Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h9uj72TqU4Iu-IL_EaG2Vdi1n1Q.roa
File: h9uj72TqU4Iu-IL_EaG2Vdi1n1Q.roa (raw, json)
Hash identifier: HrYIFcy/lBmQOLcTtohU+QIWMaD3UlekqskPveqAfLs=
Subject key identifier: 87:DB:A3:EF:64:EA:53:82:2E:F8:82:FF:11:A1:B6:55:D8:B5:9F:54
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 01A0F17EE4F2F3E1C981143EFD1992BC5834
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h9uj72TqU4Iu-IL_EaG2Vdi1n1Q.roa
Signing time: Wed 30 Sep 2026 08:47:00 +0000
ROA not before: Wed 30 Sep 2026 08:47:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.61.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.108.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.113.0/24 maxlen: 24
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.125.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.202.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.212.0/22 maxlen: 22
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
212.98.31.0/24 maxlen: 24
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.231.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.236.0/24 maxlen: 24
213.143.237.0/24 maxlen: 24
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:7e:e4:f2:f3:e1:c9:81:14:3e:fd:19:92:bc:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Sep 30 08:47:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87dba3ef64ea53822ef882ff11a1b655d8b59f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:00:94:3e:24:71:6c:28:1f:13:ec:7c:f6:
d1:3a:7a:d9:84:97:7a:3c:e2:f8:ca:2c:f3:12:24:
55:82:75:3b:57:74:15:73:bb:1c:7f:f9:a6:ad:9f:
92:44:40:af:2d:a7:d9:dd:57:d8:e7:ca:2a:ee:cb:
63:0a:f5:f5:22:a3:9e:9f:04:23:44:b1:fb:99:35:
78:06:32:52:6f:41:37:c2:87:e5:e8:c0:b9:3a:0d:
16:69:36:2c:95:08:c9:51:12:79:ef:cb:2f:83:2e:
11:dc:83:33:4c:10:c3:54:99:81:6b:7a:67:01:92:
93:82:96:cd:d6:46:f9:bd:16:43:ec:f8:f5:9b:86:
73:81:06:59:b1:93:fd:1d:e2:45:c6:63:80:f1:74:
37:69:48:bc:de:3c:9f:3f:81:6f:29:0d:fa:25:06:
ab:b1:55:d0:a9:15:2d:2f:0e:28:a0:2e:44:60:32:
17:95:2a:39:34:56:58:09:1f:d5:1b:07:b9:34:35:
f2:ee:65:56:89:a7:e8:8e:ac:f6:14:27:6d:0c:34:
c2:9b:43:3c:f1:4f:ed:fe:64:82:3b:1c:cf:4a:e8:
cc:0f:c8:f1:ff:0c:c9:74:9c:5c:e4:82:95:80:f9:
04:12:ac:21:7f:65:33:64:78:57:8f:94:1d:5d:5a:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DB:A3:EF:64:EA:53:82:2E:F8:82:FF:11:A1:B6:55:D8:B5:9F:54
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h9uj72TqU4Iu-IL_EaG2Vdi1n1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
84:64:77:86:40:c0:a2:92:1b:ae:66:43:b9:c1:3b:da:92:fb:
80:fd:88:d2:2c:cc:1c:ac:17:5e:e8:c5:02:6c:ea:d3:c6:ef:
96:50:57:2d:53:ff:81:26:5b:b5:3e:f0:57:8c:7c:a7:6a:4c:
2e:cb:f7:82:06:0d:37:e5:f4:10:6c:24:e9:41:44:49:6b:d6:
30:67:2f:ec:c7:bd:ad:a1:89:a8:84:b5:0f:f3:05:d1:d4:9d:
7e:d3:f8:46:26:b2:0d:20:7b:15:ed:2c:16:14:8e:be:5d:b0:
ee:93:40:16:5c:ea:f1:39:82:c3:f9:14:94:eb:3f:db:18:58:
85:d2:eb:d3:93:12:97:be:52:8a:8f:1b:a5:92:65:e0:8b:aa:
cd:0c:59:0c:d9:f9:0d:dd:a3:eb:8a:ad:56:35:49:25:82:86:
15:0f:3d:f0:05:88:31:51:64:77:3f:fb:55:e8:91:49:2f:a9:
e9:8e:19:28:2e:6c:5d:62:e2:e7:ab:68:9f:8e:f5:e3:30:57:
a3:59:a1:35:f8:bd:48:a9:d2:0a:1f:00:6e:38:26:be:0d:a8:
06:8e:b8:14:58:21:dd:ce:8b:a2:15:c7:b9:fd:5c:48:52:85:
c8:d8:eb:35:06:2c:17:81:82:85:5f:e5:fe:9c:ab:46:c7:ce:
63:2b:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:06 2026 by rpki-client