Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/GQvA85yFUDcjjef1VnyNvvzPcxo.roa
File: GQvA85yFUDcjjef1VnyNvvzPcxo.roa (raw, json)
Hash identifier: 9QUGETTuRTyPsf6ud9LKDqNrZm0h6j7Ww3iNgGQDOxI=
Subject key identifier: 19:0B:C0:F3:9C:85:50:37:23:8D:E7:F5:56:7C:8D:BE:FC:CF:73:1A
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A1316C88A00FBB049888B1B2F3FB588C20
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/GQvA85yFUDcjjef1VnyNvvzPcxo.roa
Signing time: Mon 12 Oct 2026 18:42:38 +0000
ROA not before: Mon 12 Oct 2026 18:42:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.102.0/23 maxlen: 24
137.31.104.0/23 maxlen: 24
137.31.106.0/23 maxlen: 24
137.31.108.0/23 maxlen: 24
137.31.110.0/23 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.119.0/24 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
137.31.141.0/24 maxlen: 24
137.31.157.0/24 maxlen: 24
137.31.158.0/24 maxlen: 24
137.31.160.0/23 maxlen: 24
137.31.162.0/23 maxlen: 24
137.31.167.0/24 maxlen: 24
137.31.168.0/24 maxlen: 24
137.31.176.0/23 maxlen: 24
137.31.187.0/24 maxlen: 24
137.31.190.0/24 maxlen: 24
137.31.191.0/24 maxlen: 24
137.31.208.0/24 maxlen: 24
137.31.217.0/24 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:6c:88:a0:0f:bb:04:98:88:b1:b2:f3:fb:58:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 12 18:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=190bc0f39c855037238de7f5567c8dbefccf731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:bf:d7:91:76:26:d7:b8:b8:c4:07:f9:c4:
8b:f0:4b:b2:a6:6d:02:20:a5:ee:ca:79:0b:ca:b0:
41:1e:3a:3b:a0:00:49:3c:61:59:52:ed:0d:c9:b5:
f8:03:ab:97:c5:30:95:3f:03:44:12:97:98:38:87:
49:0f:60:55:b1:19:64:ad:3a:19:22:95:39:98:a4:
46:89:c6:b1:da:4d:59:50:fe:8e:45:02:5c:59:c5:
95:3b:68:99:7f:35:31:ee:bf:6b:67:be:9d:1f:64:
26:94:5b:a2:38:c4:84:1a:aa:75:17:f3:50:a0:5e:
4b:f3:a3:9e:31:06:5d:5b:28:d5:e0:72:bf:80:d8:
d3:4e:52:f1:9c:b3:eb:5a:ac:76:ad:e8:89:1f:59:
b2:0e:87:d3:6b:14:73:5a:57:27:5b:7a:ea:c6:10:
3b:f2:12:cb:79:ef:ec:70:e4:dd:a4:61:31:9b:a0:
12:9a:a6:01:66:5a:5b:12:1f:8c:2f:b8:97:fb:f8:
af:40:de:c1:98:51:37:29:55:7c:70:fb:d0:7e:a0:
6b:29:d1:21:12:93:b6:5c:35:66:69:5d:a5:15:c7:
22:9d:8d:ae:c4:59:db:d8:e1:81:1c:61:3c:fd:a0:
66:35:9f:ae:07:cc:2f:90:f3:e3:67:97:26:81:4d:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:C0:F3:9C:85:50:37:23:8D:E7:F5:56:7C:8D:BE:FC:CF:73:1A
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/GQvA85yFUDcjjef1VnyNvvzPcxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0-137.31.111.255
137.31.114.0/23
137.31.119.0-137.31.129.255
137.31.141.0/24
137.31.157.0-137.31.158.255
137.31.160.0/22
137.31.167.0-137.31.168.255
137.31.176.0/23
137.31.187.0/24
137.31.190.0/23
137.31.208.0/24
137.31.217.0/24
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:85:0c:d7:28:e4:12:24:d8:96:fe:39:b5:c0:7e:c6:a3:22:
b5:46:19:50:54:42:36:42:33:07:44:0b:59:06:f4:0f:97:bc:
01:e5:5f:20:ed:a6:51:cf:ca:43:22:de:41:39:e3:a3:42:a6:
01:2b:30:86:f4:5f:3f:c9:55:21:86:40:f2:c9:92:5f:f5:46:
c0:c0:d6:35:97:fb:5f:7b:35:12:09:28:e7:a2:e5:3a:e2:12:
36:87:4b:45:e7:e4:cc:b9:0b:84:54:20:34:07:0b:30:d4:6f:
06:48:5f:73:82:8e:cf:57:31:40:30:6b:be:6e:d7:9e:ca:3c:
13:85:b9:91:52:83:f4:84:a3:9c:c2:81:e6:a2:da:fc:3f:69:
a7:8c:5f:bb:11:97:d8:cf:b4:56:de:68:f4:42:72:50:62:88:
f0:26:73:ec:3f:b6:47:d5:bf:8b:52:f0:a6:18:80:a7:c2:d5:
f9:75:3e:12:30:c2:fd:d6:08:91:eb:52:41:0f:00:23:9a:6d:
07:46:a2:f6:72:55:42:4d:90:3f:ee:c0:9f:e4:22:26:f6:8b:
dc:79:41:da:92:01:73:5f:56:e4:c3:42:ec:9b:a7:d7:84:02:
33:e0:01:b7:4c:02:bd:54:cd:57:2c:2b:be:e3:b8:bc:d5:49:
fc:fc:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:23:49 2026 by rpki-client