Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Zg1qY1NaT2tr6uTrqkYf6RG57DY.roa
File: Zg1qY1NaT2tr6uTrqkYf6RG57DY.roa (raw, json)
Hash identifier: 5X0GUYM338jJy94+ZfFU9JyyfiBFBWBwDRJLk78a0KQ=
Subject key identifier: 66:0D:6A:63:53:5A:4F:6B:6B:EA:E4:EB:AA:46:1F:E9:11:B9:EC:36
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A1316E5D2D4B959E4CDA7B9B6E45406E99
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Zg1qY1NaT2tr6uTrqkYf6RG57DY.roa
Signing time: Mon 12 Oct 2026 18:44:38 +0000
ROA not before: Mon 12 Oct 2026 18:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.64.0/23 maxlen: 24
137.31.66.0/23 maxlen: 24
137.31.68.0/23 maxlen: 24
137.31.70.0/23 maxlen: 24
137.31.72.0/23 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
137.31.136.0/23 maxlen: 24
137.31.138.0/23 maxlen: 24
137.31.152.0/23 maxlen: 24
137.31.156.0/24 maxlen: 24
137.31.164.0/24 maxlen: 24
137.31.172.0/24 maxlen: 24
137.31.173.0/24 maxlen: 24
137.31.174.0/24 maxlen: 24
137.31.175.0/24 maxlen: 24
137.31.209.0/24 maxlen: 24
137.31.216.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:6e:5d:2d:4b:95:9e:4c:da:7b:9b:6e:45:40:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 12 18:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=660d6a63535a4f6b6beae4ebaa461fe911b9ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:62:9d:5d:2d:fe:a1:53:46:a5:93:42:f4:
7e:fe:18:d4:06:89:6e:08:7a:8c:e5:19:f1:4a:5b:
d5:ab:dc:8a:37:da:85:ab:9a:08:51:ac:47:d3:70:
e5:0a:88:25:fc:a6:c7:b8:a3:a3:fe:ce:06:ba:0e:
2b:8b:6d:50:7b:81:9a:62:11:de:49:41:ec:6e:22:
68:fd:32:e8:0b:2a:9b:0e:bd:a2:10:e7:29:80:cb:
a3:8e:87:e9:e1:43:b3:db:52:3d:9b:73:d2:49:ec:
3f:8b:6f:64:59:b5:82:53:48:ba:db:45:e1:77:fd:
7b:1b:0d:33:42:24:74:0e:9c:9f:57:2b:74:29:64:
d2:56:59:a3:a3:a0:21:25:f6:33:91:7b:1f:21:42:
a7:bf:60:03:8c:9d:fd:87:45:10:12:7f:07:12:45:
ca:65:92:5f:66:b9:b9:f6:06:f0:d4:de:9c:ae:5c:
4d:14:91:c2:2c:a9:9e:79:38:63:40:23:94:f8:de:
4b:31:09:98:69:84:98:02:d3:1b:6d:3b:0a:4d:38:
78:10:55:b1:76:28:93:5a:d1:7d:0d:c6:8c:eb:3c:
2e:89:e0:6d:0b:fa:b5:0f:cf:f7:76:e8:63:12:6a:
54:c7:3a:80:a0:ab:88:ae:9e:96:dd:04:8e:20:59:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:6A:63:53:5A:4F:6B:6B:EA:E4:EB:AA:46:1F:E9:11:B9:EC:36
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Zg1qY1NaT2tr6uTrqkYf6RG57DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0-137.31.73.255
137.31.118.0/24
137.31.132.0/24
137.31.136.0/22
137.31.152.0/23
137.31.156.0/24
137.31.164.0/24
137.31.172.0/22
137.31.209.0/24
137.31.216.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:c2:d8:b1:0a:3c:96:b5:35:9e:c8:db:c4:a0:d2:76:5e:54:
47:a2:4c:51:9f:6c:8f:5c:0f:aa:10:5f:3f:f2:1c:c5:b9:fb:
f0:f0:20:9f:04:e5:e0:16:3e:e6:c7:c1:67:02:cc:2d:ac:c1:
6a:80:0c:90:e7:39:90:15:cb:98:62:76:b6:aa:90:22:33:80:
85:a8:fe:f4:c4:d0:7a:f4:0e:aa:74:6e:fb:1e:ac:1f:9e:2d:
ee:1f:21:29:16:46:00:de:14:23:97:2b:4a:70:21:18:e5:af:
ab:26:c0:58:38:95:be:1c:5b:48:96:bb:d0:f6:3c:cc:19:6f:
55:36:96:90:b5:a4:33:e6:ce:96:6c:29:97:ec:dc:b6:46:03:
f0:7a:37:3e:74:4f:75:b6:4a:2f:26:e1:31:81:84:f2:16:98:
f3:01:b0:82:ca:92:8c:d4:21:32:b3:09:98:df:fc:50:90:a4:
86:2f:34:24:9f:d1:f8:30:b1:31:a6:d7:74:96:4f:1f:61:19:
6e:d4:3f:1e:28:8a:e3:72:2c:ae:54:b7:e3:cb:6f:c1:61:e4:
f3:00:3f:58:e9:34:fc:82:56:70:4f:7c:ef:e1:f2:47:88:8f:
d8:02:7d:ac:61:2b:52:c1:06:32:bb:fa:0f:4d:10:1b:fc:63:
97:cd:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:50:16 2026 by rpki-client