Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/6Ugxh09WDltBq-PpfzrzLhbUH80.roa
File: 6Ugxh09WDltBq-PpfzrzLhbUH80.roa (raw, json)
Hash identifier: j8DEcZp0lfE7TJG8b5DJzM36n3hCBp+lVWwIwuWquaY=
Subject key identifier: E9:48:31:87:4F:56:0E:5B:41:AB:E3:E9:7F:3A:F3:2E:16:D4:1F:CD
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019DC918EAF80CA076E045903AA728C03AD9
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/6Ugxh09WDltBq-PpfzrzLhbUH80.roa
Signing time: Sun 26 Apr 2026 09:22:26 +0000
ROA not before: Sun 26 Apr 2026 09:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 5.253.88.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
45.94.173.0/24 maxlen: 24
45.94.175.0/24 maxlen: 24
45.94.180.0/24 maxlen: 24
45.94.181.0/24 maxlen: 24
45.94.182.0/24 maxlen: 24
45.94.183.0/24 maxlen: 24
45.94.189.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
45.94.191.0/24 maxlen: 24
45.94.196.0/24 maxlen: 24
45.94.197.0/24 maxlen: 24
45.94.198.0/24 maxlen: 24
45.94.204.0/24 maxlen: 24
45.94.206.0/24 maxlen: 24
45.94.207.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.146.196.0/24 maxlen: 24
45.146.197.0/24 maxlen: 24
45.146.198.0/24 maxlen: 24
45.146.199.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
86.48.192.0/24 maxlen: 24
86.48.193.0/24 maxlen: 24
86.48.194.0/24 maxlen: 24
86.48.195.0/24 maxlen: 24
86.48.196.0/24 maxlen: 24
86.48.197.0/24 maxlen: 24
86.48.198.0/24 maxlen: 24
86.48.199.0/24 maxlen: 24
86.48.200.0/24 maxlen: 24
86.48.201.0/24 maxlen: 24
86.48.208.0/24 maxlen: 24
86.48.209.0/24 maxlen: 24
86.48.210.0/24 maxlen: 24
86.48.211.0/24 maxlen: 24
86.48.212.0/24 maxlen: 24
86.48.213.0/24 maxlen: 24
86.48.214.0/24 maxlen: 24
86.48.215.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.218.0/24 maxlen: 24
86.48.219.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.224.0/24 maxlen: 24
86.48.225.0/24 maxlen: 24
86.48.226.0/24 maxlen: 24
86.48.227.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
185.134.217.0/24 maxlen: 24
185.134.218.0/24 maxlen: 24
185.159.126.0/24 maxlen: 24
185.201.200.0/24 maxlen: 24
185.213.100.0/24 maxlen: 24
185.213.101.0/24 maxlen: 24
185.213.103.0/24 maxlen: 24
185.213.104.0/24 maxlen: 24
185.213.107.0/24 maxlen: 24
185.217.208.0/24 maxlen: 24
185.217.209.0/24 maxlen: 24
185.219.28.0/24 maxlen: 24
185.219.29.0/24 maxlen: 24
185.219.30.0/24 maxlen: 24
185.219.31.0/24 maxlen: 24
185.221.248.0/24 maxlen: 24
185.221.250.0/24 maxlen: 24
185.221.251.0/24 maxlen: 24
185.228.191.0/24 maxlen: 24
185.234.221.0/24 maxlen: 24
185.234.222.0/24 maxlen: 24
185.234.223.0/24 maxlen: 24
193.160.128.0/24 maxlen: 24
193.160.129.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
195.238.244.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a0c:5900:1000::/36 maxlen: 36
2a0c:5900:2000::/36 maxlen: 36
2a0c:5900:3000::/36 maxlen: 36
2a0c:5900:4000::/36 maxlen: 36
2a0c:5900:5000::/36 maxlen: 36
2a0c:5900:6000::/36 maxlen: 36
2a0c:5900:7000::/36 maxlen: 36
2a0c:5900:8000::/36 maxlen: 36
2a0c:5900:9000::/36 maxlen: 36
2a0c:5900:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:18:ea:f8:0c:a0:76:e0:45:90:3a:a7:28:c0:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Apr 26 09:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e94831874f560e5b41abe3e97f3af32e16d41fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:d3:f3:5f:25:cc:09:0b:aa:92:4a:bf:c8:
6f:67:70:b4:25:34:5d:e2:95:71:84:a5:66:96:da:
8e:02:4c:2d:c3:ce:cc:57:ca:ee:65:13:04:49:22:
70:ee:7a:a6:76:6c:b6:e2:25:f0:9e:9f:0f:3c:db:
9c:93:b0:59:02:5e:7d:27:96:f2:49:3a:06:6e:b4:
cd:32:94:d8:ef:38:3b:71:28:5e:37:2e:4f:f0:3a:
43:de:e6:51:dd:41:db:9a:f6:42:e7:9a:40:01:96:
25:9f:3e:c0:d2:55:01:45:72:1b:23:7b:94:e5:e3:
dd:8b:ff:b2:e7:33:8e:bb:29:80:72:f9:72:80:d6:
67:43:93:ac:07:0b:14:f3:46:7b:3a:4d:ee:48:b8:
4a:74:9f:1d:93:32:43:30:cd:33:6d:ad:d3:c4:b7:
30:75:aa:d5:ac:a5:e2:10:8d:82:4e:31:58:12:2a:
78:83:28:02:09:c1:5c:10:7d:f3:90:32:62:bf:2e:
d7:46:f5:24:76:6d:d5:ba:2e:7e:72:73:09:ee:f7:
c3:a0:a9:9d:a8:fd:08:db:98:c0:f3:60:c4:ad:b8:
06:6b:bd:34:86:3c:22:8a:ad:a6:d9:44:ef:00:d8:
9c:91:d2:2d:b0:ee:e0:e6:e5:0b:39:60:27:ad:24:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:31:87:4F:56:0E:5B:41:AB:E3:E9:7F:3A:F3:2E:16:D4:1F:CD
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/6Ugxh09WDltBq-PpfzrzLhbUH80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.173.0/24
45.94.175.0/24
45.94.180.0/22
45.94.189.0-45.94.191.255
45.94.196.0-45.94.198.255
45.94.204.0/24
45.94.206.0/23
45.95.216.0/22
45.146.196.0/22
63.247.192.0/20
86.48.192.0-86.48.201.255
86.48.208.0-86.48.227.255
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
185.134.217.0-185.134.218.255
185.159.126.0/24
185.201.200.0/24
185.213.100.0/23
185.213.103.0-185.213.104.255
185.213.107.0/24
185.217.208.0/23
185.219.28.0/22
185.221.248.0/24
185.221.250.0/23
185.228.191.0/24
185.234.221.0-185.234.223.255
193.160.128.0/23
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
2a0c:5900:1000::-2a0c:5900:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:52:13:9f:60:5d:42:78:12:b0:e8:82:cc:7b:61:f0:bf:b4:
71:e8:56:2a:40:c8:11:14:c3:b9:19:d8:12:e5:1c:04:ef:b7:
31:21:f5:43:9f:6b:1e:27:f8:4f:23:fb:af:b4:1f:d4:6e:9f:
3f:07:40:de:ba:c9:b1:77:d8:08:e1:6a:5a:2c:02:85:45:41:
aa:ef:85:4e:fc:a5:c7:85:b8:d5:80:99:b8:aa:48:59:42:a6:
b9:8e:19:30:3d:87:bc:a4:f1:0a:cf:21:c5:38:75:92:26:de:
e8:ab:b4:85:0b:da:8c:3d:04:fb:b9:45:8d:4d:ca:dd:c2:6f:
2e:60:d6:ec:df:23:3b:67:a1:d3:13:bb:a6:a8:73:25:ef:58:
e2:3c:a5:bd:02:a5:a2:e8:62:04:e0:de:40:23:53:6a:1e:b3:
77:00:fa:9b:23:de:a2:76:3e:a1:be:6a:f0:85:29:e9:8a:a2:
de:38:1d:a7:bd:c6:44:a3:84:ab:e0:58:08:bd:3a:35:8c:38:
d5:3a:37:eb:c1:02:8a:ac:0b:e9:ca:c8:18:ba:c0:8a:17:d6:
a4:da:c7:8b:46:4f:20:5a:fb:03:6c:35:12:62:48:a4:b2:45:
7c:5d:da:dd:c9:9b:5e:3e:31:29:8c:36:b2:42:1d:48:65:3b:
08:39:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:12 2026 by rpki-client