Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/XUXKjueynUl8CH15lFlnhScb0yc.roa
File: XUXKjueynUl8CH15lFlnhScb0yc.roa (raw, json)
Hash identifier: cmwM0aumCj0dEcs90DQIh/pBVhCLBkdHGdbl/Tzn0j0=
Subject key identifier: 5D:45:CA:8E:E7:B2:9D:49:7C:08:7D:79:94:59:67:85:27:1B:D3:27
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A011C4D6820529DEDB6C358EA767C19898
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/XUXKjueynUl8CH15lFlnhScb0yc.roa
Signing time: Mon 17 Aug 2026 22:08:27 +0000
ROA not before: Mon 17 Aug 2026 22:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
137.31.136.0/23 maxlen: 24
137.31.138.0/23 maxlen: 24
137.31.156.0/24 maxlen: 24
137.31.164.0/24 maxlen: 24
137.31.172.0/24 maxlen: 24
137.31.173.0/24 maxlen: 24
137.31.174.0/24 maxlen: 24
137.31.175.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:c4:d6:82:05:29:de:db:6c:35:8e:a7:67:c1:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 17 22:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d45ca8ee7b29d497c087d7994596785271bd327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:31:30:75:d2:7a:54:f1:34:b4:56:df:36:
1b:17:32:c4:7a:9b:dc:13:8f:79:60:a3:bb:ca:03:
8d:4c:87:89:62:fc:ec:ed:a3:d3:ba:a4:88:ed:50:
2c:fd:ed:46:6f:33:1a:e7:26:00:5a:62:e7:a7:5a:
bb:1d:ee:4c:61:86:ad:50:eb:b5:67:a2:cc:e1:0b:
71:62:7e:54:60:fe:b1:b3:d6:21:8d:b1:84:1c:27:
47:9e:f0:d3:87:fa:0f:df:a5:d7:fd:f1:81:c1:9b:
be:50:a1:02:20:4c:5d:5f:ea:5f:3f:e1:6d:48:28:
30:04:01:70:9e:12:44:b1:fc:37:2c:a8:b9:75:3f:
15:47:db:fc:b4:bd:14:d7:89:af:78:d3:03:cb:3a:
f8:b4:5c:81:ac:8c:c4:57:dd:09:35:bb:a5:80:f6:
ae:52:48:3f:54:46:15:59:66:2e:68:48:9c:bf:b2:
84:35:0b:d1:6d:c0:89:da:fa:55:69:ea:43:a1:68:
52:82:b0:6e:3f:27:55:52:99:3d:99:5c:46:35:d2:
ca:a1:20:37:50:a9:9b:fa:d4:53:f6:d6:3f:fe:90:
ab:36:b0:95:63:30:f8:5b:65:dc:c0:79:50:d5:ed:
b6:57:22:49:8f:09:fe:b5:90:76:b4:cb:28:8c:3d:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:CA:8E:E7:B2:9D:49:7C:08:7D:79:94:59:67:85:27:1B:D3:27
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/XUXKjueynUl8CH15lFlnhScb0yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
137.31.118.0/24
137.31.132.0/24
137.31.136.0/22
137.31.156.0/24
137.31.164.0/24
137.31.172.0/22
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:d3:40:91:5c:c6:8c:32:99:1a:5f:8f:80:84:44:8d:77:6d:
fc:db:ed:1e:39:ba:bf:e2:27:1b:b5:05:79:35:91:c0:16:fc:
23:cd:6b:65:84:86:ca:0e:4b:aa:5a:d6:c2:f4:f6:03:65:04:
8a:f0:71:9a:69:34:a5:2a:f5:0f:ad:14:36:d2:e7:64:81:82:
59:20:07:0f:3d:97:66:60:f8:e2:88:f6:3e:02:ea:9e:ab:d6:
20:17:ec:b9:04:35:27:13:85:4e:ef:0b:a3:3a:93:4a:a4:89:
52:6a:32:cf:c9:c8:d7:2f:1a:f9:84:8d:74:1b:f2:1d:ac:7f:
4e:a0:27:67:75:2b:7d:f6:20:c1:6d:8b:cb:df:f8:59:b2:60:
cf:8e:20:8e:96:f2:45:7a:b2:7c:a7:43:19:49:1c:e3:b1:25:
c2:27:12:9a:54:d8:28:e1:c5:95:ed:4f:6b:c5:34:88:1f:02:
62:32:fc:6f:5f:99:2a:83:e7:0e:c7:53:5e:f9:5b:ec:8c:17:
5e:35:08:e4:d6:3e:48:33:f4:93:18:f8:6c:f2:56:6f:3b:33:
21:a5:95:1b:29:a9:98:38:59:70:76:27:46:7b:1f:dc:61:00:
0a:4e:e2:16:66:26:25:5f:00:1f:e4:e9:b4:82:80:18:69:71:
00:a7:6b:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:54:26 2026 by rpki-client