Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/kmracVV_9DZy9mrzriTRpJZ9tC8.roa
File: kmracVV_9DZy9mrzriTRpJZ9tC8.roa (raw, json)
Hash identifier: siROietWmPF3CwxYrw54NeS24FZrusLdJ8kDBP+eNzA=
Subject key identifier: 92:6A:DA:71:55:7F:F4:36:72:F6:6A:F3:AE:24:D1:A4:96:7D:B4:2F
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01A0C91DC7CD21882EAD78E132682CDA1181
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/kmracVV_9DZy9mrzriTRpJZ9tC8.roa
Signing time: Tue 22 Sep 2026 12:36:07 +0000
ROA not before: Tue 22 Sep 2026 12:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.173.0/24 maxlen: 24
45.94.175.0/24 maxlen: 24
45.94.180.0/24 maxlen: 24
45.94.181.0/24 maxlen: 24
45.94.182.0/24 maxlen: 24
45.94.183.0/24 maxlen: 24
45.94.189.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.94.191.0/24 maxlen: 24
45.94.196.0/24 maxlen: 24
45.94.197.0/24 maxlen: 24
45.94.198.0/24 maxlen: 24
45.94.204.0/24 maxlen: 24
45.94.206.0/24 maxlen: 24
45.94.207.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.146.196.0/24 maxlen: 24
45.146.197.0/24 maxlen: 24
45.146.198.0/24 maxlen: 24
45.146.199.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.202.0/24 maxlen: 24
86.48.203.0/24 maxlen: 24
86.48.204.0/24 maxlen: 24
86.48.205.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
185.134.217.0/24 maxlen: 24
185.134.218.0/24 maxlen: 24
185.159.126.0/24 maxlen: 24
185.201.200.0/24 maxlen: 24
185.213.100.0/24 maxlen: 24
185.213.101.0/24 maxlen: 24
185.213.103.0/24 maxlen: 24
185.213.104.0/24 maxlen: 24
185.213.107.0/24 maxlen: 24
185.217.208.0/24 maxlen: 24
185.217.209.0/24 maxlen: 24
185.219.28.0/24 maxlen: 24
185.219.29.0/24 maxlen: 24
185.219.30.0/24 maxlen: 24
185.219.31.0/24 maxlen: 24
185.221.248.0/24 maxlen: 24
185.221.250.0/24 maxlen: 24
185.221.251.0/24 maxlen: 24
185.228.191.0/24 maxlen: 24
185.234.221.0/24 maxlen: 24
185.234.222.0/24 maxlen: 24
185.234.223.0/24 maxlen: 24
193.160.128.0/24 maxlen: 24
193.160.129.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:1d:c7:cd:21:88:2e:ad:78:e1:32:68:2c:da:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Sep 22 12:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=926ada71557ff43672f66af3ae24d1a4967db42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:55:45:d0:59:e6:86:81:50:4d:24:5e:db:
9f:fb:72:c2:6f:be:fb:12:b6:47:4b:c0:33:c2:43:
08:2e:a8:09:eb:f2:e2:2f:6e:d3:e7:17:bf:50:33:
03:3b:7d:8e:1a:51:8e:5b:f8:50:34:ab:21:cd:f7:
0f:97:a6:96:31:60:e5:8c:36:6e:d5:5b:a5:41:de:
ab:58:ff:15:09:1a:ed:3b:b4:f5:97:0d:a1:ae:c7:
d6:49:9a:30:80:57:1f:b6:1b:cb:8e:59:9a:b3:5d:
01:6a:f7:87:6c:29:9c:cc:b3:eb:f7:46:d6:68:74:
51:86:ea:60:8f:2e:b2:2b:28:d1:94:4f:0c:dc:c3:
8b:cb:80:bf:b6:4b:84:56:c6:6a:14:c9:7c:e8:dd:
a7:f9:b3:32:d8:a1:3c:32:3f:9c:4b:b4:83:4d:9c:
75:52:eb:c7:7a:b4:dd:0d:09:4d:23:58:cd:18:5e:
26:5d:27:ac:81:13:3d:24:fe:71:02:fa:67:a2:59:
d6:a3:bd:67:2c:4b:24:65:23:3d:f6:89:80:45:fd:
5d:30:68:ee:56:3b:60:b9:6d:50:bf:51:cd:74:76:
a2:32:85:35:1a:b9:db:2b:17:f3:62:0e:b4:c6:54:
34:0b:2a:51:95:3d:bc:ad:6e:cb:37:e4:d1:ee:22:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6A:DA:71:55:7F:F4:36:72:F6:6A:F3:AE:24:D1:A4:96:7D:B4:2F
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/kmracVV_9DZy9mrzriTRpJZ9tC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.173.0/24
45.94.175.0/24
45.94.180.0/22
45.94.189.0-45.94.191.255
45.94.196.0-45.94.198.255
45.94.204.0/24
45.94.206.0/23
45.95.216.0/22
45.146.196.0/22
63.247.192.0/20
86.48.192.0-86.48.205.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
185.134.217.0-185.134.218.255
185.159.126.0/24
185.201.200.0/24
185.213.100.0/23
185.213.103.0-185.213.104.255
185.213.107.0/24
185.217.208.0/23
185.219.28.0/22
185.221.248.0/24
185.221.250.0/23
185.228.191.0/24
185.234.221.0-185.234.223.255
193.160.128.0/23
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:08:90:ff:19:af:5a:10:8f:c7:db:0e:aa:db:98:19:42:dc:
88:0e:77:41:76:3d:79:7f:d1:12:7a:80:cf:4f:36:9d:28:f1:
37:c5:e8:b2:8e:c9:2d:5e:ed:bb:5a:69:53:9f:64:3a:20:09:
00:55:2a:ee:aa:ae:70:45:fc:87:08:a7:1c:5e:6a:b4:8d:1d:
c1:00:1a:70:87:ba:be:a1:6e:33:ac:25:e8:03:19:08:32:66:
21:d3:49:26:17:5a:d6:d6:6d:2c:37:66:96:ab:32:53:af:0d:
fd:17:66:2e:88:ce:d1:11:24:93:70:1c:9d:f3:60:ed:17:5b:
3f:59:79:62:5c:fe:4c:b3:37:e2:c6:0e:ad:20:54:f5:bf:71:
57:15:49:07:f8:48:00:4d:fb:59:53:f6:ca:cf:48:0a:1c:df:
e3:49:d2:15:7d:64:5e:36:5b:c9:6c:e4:34:66:44:bb:dc:3a:
68:a3:91:39:18:a1:05:6d:57:ea:9d:7c:16:82:c9:47:8f:cb:
f1:8b:d9:7c:2e:0c:4b:1e:b2:3a:4b:5a:e9:d9:b7:d6:90:68:
a8:6a:b7:3e:3c:cf:48:7f:dc:c3:0b:5f:16:02:97:db:2f:c1:
23:ed:3d:ff:72:7c:20:ea:2f:eb:2d:ff:44:cc:26:fb:ec:9f:
72:5d:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:32:55 2026 by rpki-client