Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ejKA_vlyxDhvn27RS4YsJGzhNdg.roa
File: ejKA_vlyxDhvn27RS4YsJGzhNdg.roa (raw, json)
Hash identifier: XP8ALFzfsLx3L3dQs8deoXxOCZ0VOnD81ZoRuur0rIk=
Subject key identifier: 7A:32:80:FE:F9:72:C4:38:6F:9F:6E:D1:4B:86:2C:24:6C:E1:35:D8
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019F1D8550F4708B0860663BA11FC6B340EA
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ejKA_vlyxDhvn27RS4YsJGzhNdg.roa
Signing time: Wed 01 Jul 2026 11:51:43 +0000
ROA not before: Wed 01 Jul 2026 11:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.173.0/24 maxlen: 24
45.94.175.0/24 maxlen: 24
45.94.180.0/24 maxlen: 24
45.94.181.0/24 maxlen: 24
45.94.182.0/24 maxlen: 24
45.94.183.0/24 maxlen: 24
45.94.189.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.94.191.0/24 maxlen: 24
45.94.196.0/24 maxlen: 24
45.94.197.0/24 maxlen: 24
45.94.198.0/24 maxlen: 24
45.94.204.0/24 maxlen: 24
45.94.206.0/24 maxlen: 24
45.94.207.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.146.196.0/24 maxlen: 24
45.146.197.0/24 maxlen: 24
45.146.198.0/24 maxlen: 24
45.146.199.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.202.0/24 maxlen: 24
86.48.203.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
185.134.217.0/24 maxlen: 24
185.134.218.0/24 maxlen: 24
185.159.126.0/24 maxlen: 24
185.201.200.0/24 maxlen: 24
185.213.100.0/24 maxlen: 24
185.213.101.0/24 maxlen: 24
185.213.103.0/24 maxlen: 24
185.213.104.0/24 maxlen: 24
185.213.107.0/24 maxlen: 24
185.217.208.0/24 maxlen: 24
185.217.209.0/24 maxlen: 24
185.219.28.0/24 maxlen: 24
185.219.29.0/24 maxlen: 24
185.219.30.0/24 maxlen: 24
185.219.31.0/24 maxlen: 24
185.221.248.0/24 maxlen: 24
185.221.250.0/24 maxlen: 24
185.221.251.0/24 maxlen: 24
185.228.191.0/24 maxlen: 24
185.234.221.0/24 maxlen: 24
185.234.222.0/24 maxlen: 24
185.234.223.0/24 maxlen: 24
193.160.128.0/24 maxlen: 24
193.160.129.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:85:50:f4:70:8b:08:60:66:3b:a1:1f:c6:b3:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jul 1 11:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a3280fef972c4386f9f6ed14b862c246ce135d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:0f:bf:bd:8a:3d:d0:59:48:c7:3e:e0:bc:
a2:27:a2:96:3b:b4:b8:44:73:15:bb:cf:b8:a6:a9:
01:5f:33:00:36:ee:ac:54:e0:72:45:81:00:7a:65:
f2:0f:e2:2e:fe:a6:64:c6:f7:aa:88:5d:d5:28:37:
d3:89:d9:05:b0:73:8d:b4:70:9d:37:ca:df:9d:1b:
92:11:24:1c:a1:fd:39:5d:1a:ba:20:7b:54:83:55:
70:55:f5:f0:ef:2c:a7:82:09:90:44:3d:cb:58:d6:
0c:4a:ba:47:8d:f3:12:7e:ff:46:84:7e:2c:cd:b4:
77:91:6f:8a:19:1f:3e:1d:58:2f:fb:c0:c5:d5:72:
f6:3a:dd:1c:8c:de:a8:f4:26:5b:a9:fa:d0:12:5b:
ae:a5:21:69:61:eb:25:80:65:21:31:f0:be:06:e7:
a1:4a:f4:38:c8:c7:5a:1d:0a:f1:42:3e:2e:aa:e4:
14:c9:dd:2d:53:25:e9:4c:f6:81:3d:25:8f:1e:94:
58:3e:6f:2b:f0:ef:df:f8:be:68:68:84:18:6b:25:
de:0f:f1:b5:ee:3e:c6:cd:51:d3:fd:4d:d8:42:49:
c7:c8:ad:2d:b3:23:ee:69:c8:9c:52:b8:c7:74:af:
d1:70:29:27:d9:5c:cc:3f:62:7b:60:8e:0e:00:c3:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:80:FE:F9:72:C4:38:6F:9F:6E:D1:4B:86:2C:24:6C:E1:35:D8
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/ejKA_vlyxDhvn27RS4YsJGzhNdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.173.0/24
45.94.175.0/24
45.94.180.0/22
45.94.189.0-45.94.191.255
45.94.196.0-45.94.198.255
45.94.204.0/24
45.94.206.0/23
45.95.216.0/22
45.146.196.0/22
63.247.192.0/20
86.48.192.0-86.48.203.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
185.134.217.0-185.134.218.255
185.159.126.0/24
185.201.200.0/24
185.213.100.0/23
185.213.103.0-185.213.104.255
185.213.107.0/24
185.217.208.0/23
185.219.28.0/22
185.221.248.0/24
185.221.250.0/23
185.228.191.0/24
185.234.221.0-185.234.223.255
193.160.128.0/23
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:3d:3c:59:54:32:b5:7e:61:a6:aa:75:b6:fe:d5:0a:a3:56:
bb:c3:0e:fd:24:16:7b:a7:c9:22:3d:e4:cc:9d:b8:ec:9e:24:
4d:40:a2:2e:90:1d:02:1e:22:4e:59:33:fd:f6:38:15:40:0d:
c9:25:4d:4c:c3:16:8c:0f:b3:c4:33:b9:ba:99:fe:e1:c2:89:
1f:b6:d5:5f:aa:53:84:80:2c:9e:8d:dc:6d:29:61:da:6f:b9:
8b:95:ac:8a:0b:34:bd:ad:2d:a9:32:ff:42:9a:f9:ab:69:c8:
3a:26:c6:b1:6c:d6:16:73:a5:7a:96:b2:d5:a5:8a:b9:bc:29:
63:32:e5:63:6e:03:43:5d:57:70:2f:13:30:f7:82:26:e3:82:
27:7f:a1:63:4c:33:64:53:b8:b3:bc:47:42:b9:43:89:80:79:
2d:79:cf:53:3a:50:d1:01:9d:c7:05:d3:9c:bd:47:3b:75:89:
56:f7:0b:ef:b8:60:6f:1a:05:ac:d5:c0:97:39:06:31:2b:49:
05:1c:e2:af:41:ff:f9:a2:24:49:8a:d9:bc:96:01:d0:40:23:
a8:98:b2:09:92:14:0c:f3:f4:5b:90:f9:fe:92:c0:60:39:47:
c9:ca:c3:03:c6:25:a5:ce:a8:89:b0:08:c7:33:9e:14:a0:77:
75:6e:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:22 2026 by rpki-client