Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/E6q6eSrLi268w1uPKMft6UdzObk.roa
File: E6q6eSrLi268w1uPKMft6UdzObk.roa (raw, json)
Hash identifier: S1oys4ak/3DgjByILcVQEYtOAEhLnSHTS9hR+3ZaKKA=
Subject key identifier: 13:AA:BA:79:2A:CB:8B:6E:BC:C3:5B:8F:28:C7:ED:E9:47:73:39:B9
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019EDC79C47062591E7F48F79B45B93045CB
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/E6q6eSrLi268w1uPKMft6UdzObk.roa
Signing time: Thu 18 Jun 2026 20:43:48 +0000
ROA not before: Thu 18 Jun 2026 20:43:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:79:c4:70:62:59:1e:7f:48:f7:9b:45:b9:30:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jun 18 20:43:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13aaba792acb8b6ebcc35b8f28c7ede9477339b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:cb:d4:20:dc:4d:ae:d4:2a:cf:17:0d:22:
e8:35:9d:67:61:95:d0:86:a7:d3:3e:34:74:66:b9:
43:7b:3d:09:c7:cb:14:e3:30:8c:59:e9:4f:f4:14:
52:c7:1e:a0:f6:62:0d:2f:44:f3:87:e6:b8:fa:73:
15:df:de:e3:ba:1a:16:68:12:9c:34:cd:c6:09:20:
b8:46:7c:ef:56:21:38:9f:a6:51:5c:f5:fc:08:b8:
76:36:f1:e1:6e:f5:49:fb:d5:09:15:74:18:aa:59:
dc:14:92:b5:dc:a1:41:e1:60:c2:0b:1f:76:29:f3:
e7:9b:11:0e:37:a8:19:e1:f2:57:fc:f6:47:17:f2:
c9:18:73:ae:dd:6d:48:d8:d9:97:12:13:93:13:0c:
bf:17:b9:3e:3c:8d:06:40:3b:2b:c5:58:98:c9:f9:
d0:9c:90:fa:9f:86:5e:cd:cd:e0:79:f8:52:31:08:
c7:b4:3a:af:02:cd:da:8e:10:16:7d:ef:8c:8d:61:
15:94:a5:7b:87:e5:cd:12:8c:99:86:e0:9e:23:94:
fc:79:43:46:ae:1b:13:d6:ee:a2:b9:71:4e:d0:9c:
1a:1e:d2:bd:2c:05:57:e4:5f:d4:d0:4e:27:fd:8c:
09:d6:54:b5:56:9f:ab:99:9c:a4:0a:16:8c:fc:87:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:BA:79:2A:CB:8B:6E:BC:C3:5B:8F:28:C7:ED:E9:47:73:39:B9
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/E6q6eSrLi268w1uPKMft6UdzObk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
137.31.118.0/24
137.31.132.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:02:59:c0:2d:7a:c7:bd:f7:33:ed:1f:e3:b5:b6:f8:13:67:
e0:60:ce:c0:ad:a4:bb:64:d2:2d:64:80:88:e2:ac:17:dc:93:
a9:99:dd:c8:85:35:27:75:89:55:ca:8c:b2:00:6e:9b:0e:e1:
2b:e2:4e:da:7b:c0:72:8d:6a:f0:25:2b:c4:8f:db:3a:a3:92:
f6:35:c6:7d:d2:a3:94:52:f0:44:f3:12:40:a5:3d:31:c4:e3:
7c:90:f7:03:e1:e8:25:3b:c3:77:00:05:20:e7:06:bc:22:c3:
da:86:2c:11:7f:af:35:28:48:be:a8:1e:71:94:f6:8b:2b:8c:
bb:06:11:3e:81:93:94:d7:2e:b5:9b:da:79:3a:1a:1c:3a:d0:
d5:34:d0:f8:09:6f:73:7d:47:37:c9:2b:1c:34:35:e8:74:35:
79:78:66:41:5b:7e:ba:da:45:0b:3a:60:51:f9:b5:2c:cc:96:
f2:0f:15:4b:3d:26:8b:6b:88:d1:34:a0:d9:1a:57:6f:b1:fb:
65:8f:64:54:22:bc:33:26:d2:49:1d:8d:d3:a6:84:eb:b2:c3:
24:ce:9a:e5:08:8d:fb:da:a0:a6:61:b2:6f:1c:25:0a:5e:82:
2d:1f:18:34:9e:fd:41:17:2c:8f:b4:0b:fe:28:60:09:c7:a4:
64:fc:4c:58
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZ7cecRwYlkef0j3m0W5MEXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNjE4MjA0MzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FhYmE3OTJhY2I4YjZlYmNjMzViOGYyOGM3ZWRlOTQ3NzMzOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmrL1CDcTa7UKs8XDSLoNZ1nYZXQ
hqfTPjR0ZrlDez0Jx8sU4zCMWelP9BRSxx6g9mINL0Tzh+a4+nMV397juhoWaBKc
NM3GCSC4RnzvViE4n6ZRXPX8CLh2NvHhbvVJ+9UJFXQYqlncFJK13KFB4WDCCx92
KfPnmxEON6gZ4fJX/PZHF/LJGHOu3W1I2NmXEhOTEwy/F7k+PI0GQDsrxViYyfnQ
nJD6n4Zezc3gefhSMQjHtDqvAs3ajhAWfe+MjWEVlKV7h+XNEoyZhuCeI5T8eUNG
rhsT1u6iuXFO0JwaHtK9LAVX5F/U0E4n/YwJ1lS1Vp+rmZykChaM/If1jwIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFBOqunkqy4tuvMNbjyjH7elHczm5MB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvRTZxNmVTckxpMjY4dzF1UEtNZnQ2VWR6T2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBjwQCAAEwgYgwDAME
AIkfEQMEAokfEAMEAIkfLAMEAIkfMgMEAIkfPwMEAIkfdgMEAIkfhDAMAwQGk6HA
AwQBk6HIAwQBk6HMMAwDBASTodADBAGTodwDBACf/mIDBACf/mcDBACf/swwDAME
A6SJOAMEAKSJPAMEAKSJRQMEAKSJbTAMAwQApImfAwQApInAMCwEAgACMCYDBwAq
A+7AMhEDBwAqA+7AMhYwEgMHACoD7sAyIwMHACoD7sAyJDANBgkqhkiG9w0BAQsF
AAOCAQEAaAJZwC16x733M+0f47W2+BNn4GDOwK2ku2TSLWSAiOKsF9yTqZndyIU1
J3WJVcqMsgBumw7hK+JO2nvAco1q8CUrxI/bOqOS9jXGfdKjlFLwRPMSQKU9McTj
fJD3A+HoJTvDdwAFIOcGvCLD2oYsEX+vNShIvqgecZT2iyuMuwYRPoGTlNcutZva
eToaHDrQ1TTQ+Alvc31HN8krHDQ16HQ1eXhmQVt+utpFCzpgUfm1LMyW8g8VSz0m
i2uI0TSg2RpXb7H7ZY9kVCK8MybSSR2N06aE67LDJM6a5QiN+9qgpmGybxwlCl6C
LR8YNJ79QRcsj7QL/ihgCcekZPxMWA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:35:54 2026 by rpki-client