Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LPIGqLE6mtV2yJasHuyqjSJwfMg.roa
File: LPIGqLE6mtV2yJasHuyqjSJwfMg.roa (raw, json)
Hash identifier: bAXAwSjfKP84L62rLGNZSshYKyG2Q512mVSa3T9Ql+I=
Subject key identifier: 2C:F2:06:A8:B1:3A:9A:D5:76:C8:96:AC:1E:EC:AA:8D:22:70:7C:C8
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019D7673E5CBA22788A87F1E4B7BA358F626
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LPIGqLE6mtV2yJasHuyqjSJwfMg.roa
Signing time: Fri 10 Apr 2026 08:13:20 +0000
ROA not before: Fri 10 Apr 2026 08:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 2.56.96.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
5.181.48.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
37.120.160.0/20 maxlen: 22
37.120.176.0/22 maxlen: 22
37.120.182.0/23 maxlen: 24
37.120.184.0/21 maxlen: 22
37.221.192.0/21 maxlen: 32
45.9.60.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
45.132.244.0/22 maxlen: 22
45.136.28.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
45.157.176.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
85.235.64.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
89.58.12.0/22 maxlen: 22
89.58.16.0/21 maxlen: 21
89.58.20.0/24 maxlen: 24
89.58.24.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
89.58.60.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
91.204.44.0/22 maxlen: 24
92.60.36.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
159.195.1.0/24 maxlen: 24
159.195.4.0/22 maxlen: 22
159.195.8.0/22 maxlen: 22
159.195.20.0/22 maxlen: 22
159.195.24.0/22 maxlen: 22
159.195.28.0/22 maxlen: 22
159.195.32.0/22 maxlen: 22
159.195.36.0/22 maxlen: 22
159.195.40.0/22 maxlen: 22
159.195.44.0/22 maxlen: 22
159.195.48.0/22 maxlen: 22
159.195.52.0/22 maxlen: 22
159.195.56.0/22 maxlen: 22
159.195.60.0/22 maxlen: 22
159.195.64.0/22 maxlen: 22
159.195.68.0/22 maxlen: 22
159.195.72.0/22 maxlen: 22
159.195.76.0/22 maxlen: 22
159.195.80.0/22 maxlen: 22
159.195.84.0/22 maxlen: 22
159.195.88.0/23 maxlen: 23
159.195.96.0/22 maxlen: 22
159.195.100.0/22 maxlen: 22
159.195.104.0/24 maxlen: 24
159.195.105.0/24 maxlen: 24
159.195.106.0/24 maxlen: 24
159.195.108.0/22 maxlen: 22
159.195.112.0/22 maxlen: 22
159.195.118.0/23 maxlen: 23
159.195.120.0/24 maxlen: 24
159.195.121.0/24 maxlen: 24
159.195.122.0/24 maxlen: 24
159.195.123.0/24 maxlen: 24
159.195.124.0/22 maxlen: 22
159.195.128.0/22 maxlen: 22
159.195.132.0/22 maxlen: 22
159.195.136.0/22 maxlen: 22
159.195.140.0/24 maxlen: 24
159.195.141.0/24 maxlen: 24
159.195.144.0/22 maxlen: 22
159.195.148.0/22 maxlen: 22
185.16.60.0/22 maxlen: 32
185.162.248.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
185.170.112.0/22 maxlen: 32
185.183.156.0/22 maxlen: 32
185.194.140.0/22 maxlen: 22
185.207.104.0/22 maxlen: 32
185.228.136.0/22 maxlen: 32
185.233.104.0/22 maxlen: 32
185.243.8.0/22 maxlen: 32
185.244.192.0/22 maxlen: 32
188.68.32.0/19 maxlen: 32
192.145.44.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
194.55.12.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
213.109.160.0/22 maxlen: 22
2a03:4000::/32 maxlen: 48
2a03:4000:2:1000::/52 maxlen: 52
2a03:4000:3:1000::/52 maxlen: 52
2a03:4000:7:1000::/56 maxlen: 56
2a03:4000:8:1000::/56 maxlen: 56
2a03:4000:9:1000::/56 maxlen: 56
2a03:4000:63:1000::/52 maxlen: 52
2a03:4001::/32 maxlen: 48
2a0a:4cc0::/40 maxlen: 40
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:40:2000::/56 maxlen: 56
2a0a:4cc0:60::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:c1:6000::/52 maxlen: 52
2a0a:4cc0:c1:b000::/52 maxlen: 52
2a0a:4cc0:c1:d000::/52 maxlen: 52
2a0a:4cc0:c1:e000::/52 maxlen: 52
2a0a:4cc0:c1:f000::/52 maxlen: 52
2a0a:4cc0:c2:1000::/52 maxlen: 52
2a0a:4cc0:c2:2000::/52 maxlen: 52
2a0a:4cc0:c2:3000::/52 maxlen: 52
2a0a:4cc0:c2:4000::/52 maxlen: 52
2a0a:4cc0:c2:5000::/52 maxlen: 52
2a0a:4cc0:fe::/48 maxlen: 48
2a0a:4cc0:ff::/48 maxlen: 48
2a0a:4cc0:ff:1000::/52 maxlen: 52
2a0a:4cc0:100::/48 maxlen: 48
2a0a:4cc0:104::/48 maxlen: 48
2a0a:4cc0:104::/52 maxlen: 52
2a0a:4cc0:104:1000::/52 maxlen: 52
2a0a:4cc0:2000:4000::/56 maxlen: 56
2a0a:4cc0:2000:4200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:73:e5:cb:a2:27:88:a8:7f:1e:4b:7b:a3:58:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Apr 10 08:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf206a8b13a9ad576c896ac1eecaa8d22707cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:9b:f3:fd:d9:59:aa:53:32:c0:b9:7e:ff:
39:78:df:18:19:de:0b:e3:ee:02:13:b2:8c:81:06:
56:b0:b1:95:a5:0f:ea:1b:d4:04:82:20:8c:81:85:
6d:5c:0a:af:d0:d6:e1:75:fa:ff:d6:62:39:c0:a3:
61:ec:18:25:d7:61:c1:b7:09:ac:82:88:c9:3e:12:
02:61:7f:ad:b4:da:b5:76:cb:d1:65:57:ae:d1:3d:
91:3b:ea:7e:05:7d:fc:7e:87:67:11:e7:1e:38:d5:
c7:72:6b:78:a8:89:ac:10:b9:8f:62:fc:36:d6:40:
72:bd:91:b8:5a:4d:ff:71:f6:78:4d:c0:09:34:bc:
ce:ce:b2:29:af:7e:73:c0:e6:e5:40:47:aa:20:56:
23:24:cb:08:b3:b3:a4:3b:4b:60:74:c5:d0:c0:00:
ba:60:10:ce:83:bd:c9:32:85:76:e0:b6:10:96:ce:
14:9b:b0:c0:d7:89:bd:9d:fd:6d:bb:34:c0:57:d4:
94:6e:7b:00:bf:a2:ce:c0:8b:e5:20:49:be:10:1b:
dc:ea:63:01:d9:a0:32:ca:ef:c9:f3:6c:e8:b4:97:
58:c2:66:82:9a:89:d0:ea:d0:c7:11:ef:51:f2:2b:
1d:cf:e1:85:97:6f:08:a7:c2:d8:3d:be:8d:3d:60:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:06:A8:B1:3A:9A:D5:76:C8:96:AC:1E:EC:AA:8D:22:70:7C:C8
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LPIGqLE6mtV2yJasHuyqjSJwfMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.1.0/24
159.195.4.0-159.195.11.255
159.195.20.0-159.195.89.255
159.195.96.0-159.195.106.255
159.195.108.0-159.195.115.255
159.195.118.0-159.195.141.255
159.195.144.0/21
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff
2a0a:4cc0:104::/48
2a0a:4cc0:2000:4000::/56
2a0a:4cc0:2000:4200::/56
Signature Algorithm: sha256WithRSAEncryption
2d:f8:58:31:c8:8a:ca:9e:c8:7c:05:7e:fd:d0:bb:03:39:31:
2f:df:6b:be:27:d8:3c:ce:ca:20:16:de:fc:cc:e6:32:4f:ba:
37:57:55:b5:99:55:cd:45:23:ac:87:b3:e8:80:86:39:56:ec:
f9:f1:0d:59:14:f7:44:da:79:9b:79:15:ac:fd:25:61:40:6f:
58:55:15:28:4d:fb:bd:f9:50:04:df:31:01:bb:05:c1:a2:2b:
26:c9:66:cb:38:c9:04:2d:40:31:0a:0d:df:6f:62:3a:ac:43:
8a:98:2e:d4:16:a2:ee:83:c7:17:8d:70:d1:b9:5a:07:bd:76:
da:9a:86:f1:6f:04:be:f8:67:5c:c1:8a:f9:17:2d:b9:32:7d:
96:f2:df:82:a1:84:8b:81:ba:95:40:e3:3a:24:45:81:de:86:
84:3b:4a:c4:63:64:24:50:d6:16:e9:e1:5d:c5:ca:d5:20:8b:
0d:31:a6:f2:3d:f9:97:57:6a:db:b3:d2:67:61:ab:f0:09:72:
b0:9e:67:4e:8f:0b:7f:9c:bf:b8:3f:f9:a0:7c:ee:40:e5:1e:
df:8f:f2:37:56:42:28:e4:3f:65:f9:47:2e:b6:6c:e5:38:20:
7c:68:07:d2:5f:f0:94:08:bd:36:80:ce:9e:7f:0c:e4:00:a2:
33:08:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:10 2026 by rpki-client