Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/A9eBVt_NVw80f4ud2p4IUkt-qgE.roa
File: A9eBVt_NVw80f4ud2p4IUkt-qgE.roa (raw, json)
Hash identifier: l631+++cwxit2fZP7MhyYGJrNq7chN4M3dOYFW+jUG4=
Subject key identifier: 03:D7:81:56:DF:CD:57:0F:34:7F:8B:9D:DA:9E:08:52:4B:7E:AA:01
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019C8F76171C3B91C97FE5CB20D272FDCC5B
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/A9eBVt_NVw80f4ud2p4IUkt-qgE.roa
Signing time: Tue 24 Feb 2026 11:43:26 +0000
ROA not before: Tue 24 Feb 2026 11:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: Failed, certificate revoked on Mon 02 Mar 2026 07:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:76:17:1c:3b:91:c9:7f:e5:cb:20:d2:72:fd:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Feb 24 11:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d78156dfcd570f347f8b9dda9e08524b7eaa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:f5:0f:c1:e6:ee:c2:e6:ef:45:4b:75:7f:
ca:db:3d:a8:8e:96:bc:e1:fc:9c:6c:8b:b9:0c:09:
ae:45:ee:85:49:e1:0c:8d:11:70:a5:e5:6c:0f:7c:
21:58:f5:6a:16:dc:17:09:a7:ee:6b:bf:d4:17:cc:
66:ac:23:db:38:e9:97:db:15:49:20:79:3c:21:a8:
e7:24:11:d6:c1:49:fb:9a:35:97:c0:0d:f3:e6:d5:
1a:bc:fe:f8:26:1b:42:ca:ba:18:4a:cb:e2:f1:54:
d5:0d:14:8b:19:ba:f2:31:83:21:6f:3e:9f:32:fb:
99:ec:b7:44:32:65:7b:02:d0:44:a2:09:c0:1e:3a:
d0:c3:0f:74:72:65:4a:aa:15:b2:f7:b1:a6:82:ac:
08:f0:08:d8:f6:6a:23:ab:9c:47:ce:eb:c1:8f:db:
d9:78:3b:f6:6b:9f:91:c5:cf:62:49:5e:07:43:bf:
87:24:6f:b4:cd:f0:24:17:6d:07:3a:6b:ce:c6:16:
61:eb:58:f0:ea:90:fe:94:98:a7:d4:51:28:65:3c:
5d:76:60:b7:bf:3d:87:be:11:18:3b:a6:c8:4b:12:
7e:b1:8a:3f:01:2b:a6:93:0b:59:2c:ee:45:a9:1b:
21:73:b8:9b:34:2f:d5:33:33:7b:bb:dd:27:dd:08:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:81:56:DF:CD:57:0F:34:7F:8B:9D:DA:9E:08:52:4B:7E:AA:01
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/A9eBVt_NVw80f4ud2p4IUkt-qgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.87.255
159.195.96.0-159.195.106.255
159.195.121.0-159.195.123.255
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
33:a8:0c:17:c4:dd:94:ca:48:4b:d5:4d:ce:4d:af:45:19:40:
d8:a8:87:44:39:06:fa:18:22:61:1b:6a:e5:16:96:1a:03:91:
6e:31:a5:d6:d8:f4:44:3b:6f:29:40:02:5c:ac:5d:f7:12:80:
a5:8e:ea:bd:d9:61:9e:b1:af:90:8f:93:df:d4:97:4a:9b:c3:
e1:4b:b5:1c:64:03:ef:3d:54:f6:73:68:31:9f:9a:69:86:92:
4b:9c:85:4f:bf:00:4a:04:ef:1a:e1:99:7e:d6:c0:ee:72:14:
6d:55:b9:3a:89:2c:fc:46:0d:b2:b7:7b:a6:3d:fd:64:6b:3e:
d2:fc:22:41:61:55:0b:39:f0:c8:2a:c1:56:f6:fd:5f:d4:28:
55:30:df:e0:91:9b:b8:38:0c:bc:9e:fd:ab:66:12:b2:53:8a:
6f:b2:b0:64:f3:16:d7:f1:64:57:98:cc:64:44:fe:12:d2:3a:
c8:84:15:12:e9:e4:e3:c3:6a:f3:88:17:3f:41:85:68:8f:34:
1a:82:0a:e9:b8:2b:df:85:ba:51:5c:5c:bc:b5:c1:72:3a:cf:
e6:99:4b:80:78:4b:7d:5b:0e:9f:ce:97:05:8c:f2:37:b4:0a:
9d:95:99:ad:20:e3:cd:60:af:29:a6:75:79:e1:ff:c0:76:e0:
5c:ec:01:2d
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgISAZyPdhccO5HJf+XLINJy/cxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjYwMjI0MTE0MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2Q3ODE1NmRmY2Q1NzBmMzQ3ZjhiOWRkYTllMDg1MjRiN2VhYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fz1D8Hm7sLm70VLdX/K2z2ojpa8
4fycbIu5DAmuRe6FSeEMjRFwpeVsD3whWPVqFtwXCafua7/UF8xmrCPbOOmX2xVJ
IHk8IajnJBHWwUn7mjWXwA3z5tUavP74JhtCyroYSsvi8VTVDRSLGbryMYMhbz6f
MvuZ7LdEMmV7AtBEognAHjrQww90cmVKqhWy97GmgqwI8AjY9mojq5xHzuvBj9vZ
eDv2a5+Rxc9iSV4HQ7+HJG+0zfAkF20HOmvOxhZh61jw6pD+lJin1FEoZTxddmC3
vz2HvhEYO6bISxJ+sYo/ASumkwtZLO5FqRshc7ibNC/VMzN7u90n3QhTWwIDAQAB
o4IDlzCCA5MwHQYDVR0OBBYEFAPXgVbfzVcPNH+LndqeCFJLfqoBMB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvQTllQlZ0X05WdzgwZjR1ZDJwNElVa3QtcWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqwYIKwYBBQUHAQcBAf8EggGaMIIBljCCAVQEAgABMIIB
TAMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T
aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o
+AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x
QAMEAphZaAMEAJ/DATAMAwQCn8MEAwQCn8MIMAwDBAKfwxQDBAOfw1AwDAMEBZ/D
YAMEAJ/DajAMAwQAn8N5AwQCn8N4AwQCuRA8AwQCuaL4AwQCuaN0AwQCuapwAwQC
ubecAwQCucKMAwQCuc9oAwQCueSIAwQCueloAwQCufMIAwQCufTAAwQFvEQgAwQC
wJEsAwQCwR54AwQCwR8YAwQCwg1QAwQCwjcMAwQCwjvMAwQCw4BkAwQC1W2gMDwE
AgACMDYDBQEqA0AAMBADBQYqCkzAAwcAKgpMwAEAAwcAKgpMwAEEAwgAKgpMwCAA
QAMIACoKTMAgAEIwDQYJKoZIhvcNAQELBQADggEBADOoDBfE3ZTKSEvVTc5Nr0UZ
QNioh0Q5BvoYImEbauUWlhoDkW4xpdbY9EQ7bylAAlysXfcSgKWO6r3ZYZ6xr5CP
k9/Ul0qbw+FLtRxkA+89VPZzaDGfmmmGkkuchU+/AEoE7xrhmX7WwO5yFG1VuTqJ
LPxGDbK3e6Y9/WRrPtL8IkFhVQs58MgqwVb2/V/UKFUw3+CRm7g4DLye/atmErJT
im+ysGTzFtfxZFeYzGRE/hLSOsiEFRLp5OPDavOIFz9BhWiPNBqCCum4K9+FulFc
XLy1wXI6z+aZS4B4S31bDp/OlwWM8je0Cp2Vma0g481grymmdXnh/8B24FzsAS0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:27 2026 by rpki-client