Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/f_5xxrvErft9UHy9p9SWDv2Clw4.roa
File: f_5xxrvErft9UHy9p9SWDv2Clw4.roa (raw, json)
Hash identifier: +FdbEp2vWa1bm8frutm/p3mBSy9rm0hwGurOY2inwDw=
Subject key identifier: 7F:FE:71:C6:BB:C4:AD:FB:7D:50:7C:BD:A7:D4:96:0E:FD:82:97:0E
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019D1F5D43EBEBA6CF9545AE264E2DF336E5
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/f_5xxrvErft9UHy9p9SWDv2Clw4.roa
Signing time: Tue 24 Mar 2026 10:21:38 +0000
ROA not before: Tue 24 Mar 2026 10:21:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:5d:43:eb:eb:a6:cf:95:45:ae:26:4e:2d:f3:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Mar 24 10:21:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ffe71c6bbc4adfb7d507cbda7d4960efd82970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:7d:34:2b:9c:32:d2:5c:9f:e2:7d:76:e4:
14:89:fb:35:1d:05:cf:03:c5:d6:18:c3:bd:74:ec:
f3:76:e5:75:88:0d:b1:66:d5:4d:2d:d2:fd:5b:1e:
67:44:e3:f1:b6:b7:85:11:1e:b8:53:ad:5b:e7:1c:
a3:d0:c5:4e:e2:42:9e:30:5f:80:18:74:1b:e8:54:
5d:97:12:81:78:32:ce:b9:53:8c:5a:61:91:f0:42:
3f:fd:a2:cf:0c:26:3a:85:83:7d:33:e6:3a:d8:a7:
37:aa:47:1c:b3:77:41:15:9e:29:e9:f9:c0:66:d9:
3c:22:9e:af:84:5a:53:62:4a:94:a3:29:af:5e:9d:
ca:95:db:eb:bd:9e:99:18:90:9f:3f:77:a7:ed:d9:
5f:91:a5:78:b2:7e:07:09:9f:52:a4:4c:2a:c3:70:
9f:68:02:0e:19:11:ec:13:0d:81:52:ef:e8:d4:8d:
3c:91:7d:9a:44:28:cd:e0:90:3f:fd:f8:88:93:e5:
31:6f:b1:ba:bc:01:1d:0b:a4:64:44:a4:0e:cb:92:
1d:68:1a:be:c0:c3:1b:f2:e5:b7:a2:3d:6a:28:68:
c9:48:15:f8:07:32:86:0f:46:5e:25:77:3c:68:46:
9a:a3:39:09:c0:f3:8b:99:10:88:78:ae:5d:b0:f1:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:71:C6:BB:C4:AD:FB:7D:50:7C:BD:A7:D4:96:0E:FD:82:97:0E
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/f_5xxrvErft9UHy9p9SWDv2Clw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.140.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
70:be:30:c8:12:c0:d2:f2:39:6f:c4:b9:5e:61:58:e3:5f:42:
33:f8:25:e2:b2:fe:3f:54:68:2d:4d:eb:ac:ef:05:20:1f:51:
03:2a:4d:97:6a:25:f9:04:b4:09:6c:75:d7:9b:07:b0:09:d3:
35:9d:24:55:7e:56:10:6f:1e:dc:6b:fe:6e:81:8c:34:b2:aa:
76:cf:f4:f3:f2:b7:ee:f9:4e:77:5d:67:6e:15:ad:2e:0d:c0:
50:41:83:39:e0:41:ab:79:0b:25:bb:03:64:fa:f6:1c:f2:bf:
76:ce:e6:63:ad:9a:69:63:05:70:bd:bc:af:f9:7f:68:5e:3f:
af:f1:44:84:12:1f:3d:be:79:3a:dd:e0:2a:83:fc:f6:fc:f7:
3b:31:88:11:8b:49:57:31:ec:52:ff:ec:d8:16:7b:d2:74:22:
99:17:b2:59:c4:56:1c:d9:10:92:e4:e5:21:ff:8d:b6:13:d2:
a3:c6:73:07:f4:fc:4b:ff:48:25:ff:50:31:11:9f:91:94:a3:
9d:fa:b9:09:7d:c6:5e:e1:61:24:c3:b7:8d:52:6a:f0:09:b7:
16:77:e7:65:94:f4:11:66:f6:a3:17:9a:5d:77:d3:62:de:c8:
92:16:b8:77:dc:ee:a9:84:1d:f9:a5:8c:77:0f:d7:b9:c9:93:
c4:56:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:51 2026 by rpki-client