Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9ZB8rD_C0nC5gYf8WIwjQefUzzA.roa
File: 9ZB8rD_C0nC5gYf8WIwjQefUzzA.roa (raw, json)
Hash identifier: RjSr8mhFsLjbPPuROmbuVmaNJdr5gauo7qJqOvNMc1M=
Subject key identifier: F5:90:7C:AC:3F:C2:D2:70:B9:81:87:FC:58:8C:23:41:E7:D4:CF:30
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019E41FE7922F4A61BDCB9BCE0CEB95A2D3F
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9ZB8rD_C0nC5gYf8WIwjQefUzzA.roa
Signing time: Tue 19 May 2026 20:47:36 +0000
ROA not before: Tue 19 May 2026 20:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:fe:79:22:f4:a6:1b:dc:b9:bc:e0:ce:b9:5a:2d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: May 19 20:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5907cac3fc2d270b98187fc588c2341e7d4cf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:9c:d2:76:0f:61:8f:13:81:f7:db:d6:c5:
11:91:21:ee:04:9f:36:4f:e7:2f:d6:da:9a:2c:85:
05:a7:42:9e:4d:c5:74:b0:80:b5:2b:bd:d1:8f:9c:
98:fa:fa:e2:b6:68:50:f5:13:06:98:c2:c0:d1:a7:
d5:ea:0b:f8:bd:ff:11:df:b0:e4:b1:94:ef:d8:67:
ad:e5:13:ac:d6:c8:a5:0b:02:84:d4:78:8f:8a:a9:
22:72:a3:a4:ed:0d:92:3f:4d:a4:4a:0c:27:08:3b:
38:8c:49:5b:9b:0c:3b:d0:a3:b0:cf:7d:d6:f0:15:
a8:91:35:93:f5:f4:ae:aa:43:b9:70:b1:3d:8d:62:
51:a3:fd:86:d0:63:bb:d2:17:89:f6:e3:78:11:40:
2c:d1:c5:af:47:44:7a:44:1f:c8:97:a5:4a:3a:c3:
fa:30:9c:be:02:77:cb:ff:bd:d4:ba:e7:52:ae:b4:
4e:6e:55:c2:e8:5b:15:49:c0:a3:ab:62:b1:07:96:
5e:0e:40:16:02:1f:df:91:23:c0:fa:c6:2b:ea:7c:
ed:ff:7c:8d:43:cf:fa:ba:99:15:49:b4:7f:18:6c:
9c:4f:a1:9a:78:66:e8:b4:99:9b:56:56:b5:21:b8:
52:c3:8c:99:9e:57:85:5e:7f:e1:6c:86:a0:78:7b:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:7C:AC:3F:C2:D2:70:B9:81:87:FC:58:8C:23:41:E7:D4:CF:30
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9ZB8rD_C0nC5gYf8WIwjQefUzzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:23:14:44:d1:7a:d9:5f:c2:02:4a:61:ac:9c:48:73:de:3d:
ce:02:9d:6c:2e:dd:74:05:59:0a:97:a7:28:bf:23:22:dd:76:
01:52:06:9a:ca:d5:27:cc:d8:dd:ad:74:be:05:b1:fb:d3:3f:
d3:11:5d:0c:9f:33:46:97:12:2b:99:28:e6:ec:65:df:b8:8e:
e7:9e:fa:55:91:e7:14:a5:7f:51:11:9d:16:56:82:71:14:f9:
98:9d:25:13:f0:bc:7c:67:2b:72:6c:c1:7e:38:03:8b:c5:1e:
31:8e:98:af:c1:52:29:48:fc:40:ac:0f:f0:16:3e:b8:06:88:
b1:3a:d8:7b:c6:4a:ce:b8:5f:5f:ac:ba:6e:1e:26:b6:26:39:
7b:62:ef:82:9d:a4:aa:a9:78:a8:8a:bc:16:33:02:75:89:d3:
b8:15:d9:dd:55:3e:36:04:ef:e7:4b:8b:4a:3e:33:a1:7f:93:
e7:cd:23:84:9a:a0:d4:6e:67:32:16:42:4b:2a:79:4c:fd:d7:
02:72:f7:55:4b:b1:62:ce:9b:0b:16:06:0e:d0:ad:c9:69:5b:
39:61:b4:3c:54:ab:13:bf:bf:24:b2:3f:c0:77:ea:8f:ed:fb:
8a:c4:ef:e1:2c:15:ae:ef:6e:bf:1a:43:6a:47:9a:f0:cf:38:
2b:81:24:37
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZ5B/nki9KYb3Lm84M65Wi0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNTE5MjA0NzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTkwN2NhYzNmYzJkMjcwYjk4MTg3ZmM1ODhjMjM0MWU3ZDRjZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ac0nYPYY8Tgffb1sURkSHuBJ82
T+cv1tqaLIUFp0KeTcV0sIC1K73Rj5yY+vritmhQ9RMGmMLA0afV6gv4vf8R37Dk
sZTv2Get5ROs1silCwKE1HiPiqkicqOk7Q2SP02kSgwnCDs4jElbmww70KOwz33W
8BWokTWT9fSuqkO5cLE9jWJRo/2G0GO70heJ9uN4EUAs0cWvR0R6RB/Il6VKOsP6
MJy+AnfL/73UuudSrrROblXC6FsVScCjq2KxB5ZeDkAWAh/fkSPA+sYr6nzt/3yN
Q8/6upkVSbR/GGycT6GaeGbotJmbVla1IbhSw4yZnleFXn/hbIageHui2QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFPWQfKw/wtJwuYGH/FiMI0Hn1M8wMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvOVpCOHJEX0MwbkM1Z1lmOFdJd2pRZWZVenpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBggQCAAEwfDAMAwQA
iR8RAwQCiR8QAwQAiR8sAwQAiR8yAwQAiR8/MAwDBAaTocADBAGTocgDBAGTocww
DAMEBJOh0AMEAZOh3AMEAJ/+YgMEAJ/+ZwMEAJ/+zDAMAwQDpIk4AwQApIk8AwQA
pIlFAwQApIltMAwDBACkiZ8DBACkicAwLAQCAAIwJgMHACoD7sAyEQMHACoD7sAy
FjASAwcAKgPuwDIjAwcAKgPuwDIkMA0GCSqGSIb3DQEBCwUAA4IBAQCKIxRE0XrZ
X8ICSmGsnEhz3j3OAp1sLt10BVkKl6covyMi3XYBUgaaytUnzNjdrXS+BbH70z/T
EV0MnzNGlxIrmSjm7GXfuI7nnvpVkecUpX9REZ0WVoJxFPmYnSUT8Lx8ZytybMF+
OAOLxR4xjpivwVIpSPxArA/wFj64BoixOth7xkrOuF9frLpuHia2Jjl7Yu+CnaSq
qXioirwWMwJ1idO4FdndVT42BO/nS4tKPjOhf5PnzSOEmqDUbmcyFkJLKnlM/dcC
cvdVS7FizpsLFgYO0K3JaVs5YbQ8VKsTv78ksj/Ad+qP7fuKxO/hLBWu726/GkNq
R5rwzzgrgSQ3
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:11 2026 by rpki-client