Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/JnoidLA6vJrAfrMDINBzIOY4x_A.roa
File: JnoidLA6vJrAfrMDINBzIOY4x_A.roa (raw, json)
Hash identifier: HehI5e9k9+SobZZSHZ1mKzsCznf3aOX4aCgw4ruzjYM=
Subject key identifier: 26:7A:22:74:B0:3A:BC:9A:C0:7E:B3:03:20:D0:73:20:E6:38:C7:F0
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019EA771BF0A75115A175F5B28334AA772C4
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/JnoidLA6vJrAfrMDINBzIOY4x_A.roa
Signing time: Mon 08 Jun 2026 13:35:10 +0000
ROA not before: Mon 08 Jun 2026 13:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.173.0/24 maxlen: 24
45.94.175.0/24 maxlen: 24
45.94.180.0/24 maxlen: 24
45.94.181.0/24 maxlen: 24
45.94.182.0/24 maxlen: 24
45.94.183.0/24 maxlen: 24
45.94.189.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.94.191.0/24 maxlen: 24
45.94.196.0/24 maxlen: 24
45.94.197.0/24 maxlen: 24
45.94.198.0/24 maxlen: 24
45.94.204.0/24 maxlen: 24
45.94.206.0/24 maxlen: 24
45.94.207.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.146.196.0/24 maxlen: 24
45.146.197.0/24 maxlen: 24
45.146.198.0/24 maxlen: 24
45.146.199.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.202.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
185.134.217.0/24 maxlen: 24
185.134.218.0/24 maxlen: 24
185.159.126.0/24 maxlen: 24
185.201.200.0/24 maxlen: 24
185.213.100.0/24 maxlen: 24
185.213.101.0/24 maxlen: 24
185.213.103.0/24 maxlen: 24
185.213.104.0/24 maxlen: 24
185.213.107.0/24 maxlen: 24
185.217.208.0/24 maxlen: 24
185.217.209.0/24 maxlen: 24
185.219.28.0/24 maxlen: 24
185.219.29.0/24 maxlen: 24
185.219.30.0/24 maxlen: 24
185.219.31.0/24 maxlen: 24
185.221.248.0/24 maxlen: 24
185.221.250.0/24 maxlen: 24
185.221.251.0/24 maxlen: 24
185.228.191.0/24 maxlen: 24
185.234.221.0/24 maxlen: 24
185.234.222.0/24 maxlen: 24
185.234.223.0/24 maxlen: 24
193.160.128.0/24 maxlen: 24
193.160.129.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:71:bf:0a:75:11:5a:17:5f:5b:28:33:4a:a7:72:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jun 8 13:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=267a2274b03abc9ac07eb30320d07320e638c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:ff:b0:c5:f2:bc:c7:b0:a9:40:61:b6:9d:
9f:36:c0:91:f1:0c:f2:37:49:92:2f:c5:85:aa:a0:
05:b0:7a:7a:a6:4c:e3:49:6f:32:c5:b7:94:70:57:
d0:95:ed:94:52:28:fc:e3:4a:16:7d:4c:e7:02:d9:
c3:af:9b:56:50:1c:38:37:82:53:45:fe:ce:7e:a3:
f1:01:1f:e0:77:00:e5:04:26:f0:38:37:bd:d2:0c:
ee:e0:df:12:76:55:3d:89:5d:31:bd:3c:2f:74:56:
cd:92:49:0b:ab:08:83:e2:c8:e7:ea:39:ff:3e:aa:
19:b1:f3:13:b8:89:e7:15:e9:2c:fd:a5:c7:ee:ba:
3a:67:84:d7:1f:4f:22:4d:3b:84:e9:bb:91:1b:2b:
f0:7e:31:3c:2c:3f:a3:dd:a2:06:b6:5b:2f:96:de:
bc:51:83:78:bb:8d:1d:76:2a:2f:fa:b8:4c:46:bb:
51:67:29:18:b4:44:7d:5b:78:b2:60:d5:25:a2:0c:
98:8b:1b:07:21:12:ed:df:59:53:2e:b6:9a:34:79:
28:e4:b4:71:bc:16:6f:a2:e7:8e:7a:76:6a:a1:62:
87:7e:79:7e:e2:f4:13:0a:d3:fb:89:1e:8b:d2:1d:
d8:92:49:98:64:69:51:58:0d:9a:7c:67:22:1a:a3:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:22:74:B0:3A:BC:9A:C0:7E:B3:03:20:D0:73:20:E6:38:C7:F0
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/JnoidLA6vJrAfrMDINBzIOY4x_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.173.0/24
45.94.175.0/24
45.94.180.0/22
45.94.189.0-45.94.191.255
45.94.196.0-45.94.198.255
45.94.204.0/24
45.94.206.0/23
45.95.216.0/22
45.146.196.0/22
63.247.192.0/20
86.48.192.0-86.48.202.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
185.134.217.0-185.134.218.255
185.159.126.0/24
185.201.200.0/24
185.213.100.0/23
185.213.103.0-185.213.104.255
185.213.107.0/24
185.217.208.0/23
185.219.28.0/22
185.221.248.0/24
185.221.250.0/23
185.228.191.0/24
185.234.221.0-185.234.223.255
193.160.128.0/23
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:6c:a6:4a:fa:b9:f1:12:b4:13:7a:a8:ba:7c:f9:58:09:ec:
73:6f:29:66:e2:48:aa:60:ff:8e:6b:57:d2:6f:69:2f:83:81:
30:60:2a:7e:f1:cb:89:f9:57:f5:c7:3c:e9:ec:7d:94:67:4e:
16:a6:01:e9:1a:48:64:97:b7:1a:03:13:d0:bf:b1:b4:5c:5c:
0e:87:52:ed:b8:1e:bd:ff:30:c4:5d:2f:b8:1b:f2:3c:0e:06:
e2:9b:1e:49:f1:f8:9e:02:5f:bf:39:e6:2f:e4:f8:f6:e9:57:
2f:de:8c:4a:07:64:61:b5:32:72:9b:59:63:12:f4:cd:11:ae:
23:b3:f9:65:63:e4:66:df:e5:8c:df:bd:3c:48:8a:8e:9d:e3:
6a:8a:bb:14:35:12:59:c0:f5:6e:6e:8f:60:44:c8:7e:90:7c:
ca:ff:8e:2a:b9:bf:c3:d0:80:f6:5a:a0:dd:ac:bf:2d:c1:b9:
e1:5b:69:f4:58:8a:80:93:58:8f:4e:07:4f:65:23:10:9b:c1:
fb:ca:59:29:ef:ea:a9:aa:ad:27:1b:46:95:81:97:d3:91:19:
4c:5a:2f:ef:6e:9d:0e:a5:b6:b1:2e:36:90:0c:50:fd:e9:2f:
ed:4f:24:78:e7:16:f9:11:67:64:e0:2d:c6:f2:e6:05:2f:8c:
66:10:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:00 2026 by rpki-client