Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FlNvIBDOBdonn3aaFX3mtfoEgdY.roa
File: FlNvIBDOBdonn3aaFX3mtfoEgdY.roa (raw, json)
Hash identifier: NV4aCXfghszJfOz/yii1kdXVIUYUXdQt970ZYxOTSP8=
Subject key identifier: 16:53:6F:20:10:CE:05:DA:27:9F:76:9A:15:7D:E6:B5:FA:04:81:D6
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A02187922C6DBEFF836ACCE3AC11CB5705
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FlNvIBDOBdonn3aaFX3mtfoEgdY.roa
Signing time: Thu 20 Aug 2026 23:35:27 +0000
ROA not before: Thu 20 Aug 2026 23:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 137.31.38.0/24 maxlen: 24
137.31.39.0/24 maxlen: 24
137.31.40.0/24 maxlen: 24
137.31.41.0/24 maxlen: 24
137.31.42.0/24 maxlen: 24
137.31.51.0/24 maxlen: 24
137.31.178.0/23 maxlen: 24
137.31.180.0/24 maxlen: 24
137.31.181.0/24 maxlen: 24
137.31.182.0/23 maxlen: 24
137.31.184.0/24 maxlen: 24
137.31.185.0/24 maxlen: 24
137.31.186.0/24 maxlen: 24
137.31.188.0/23 maxlen: 24
159.254.25.0/24 maxlen: 24
159.254.26.0/24 maxlen: 24
159.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:87:92:2c:6d:be:ff:83:6a:cc:e3:ac:11:cb:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 20 23:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16536f2010ce05da279f769a157de6b5fa0481d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:db:8f:ef:ad:e2:23:98:24:3f:e8:d1:63:
26:c6:83:46:08:bd:1c:f6:79:55:f0:a1:26:15:45:
a5:15:28:ef:0d:a0:28:9c:b3:a3:3b:b8:f6:08:e1:
89:60:2a:71:d1:14:d9:14:c2:40:34:af:b2:8e:42:
85:78:8b:09:d0:80:bc:33:52:c3:44:46:40:57:ea:
2f:07:5f:bd:ee:86:57:a0:33:0d:31:92:cd:b3:ae:
41:99:97:a9:3a:a6:a5:d9:2a:82:1d:07:11:5e:b0:
b6:33:81:30:c6:5d:37:2f:47:2f:97:d2:24:ff:d8:
bf:86:b1:6e:6d:0e:39:b6:f6:b2:98:17:9a:26:fe:
3b:4c:f3:c6:a1:8a:a2:33:66:27:a6:ab:a0:34:38:
72:77:89:5a:97:ac:f5:91:af:7a:87:5d:66:07:71:
4e:7c:c3:97:e5:c7:f6:1a:e6:8e:c9:99:12:db:71:
54:00:b1:ce:04:51:c0:e3:e5:ba:47:96:8a:65:d0:
22:0c:85:62:96:77:04:8d:37:e5:82:f2:87:0a:72:
ae:a1:0b:44:88:2b:bf:54:82:83:0f:f9:07:f2:53:
3f:32:46:b7:98:4e:d2:fb:6c:ec:1c:a6:dd:25:9f:
e9:11:73:ce:31:da:df:4b:be:e7:ff:ec:44:58:3b:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:6F:20:10:CE:05:DA:27:9F:76:9A:15:7D:E6:B5:FA:04:81:D6
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FlNvIBDOBdonn3aaFX3mtfoEgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.38.0-137.31.42.255
137.31.51.0/24
137.31.178.0-137.31.186.255
137.31.188.0/23
159.254.25.0-159.254.26.255
159.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
27:84:03:6e:c4:9f:5b:52:97:1c:d6:93:07:c7:7a:ac:56:18:
80:33:59:53:c0:15:5d:d0:73:79:c6:56:8d:9f:49:91:ea:a5:
de:4b:ce:86:31:63:c4:78:46:96:1e:1f:db:57:22:f5:ad:80:
53:d2:e4:f2:97:23:eb:33:8d:00:0b:32:7b:94:4c:40:57:73:
17:da:f6:fc:da:e6:c6:ee:de:f1:f6:d3:5e:10:ae:d9:2c:fe:
32:8e:f2:eb:d4:74:a6:97:10:95:3a:06:53:86:76:a2:35:92:
cd:0f:55:71:be:0b:69:14:e7:e8:6c:18:84:a1:b1:04:5f:7f:
33:61:cc:b7:ce:9a:dc:48:06:5b:fe:dc:1c:16:80:e6:e8:fa:
92:e0:48:c7:86:3e:16:8d:47:94:7e:09:7c:9a:e2:74:c5:ba:
e0:c6:cc:7b:aa:be:be:cc:53:d1:fc:df:ce:7f:8b:fb:2e:d0:
4f:e6:7c:ee:69:dc:ef:53:6a:71:c5:32:b4:55:7d:e6:96:22:
1b:53:62:80:63:c9:63:ab:f4:cc:4f:67:74:49:fe:93:d2:a8:
55:48:94:c7:db:50:81:41:66:09:99:97:52:6a:07:69:65:3f:
cc:e6:17:bf:6a:29:6c:77:14:20:85:f2:40:c3:3a:c7:7d:fb:
68:67:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:54:32 2026 by rpki-client