Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/NHs9ZRK5u4Vz_806JBenlDjXjBU.roa
File: NHs9ZRK5u4Vz_806JBenlDjXjBU.roa (raw, json)
Hash identifier: rjoieK7zDrudnJz7Uu7JO2e4y9SYMLDJUKtNat3BX60=
Subject key identifier: 34:7B:3D:65:12:B9:BB:85:73:FF:CD:3A:24:17:A7:94:38:D7:8C:15
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019D9C0B03A00FF23F659993B70EE494AB36
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/NHs9ZRK5u4Vz_806JBenlDjXjBU.roa
Signing time: Fri 17 Apr 2026 15:24:20 +0000
ROA not before: Fri 17 Apr 2026 15:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:0b:03:a0:0f:f2:3f:65:99:93:b7:0e:e4:94:ab:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Apr 17 15:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347b3d6512b9bb8573ffcd3a2417a79438d78c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:c5:e0:b2:28:d5:3f:cb:11:1f:d0:b8:40:
59:fa:c7:5d:d3:e0:f5:b7:16:85:02:67:1b:8a:19:
b5:c3:f9:86:6f:e3:85:a0:12:68:d4:b1:2f:da:44:
1c:49:bd:cc:09:0b:36:5f:44:45:00:ab:77:8d:82:
52:57:37:ea:99:42:ed:af:8f:8d:a1:82:3f:af:c3:
41:03:28:94:a9:bc:f0:cb:b4:16:53:6a:df:d1:70:
dc:0f:b4:54:a4:a5:14:87:1b:bf:50:b6:93:eb:4a:
f9:bb:04:20:ec:42:b6:00:96:cc:ec:a0:57:7d:86:
78:d0:e3:48:ae:41:48:86:bf:f2:e1:ea:a7:62:f5:
e4:a1:74:d5:b2:fb:0c:cd:71:1b:16:dd:9e:af:d3:
4c:bf:2f:8a:f4:d0:fb:4d:6e:c4:35:2d:2d:57:56:
32:77:84:03:49:70:c8:f7:7b:89:6b:7c:c5:16:09:
62:45:76:98:46:e3:38:e0:c7:73:5a:41:50:75:cf:
8f:ef:62:aa:3a:0b:af:5a:0e:17:20:99:a7:78:2f:
9b:49:a9:60:6a:5a:6f:3d:f4:41:9b:e7:6a:b2:03:
69:45:39:aa:62:a2:26:69:a0:90:53:7d:a3:a5:8a:
63:27:4f:07:76:d1:f4:71:87:29:5b:f9:18:7b:9d:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:3D:65:12:B9:BB:85:73:FF:CD:3A:24:17:A7:94:38:D7:8C:15
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/NHs9ZRK5u4Vz_806JBenlDjXjBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:e7:0b:57:25:af:50:de:36:f6:5b:9c:c2:b4:93:7b:f0:7f:
56:6d:30:6d:65:30:72:35:db:e2:f1:59:29:50:9f:4e:47:fc:
e9:e9:19:b0:88:68:25:7c:0e:8a:42:1c:6b:ea:3f:cb:5b:d1:
71:af:2d:ca:b0:77:06:35:3f:f6:69:c3:19:4b:6b:43:c0:bb:
4e:da:c3:70:bd:ac:33:d9:b6:dd:c1:92:9a:25:25:b2:f9:c0:
57:69:4f:b5:36:3d:7c:1a:5e:d2:70:a3:44:23:e3:78:44:44:
bf:ec:9c:7e:20:5c:d2:7d:21:73:f8:a2:e8:11:16:7e:75:36:
c9:f2:9c:2e:7d:81:b0:c0:60:51:02:25:29:71:56:18:83:a5:
a7:c8:a8:d0:aa:d5:92:7e:f8:0c:82:49:11:47:87:3c:d8:28:
e1:37:e5:da:a8:6c:2b:bd:7d:3a:c2:63:1a:eb:6e:dd:4f:a8:
0e:6a:32:b7:51:d9:d0:b8:8e:5f:d9:08:45:cb:fe:f8:60:7b:
52:bd:b1:59:7b:ef:0f:a6:e4:66:30:6c:73:65:49:2c:18:e9:
e7:3b:61:5d:01:6e:ec:14:9b:60:4f:e9:38:c2:ef:fa:86:a5:
59:87:f1:43:ba:7b:17:0f:d3:35:82:d0:e2:7f:e4:64:fb:d4:
ae:20:96:a2
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZ2cCwOgD/I/ZZmTtw7klKs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNDE3MTUyNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDdiM2Q2NTEyYjliYjg1NzNmZmNkM2EyNDE3YTc5NDM4ZDc4YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOrF4LIo1T/LER/QuEBZ+sdd0+D1
txaFAmcbihm1w/mGb+OFoBJo1LEv2kQcSb3MCQs2X0RFAKt3jYJSVzfqmULtr4+N
oYI/r8NBAyiUqbzwy7QWU2rf0XDcD7RUpKUUhxu/ULaT60r5uwQg7EK2AJbM7KBX
fYZ40ONIrkFIhr/y4eqnYvXkoXTVsvsMzXEbFt2er9NMvy+K9ND7TW7ENS0tV1Yy
d4QDSXDI93uJa3zFFgliRXaYRuM44MdzWkFQdc+P72KqOguvWg4XIJmneC+bSalg
alpvPfRBm+dqsgNpRTmqYqImaaCQU32jpYpjJ08HdtH0cYcpW/kYe50sQQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFDR7PWUSubuFc//NOiQXp5Q414wVMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvTkhzOVpSSzV1NFZ6XzgwNkpCZW5sRGpYakJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDB8BAIAATB2MAwDBACJ
HxEDBAKJHxADBACJHywDBACJHzIwDAMEBpOhwAMEAZOhyAMEAZOhzDAMAwQEk6HQ
AwQBk6HcAwQAn/5iAwQAn/5nAwQAn/7MMAwDBAOkiTgDBACkiTwDBACkiUUDBACk
iW0wDAMEAKSJnwMEAKSJwDAsBAIAAjAmAwcAKgPuwDIRAwcAKgPuwDIWMBIDBwAq
A+7AMiMDBwAqA+7AMiQwDQYJKoZIhvcNAQELBQADggEBABznC1clr1DeNvZbnMK0
k3vwf1ZtMG1lMHI12+LxWSlQn05H/OnpGbCIaCV8DopCHGvqP8tb0XGvLcqwdwY1
P/ZpwxlLa0PAu07aw3C9rDPZtt3BkpolJbL5wFdpT7U2PXwaXtJwo0Qj43hERL/s
nH4gXNJ9IXP4ougRFn51NsnynC59gbDAYFECJSlxVhiDpafIqNCq1ZJ++AyCSRFH
hzzYKOE35dqobCu9fTrCYxrrbt1PqA5qMrdR2dC4jl/ZCEXL/vhge1K9sVl77w+m
5GYwbHNlSSwY6ec7YV0BbuwUm2BP6TjC7/qGpVmH8UO6excP0zWC0OJ/5GT71K4g
lqI=
-----END CERTIFICATE-----
Generated at Wed Apr 29 09:35:43 2026 by rpki-client