Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/iyKfCMBMq-ib6l5tcHvXM7GrDoA.roa
File: iyKfCMBMq-ib6l5tcHvXM7GrDoA.roa (raw, json)
Hash identifier: 3bSSYoP+WFxl847i19b48E53/b9VOMIschku0IY9Rms=
Subject key identifier: 8B:22:9F:08:C0:4C:AB:E8:9B:EA:5E:6D:70:7B:D7:33:B1:AB:0E:80
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A01768A121F1FF2182FED0F4C2929F4E64
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/iyKfCMBMq-ib6l5tcHvXM7GrDoA.roa
Signing time: Wed 19 Aug 2026 00:25:27 +0000
ROA not before: Wed 19 Aug 2026 00:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.119.0/24 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
137.31.141.0/24 maxlen: 24
137.31.157.0/24 maxlen: 24
137.31.158.0/24 maxlen: 24
137.31.160.0/23 maxlen: 24
137.31.162.0/23 maxlen: 24
137.31.167.0/24 maxlen: 24
137.31.168.0/24 maxlen: 24
137.31.176.0/23 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:68:a1:21:f1:ff:21:82:fe:d0:f4:c2:92:9f:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 19 00:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b229f08c04cabe89bea5e6d707bd733b1ab0e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:ab:3c:7e:16:1c:82:05:71:db:48:76:ae:
0e:05:c0:fc:77:e7:77:92:3f:73:50:63:1b:f7:09:
cd:30:29:da:f9:b8:93:ff:30:4b:ec:07:09:88:4b:
87:d6:c3:5d:f7:82:75:ea:a6:79:5b:01:68:33:37:
b1:ec:48:df:9e:e9:85:29:a2:27:d7:1f:41:b4:e5:
08:e8:12:64:70:8b:ee:b3:9b:72:66:46:40:86:58:
15:b3:05:c4:cd:3d:2b:ac:12:c9:42:4a:4c:7f:2c:
3d:4a:91:8a:e4:b2:aa:0a:e3:2a:e1:19:12:b7:da:
48:19:0e:32:8b:12:45:2a:59:e6:dc:b6:15:b1:e6:
b8:27:fd:87:e9:40:5f:db:d9:b1:3d:68:03:dd:ed:
5e:23:05:cd:d6:43:15:c7:20:d0:58:32:58:c7:4c:
09:15:fb:d1:b0:34:21:57:de:5f:16:b4:1e:7b:dd:
a3:7b:6c:38:5a:26:67:8b:9b:e4:2d:9d:c1:3d:34:
2f:03:ea:71:bc:24:19:9d:09:fb:7c:3e:d7:24:ff:
5c:c5:ba:9e:dd:58:e3:8e:38:60:32:5e:6c:d4:c6:
e2:26:20:cb:5e:fd:4a:5d:17:47:a0:7d:bf:a3:61:
8c:16:02:3e:9d:f4:84:4d:b6:6d:a8:5a:76:4c:98:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:9F:08:C0:4C:AB:E8:9B:EA:5E:6D:70:7B:D7:33:B1:AB:0E:80
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/iyKfCMBMq-ib6l5tcHvXM7GrDoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0/24
137.31.114.0/23
137.31.119.0-137.31.129.255
137.31.141.0/24
137.31.157.0-137.31.158.255
137.31.160.0/22
137.31.167.0-137.31.168.255
137.31.176.0/23
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:dc:36:42:6a:2c:8c:de:bc:64:a9:7a:00:b5:ea:06:b4:e1:
7a:85:02:90:57:b0:2f:b8:de:a8:8b:49:67:05:55:6c:d4:99:
63:72:d5:e7:0a:e8:c7:e8:d3:fa:71:02:61:37:23:2d:39:8a:
43:f1:79:5a:f0:ff:d4:73:22:a6:f7:af:a9:e7:b8:dc:33:70:
28:e0:83:ea:a1:95:5e:76:44:87:58:1a:97:9c:db:cb:e8:6f:
00:7a:90:45:e5:01:99:fa:f7:73:fd:9b:07:53:aa:43:11:91:
a8:cd:32:03:c0:b3:a5:31:59:d2:15:66:6e:2b:89:85:88:e1:
81:b3:75:e7:1f:d0:41:9e:3f:eb:de:36:d2:2c:0b:ff:98:79:
63:49:6b:09:0e:77:cd:3a:99:ad:b3:d6:7b:5f:f6:05:f3:fc:
52:60:b7:b2:50:e0:2b:57:7a:2e:e6:49:43:7b:6a:d7:54:7b:
97:d9:cf:0e:51:07:c9:50:79:a8:06:70:e2:d2:a0:72:29:80:
46:03:ab:c9:0d:de:2d:62:36:8a:fb:5e:a2:10:8c:2c:25:ab:
6d:90:c5:a0:de:a5:11:a4:60:1e:12:16:ab:32:04:bc:ab:48:
b3:30:b9:50:a2:0c:3c:3e:be:fb:39:71:75:39:d2:7d:ad:50:
df:c0:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:00:43 2026 by rpki-client