Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/HExRGF3ostEUhP_Mismgdxztz34.roa
File: HExRGF3ostEUhP_Mismgdxztz34.roa (raw, json)
Hash identifier: ntwjTSg8daWsicGSAPWuOqXy3ImySUqQFXZDvWnukM8=
Subject key identifier: 1C:4C:51:18:5D:E8:B2:D1:14:84:FF:CC:8A:C9:A0:77:1C:ED:CF:7E
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A09F496DBD3F9601CB1A97F448B8E2C279
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/HExRGF3ostEUhP_Mismgdxztz34.roa
Signing time: Mon 14 Sep 2026 09:39:44 +0000
ROA not before: Mon 14 Sep 2026 09:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
137.31.136.0/23 maxlen: 24
137.31.138.0/23 maxlen: 24
137.31.152.0/23 maxlen: 24
137.31.156.0/24 maxlen: 24
137.31.164.0/24 maxlen: 24
137.31.172.0/24 maxlen: 24
137.31.173.0/24 maxlen: 24
137.31.174.0/24 maxlen: 24
137.31.175.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:49:6d:bd:3f:96:01:cb:1a:97:f4:48:b8:e2:c2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 14 09:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c4c51185de8b2d11484ffcc8ac9a0771cedcf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:ff:09:13:27:f5:ce:2d:f2:0e:b8:5f:84:
9f:7a:7a:36:38:81:c2:90:01:93:8b:7c:ea:0c:8b:
0e:16:7d:a7:79:0a:2d:ac:17:fc:2c:91:16:79:03:
c4:ea:b6:72:b8:f1:0a:cd:c4:ec:36:b8:07:54:35:
5d:21:e0:a5:d3:53:1d:8e:d4:d0:77:f5:ff:63:93:
a7:27:b1:d0:b0:ad:9e:c9:49:51:8d:be:1f:f1:7c:
a9:93:01:53:d5:16:b7:9b:8a:cc:51:aa:cb:3a:2d:
68:17:5b:07:f4:6b:a7:65:66:9b:d4:21:f7:0d:51:
6a:cb:43:e7:f2:70:a3:e7:0b:b7:54:36:76:75:69:
47:fd:9d:cb:e6:4b:4e:e9:8e:04:cf:71:41:12:be:
ba:a5:a6:25:2a:c3:bb:5b:1e:61:ff:8b:e1:a4:80:
05:7b:b9:c0:ca:31:5e:b6:79:c0:57:2e:df:63:74:
6b:1a:16:c5:83:b0:3d:98:85:c6:3b:4e:f2:c1:4f:
46:25:8d:c7:de:61:8a:fc:c0:47:00:a7:fa:a8:0b:
80:d9:f9:b2:b8:40:35:44:ae:6f:ea:4b:6b:f9:e1:
d0:d0:62:89:68:43:63:89:a1:0a:b1:fe:2a:19:dc:
13:fe:d5:8b:2b:4e:94:3b:54:b5:da:32:d2:2e:33:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:51:18:5D:E8:B2:D1:14:84:FF:CC:8A:C9:A0:77:1C:ED:CF:7E
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/HExRGF3ostEUhP_Mismgdxztz34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
137.31.118.0/24
137.31.132.0/24
137.31.136.0/22
137.31.152.0/23
137.31.156.0/24
137.31.164.0/24
137.31.172.0/22
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:5d:90:81:fa:a7:a4:b0:de:1d:c3:84:c5:32:34:a4:9f:96:
de:a2:dc:4a:e3:1e:84:d2:d0:89:c2:73:77:5b:f3:ea:16:0a:
7b:19:0a:cb:32:5e:0d:66:12:c9:e2:d1:34:f7:e1:1d:95:8e:
4f:9e:45:9c:9b:37:7f:03:83:39:12:de:a1:df:e6:86:f7:52:
0d:11:5d:1f:91:d3:fa:4f:e8:f1:3c:ab:30:c7:a4:de:6d:4b:
04:5e:29:4c:e7:b6:56:a2:2c:2d:27:46:41:2c:1d:31:90:52:
2a:85:6b:95:cc:08:5d:81:93:da:22:99:a7:e1:7a:5d:c8:37:
63:b2:de:ad:c2:a8:35:71:35:12:a9:7e:f3:38:4b:0c:f4:b1:
9b:fb:9e:6a:8a:9a:ec:21:19:70:13:c1:bb:cb:00:ae:88:ad:
da:f3:c9:c2:fb:bf:e6:66:37:15:61:95:24:47:56:ae:44:a8:
de:e9:16:21:d6:1c:73:23:45:c9:05:dc:48:99:b6:39:bc:21:
b6:3d:f5:b0:a9:ba:21:e2:84:dc:23:d9:09:5d:dd:6d:a0:11:
d3:e2:05:f7:22:cd:be:dc:7d:4b:36:9d:c1:4c:51:41:5e:b1:
89:60:f9:37:2a:be:46:fe:5e:c0:b3:39:d4:f8:d7:a8:31:85:
aa:9d:31:30
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAaCfSW29P5YByxqX9Ei44sJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwOTE0MDkzOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzRjNTExODVkZThiMmQxMTQ4NGZmY2M4YWM5YTA3NzFjZWRjZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6n/CRMn9c4t8g64X4Sfeno2OIHC
kAGTi3zqDIsOFn2neQotrBf8LJEWeQPE6rZyuPEKzcTsNrgHVDVdIeCl01MdjtTQ
d/X/Y5OnJ7HQsK2eyUlRjb4f8XypkwFT1Ra3m4rMUarLOi1oF1sH9GunZWab1CH3
DVFqy0Pn8nCj5wu3VDZ2dWlH/Z3L5ktO6Y4Ez3FBEr66paYlKsO7Wx5h/4vhpIAF
e7nAyjFetnnAVy7fY3RrGhbFg7A9mIXGO07ywU9GJY3H3mGK/MBHAKf6qAuA2fmy
uEA1RK5v6ktr+eHQ0GKJaENjiaEKsf4qGdwT/tWLK06UO1S12jLSLjNLVQIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFBxMURhd6LLRFIT/zIrJoHcc7c9+MB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvSEV4UkdGM29zdEVVaFBfTWlzbWdkeHp0ejM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCBrQQCAAEwgaYwDAME
AIkfEQMEAokfEAMEAIkfLAMEAIkfMgMEAIkfPwMEAIkfdgMEAIkfhAMEAokfiAME
AYkfmAMEAIkfnAMEAIkfpAMEAokfrDAMAwQGk6HAAwQBk6HIAwQBk6HMMAwDBAST
odADBAGTodwDBACf/mIDBACf/mcDBACf/swwDAMEA6SJOAMEAKSJPAMEAKSJRQME
AKSJbTAMAwQApImfAwQApInAMCwEAgACMCYDBwAqA+7AMhEDBwAqA+7AMhYwEgMH
ACoD7sAyIwMHACoD7sAyJDANBgkqhkiG9w0BAQsFAAOCAQEAXl2QgfqnpLDeHcOE
xTI0pJ+W3qLcSuMehNLQicJzd1vz6hYKexkKyzJeDWYSyeLRNPfhHZWOT55FnJs3
fwODORLeod/mhvdSDRFdH5HT+k/o8TyrMMek3m1LBF4pTOe2VqIsLSdGQSwdMZBS
KoVrlcwIXYGT2iKZp+F6Xcg3Y7LercKoNXE1Eql+8zhLDPSxm/ueaoqa7CEZcBPB
u8sAroit2vPJwvu/5mY3FWGVJEdWrkSo3ukWIdYccyNFyQXcSJm2Obwhtj31sKm6
IeKE3CPZCV3dbaAR0+IF9yLNvtx9SzadwUxRQV6xiWD5Nyq+Rv5ewLM51PjXqDGF
qp0xMA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 14:06:29 2026 by rpki-client