da:
67:3e:53:74:38:13:c5:71:b4:31:ef:06:dc:88:1b:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:A9:2D:2C:E4:44:15:F3:57:80:63:4F:70:69:24:CE:D2:A7:17
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/afKpLSzkRBXzV4BjT3BpJM7Spxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.143.0-159.195.154.255
159.195.156.0/22
159.195.192.0-159.195.219.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
80:c7:46:d7:c3:8b:83:b1:56:e0:2a:86:f7:e7:09:1a:f0:1a:
4a:61:96:8f:59:eb:9d:e4:bd:4c:1f:7d:09:3f:97:2b:be:71:
81:c7:ad:74:f8:97:a0:b2:04:0f:47:df:fa:0c:16:eb:b5:fc:
21:81:50:d6:da:9c:d0:a1:9f:c9:67:1d:09:a4:b5:96:80:73:
58:ec:ac:c3:19:6b:ff:1e:61:04:5f:2e:aa:5c:e8:a3:44:1e:
bc:03:e2:5d:ee:fc:17:9d:40:18:2a:de:f9:d9:9a:7e:bb:25:
84:0c:0b:52:00:ee:0d:a4:36:9f:55:3f:65:5a:24:ea:01:10:
2a:c2:e9:d8:84:52:14:f8:2d:2b:98:9a:82:a9:b6:60:94:e3:
5a:b6:cc:ba:64:9d:52:ce:97:94:13:be:98:d5:28:91:9a:61:
78:45:f9:ba:aa:e5:16:1f:c4:a8:b9:7d:a0:42:74:f6:4c:27:
48:79:3e:68:ed:7d:cf:ad:16:ec:af:1e:f0:57:91:45:95:b3:
3a:85:a8:59:f0:ae:12:6b:54:d1:0a:c8:c4:78:05:b2:41:7e:
8f:e9:94:57:64:e4:ce:79:7b:1d:db:c1:2d:b0:e7:8f:88:42:
f6:c1:1f:30:ab:0b:e8:b0:c8:28:cd:c7:a6:14:fa:c8:70:cd:
a4:e9:4a:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:14 2026 by rpki-client