Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gr1u3X_194f0U8tEWFuBAY86TRs.roa
File: gr1u3X_194f0U8tEWFuBAY86TRs.roa (raw, json)
Hash identifier: sZpB3WdrbJMpu0/M52LBLcQGhPdA083HHiTnC36WfEI=
Subject key identifier: 82:BD:6E:DD:7F:F5:F7:87:F4:53:CB:44:58:5B:81:01:8F:3A:4D:1B
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019D99D536D8652C107C6BE15D22C7C8D214
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gr1u3X_194f0U8tEWFuBAY86TRs.roa
Signing time: Fri 17 Apr 2026 05:06:20 +0000
ROA not before: Fri 17 Apr 2026 05:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.173.0/24 maxlen: 24
45.94.175.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d5:36:d8:65:2c:10:7c:6b:e1:5d:22:c7:c8:d2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Apr 17 05:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82bd6edd7ff5f787f453cb44585b81018f3a4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:dd:6b:a5:8f:05:1e:1e:ea:f9:6d:95:f8:
5b:63:1a:b8:63:b7:2f:aa:e9:9c:69:9b:78:40:40:
75:32:17:04:66:26:61:ba:6a:51:07:31:c0:45:3a:
bb:63:6f:cd:72:f3:58:9a:43:1e:c1:b2:9e:e1:b4:
68:8a:26:fd:82:3b:f4:5c:5f:99:72:e7:01:ae:77:
07:ab:8c:75:63:e1:4a:87:cc:36:25:3d:95:04:e3:
e7:5d:58:15:cd:d8:74:f8:8d:03:58:82:b5:08:a3:
0c:12:3f:c5:40:bb:1f:4f:26:f3:57:92:89:61:9c:
ed:82:63:19:9d:8e:fc:a8:c1:08:b1:63:57:47:67:
a4:15:d0:de:c1:c0:5d:68:ee:6e:d6:b1:78:d3:80:
42:a4:66:fb:f4:f3:4d:fe:97:c9:03:be:2c:e8:c1:
00:81:3e:2b:40:e1:30:b1:2f:c6:db:d9:3a:f5:36:
57:ca:1d:63:92:28:6c:46:26:eb:23:90:c2:55:75:
81:b3:26:df:9b:0d:54:21:f4:80:f0:c2:c4:6b:24:
3c:aa:8f:31:d9:3e:52:41:fc:56:47:43:f0:85:54:
63:ef:ff:1b:63:f0:1a:38:87:c9:73:54:ae:1c:e6:
b4:04:78:67:14:d6:5b:dd:b0:19:32:e0:97:cf:87:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:6E:DD:7F:F5:F7:87:F4:53:CB:44:58:5B:81:01:8F:3A:4D:1B
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/gr1u3X_194f0U8tEWFuBAY86TRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.173.0/24
45.94.175.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.192.0-86.48.201.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:cc:11:a6:17:fb:90:0e:4e:33:74:17:78:d0:37:8e:fd:b8:
13:ee:45:d3:0d:44:09:37:f1:4b:f2:66:b3:66:0c:26:bb:6c:
cb:d5:b9:56:50:86:25:ef:1e:f6:bc:5f:b2:4f:51:4a:92:13:
bd:3e:3d:76:ee:b4:7b:6a:d3:e6:a7:d5:f3:a9:d0:f3:4b:43:
00:2d:3a:ae:20:b9:bc:db:97:0b:34:10:0c:e3:c7:2c:d9:6a:
16:76:e2:82:47:23:eb:e4:23:7a:e6:e7:04:e0:74:ba:5b:c3:
38:58:28:a6:69:09:fb:76:2e:c0:fa:47:e4:58:14:73:25:e8:
70:fb:ac:1b:77:ec:d7:0b:fd:38:d8:02:f6:99:f9:b6:a7:34:
6a:1e:8d:1f:b6:90:cf:4f:50:b8:65:32:8b:5b:ad:63:0a:0c:
b3:cd:39:b4:88:be:ba:26:c9:1b:6f:51:58:ec:c6:6c:fe:e9:
6c:d4:17:36:df:92:34:51:26:8a:26:91:64:61:24:b6:22:23:
55:cf:44:cf:04:30:a8:2d:fc:c2:60:55:f8:5f:4b:d2:f7:8c:
8b:d5:3c:b1:80:eb:f2:d7:e5:60:05:45:6a:7e:6b:a5:b0:db:
9b:81:b5:f4:51:08:6f:37:4a:83:97:8c:cf:ee:a2:ad:f8:33:
1e:8f:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:13 2026 by rpki-client