Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa
File: X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa (raw, json)
Hash identifier: NNuFryogVqVrL2X7dVkBYvwMuGxY6cTW/9r6oXN/lRU=
Subject key identifier: 5F:63:93:59:AD:04:92:13:80:6F:F5:49:EF:15:4F:5B:52:1B:A7:0B
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019C4D3EE2D8ACDA7CF7E0FBB49F5C20DF33
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa
Signing time: Wed 11 Feb 2026 15:08:12 +0000
ROA not before: Wed 11 Feb 2026 15:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:3e:e2:d8:ac:da:7c:f7:e0:fb:b4:9f:5c:20:df:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Feb 11 15:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f639359ad049213806ff549ef154f5b521ba70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:4e:86:8f:9d:ff:12:c4:d3:5d:73:7d:30:
32:42:4a:2f:97:7f:41:66:51:47:c9:e7:f0:17:03:
d0:72:1d:45:8a:d3:e2:f7:9a:d7:b5:de:9d:f4:64:
af:e2:90:b7:d0:8c:98:b3:b1:b7:8e:5d:14:dc:03:
a3:dd:8c:f0:4d:77:0c:1b:96:4a:81:5d:3f:24:0e:
9b:2b:04:68:ab:5d:75:16:1d:76:3f:b2:ff:df:11:
5b:38:c1:6a:a4:27:45:5c:42:40:df:e4:13:e7:35:
b8:58:7d:04:25:90:bc:c0:ea:6f:23:1c:03:2e:ae:
ff:5e:b3:d7:c0:f2:89:91:a7:91:ba:09:3c:66:41:
a4:36:4c:cb:8b:91:d7:d1:54:ca:99:f9:fd:f9:d6:
9d:b6:b0:12:df:4d:64:8f:bf:72:0b:4d:89:95:1d:
5f:72:58:84:b1:d7:83:57:09:4a:5a:1a:26:3d:99:
17:54:57:08:be:a8:a8:84:15:b8:50:36:6f:98:12:
5b:60:64:62:a7:d2:0c:1b:21:a2:7e:9e:8f:b9:6a:
fb:97:df:51:9e:07:75:60:c9:05:ca:6e:3d:17:fc:
7d:f5:90:59:64:14:d5:7e:40:48:55:54:9e:96:e4:
9d:ff:99:60:d2:b7:a0:a7:8a:c6:a4:49:97:66:2d:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:93:59:AD:04:92:13:80:6F:F5:49:EF:15:4F:5B:52:1B:A7:0B
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/X2OTWa0EkhOAb_VJ7xVPW1Ibpws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0-86.48.201.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
32:61:41:60:7a:8c:34:a5:2f:29:74:37:e2:9f:85:bc:da:d2:
cc:3d:23:43:8d:5c:d4:51:ac:f3:11:5b:89:fc:8d:9c:1f:07:
98:77:2e:7a:66:6f:93:1d:4d:a0:e7:8c:9a:1f:59:c5:32:a9:
0a:fb:ad:fd:2c:65:4e:be:b4:4f:06:96:bb:70:0f:3f:64:79:
4d:2f:55:48:97:74:c3:38:ce:f4:c1:bb:0f:64:30:a9:3c:b2:
e0:e9:97:e5:2b:53:48:6e:5a:97:a4:9f:9d:e7:e3:59:f8:a4:
20:9f:7a:be:9e:a4:39:d7:9d:5e:09:61:51:43:81:ac:38:fe:
82:a3:39:d4:63:0c:1d:50:80:b8:72:03:0d:47:41:ce:ba:1b:
b4:24:57:53:63:3c:e2:29:42:f2:be:b9:79:db:cb:24:c5:e8:
e3:23:77:1f:de:91:f6:c7:44:0c:aa:97:08:fc:25:12:72:25:
e8:c7:80:17:a0:92:d4:e2:4f:11:22:42:52:d7:58:ed:a8:37:
1a:4f:4a:82:c7:63:02:13:b2:2e:ec:3f:cf:50:aa:2b:37:f1:
c0:e0:26:8e:7a:b8:8d:a3:66:45:c5:30:8c:06:86:30:0d:c1:
b1:42:b9:12:8f:ec:8f:2f:4c:85:f0:d9:14:8d:3d:69:ae:ef:
24:76:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:51 2026 by rpki-client