Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rwDXM7uoAYUq9vibrL7kHKv6kng.roa
File: rwDXM7uoAYUq9vibrL7kHKv6kng.roa (raw, json)
Hash identifier: tuYYsCfNlmppYJ+ogLoPayC8WA1ROYvtLnyDA44jsI8=
Subject key identifier: AF:00:D7:33:BB:A8:01:85:2A:F6:F8:9B:AC:BE:E4:1C:AB:FA:92:78
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019EDB1B1EBB8875F3D9F46724FDDF1CB577
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rwDXM7uoAYUq9vibrL7kHKv6kng.roa
Signing time: Thu 18 Jun 2026 14:20:48 +0000
ROA not before: Thu 18 Jun 2026 14:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:1b:1e:bb:88:75:f3:d9:f4:67:24:fd:df:1c:b5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jun 18 14:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af00d733bba801852af6f89bacbee41cabfa9278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:3d:fe:0c:27:7a:2e:f2:17:4a:ec:0f:84:
ed:74:f0:38:ab:2a:4d:b2:7b:a5:f7:a5:5f:10:31:
5d:5a:ec:39:8f:2b:72:bc:45:37:21:a3:17:80:3d:
08:af:e4:84:ae:37:74:0d:cf:dc:c1:6c:02:69:59:
1c:8a:ac:e3:23:20:73:a4:82:ab:cb:6a:33:16:b7:
7e:a1:60:71:6d:78:cd:02:61:3d:f2:f9:a3:43:6f:
2e:1a:fd:f3:32:1c:6d:0b:a1:cc:2d:50:4e:1e:b0:
55:51:83:f5:b2:3c:08:a6:58:ad:00:60:55:b1:e4:
7d:40:da:7d:ac:ea:0f:ed:07:8c:a0:91:45:ce:47:
e1:d7:b1:4d:21:bf:56:d3:fe:38:46:ec:4c:9d:42:
a5:5e:46:53:60:63:22:20:e0:66:5f:b6:01:16:f6:
c8:4d:aa:2e:d9:b9:b4:5e:6c:f7:fa:e9:fe:61:8d:
ee:a9:98:56:83:9e:d9:13:95:89:22:c5:96:0f:50:
53:6d:bc:e8:93:de:92:44:69:07:df:fd:44:4a:fa:
9c:72:e5:38:8f:10:e8:38:09:78:c3:8c:b6:22:f7:
0a:5b:1d:6c:d5:02:88:03:3e:d3:51:e4:dd:a9:e2:
35:16:a9:ae:90:c2:a1:5e:e3:75:90:44:ba:87:73:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:D7:33:BB:A8:01:85:2A:F6:F8:9B:AC:BE:E4:1C:AB:FA:92:78
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rwDXM7uoAYUq9vibrL7kHKv6kng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.49.0/24
137.31.60.0/23
137.31.101.0/24
137.31.114.0/23
137.31.120.0-137.31.129.255
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:77:d3:d9:b0:f5:9b:97:5b:ba:1d:12:b2:19:ee:a4:a4:70:
55:c5:17:9e:23:2b:90:1d:86:17:c6:ba:8c:02:52:76:dd:1a:
5d:46:bf:c6:3e:5f:87:19:b1:b5:85:ee:1c:eb:0c:da:47:3c:
6f:45:22:b5:6f:76:bb:ca:55:30:18:25:50:40:21:d6:58:7c:
cf:45:a5:51:a8:dd:f7:90:b0:56:da:df:df:ad:73:0f:12:9e:
73:dd:5d:e4:17:de:6b:fa:68:8f:4a:73:de:83:bb:37:11:77:
5b:d0:f8:04:9e:c1:61:a5:fa:79:39:ee:bd:06:81:40:8a:e5:
81:f7:71:0c:28:54:fa:4d:1a:20:87:9a:e2:a1:e4:2f:79:86:
f1:80:02:53:20:08:fc:15:b6:ee:9a:08:05:d8:70:3e:1f:50:
46:85:da:2e:db:aa:c4:e3:c5:21:3b:8d:30:20:45:73:da:6c:
0e:70:19:6f:c0:e2:97:8f:08:32:67:26:39:11:7d:b9:4f:66:
08:ab:a4:a7:0c:fc:fa:47:a2:c8:1a:ad:58:10:92:1a:00:53:
8e:0f:8a:61:a0:4d:95:a7:b2:cd:26:70:7e:a3:bc:c9:68:32:
46:0f:ad:9d:84:a9:15:6e:3a:5e:6f:d0:49:be:24:77:3b:b6:
d4:23:9a:fa
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgISAZ7bGx67iHXz2fRnJP3fHLV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNjE4MTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjAwZDczM2JiYTgwMTg1MmFmNmY4OWJhY2JlZTQxY2FiZmE5Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihw9/gwnei7yF0rsD4TtdPA4qypN
snul96VfEDFdWuw5jytyvEU3IaMXgD0Ir+SErjd0Dc/cwWwCaVkciqzjIyBzpIKr
y2ozFrd+oWBxbXjNAmE98vmjQ28uGv3zMhxtC6HMLVBOHrBVUYP1sjwIplitAGBV
seR9QNp9rOoP7QeMoJFFzkfh17FNIb9W0/44RuxMnUKlXkZTYGMiIOBmX7YBFvbI
Taou2bm0Xmz3+un+YY3uqZhWg57ZE5WJIsWWD1BTbbzok96SRGkH3/1ESvqccuU4
jxDoOAl4w4y2IvcKWx1s1QKIAz7TUeTdqeI1FqmukMKhXuN1kES6h3OBCwIDAQAB
o4IC7DCCAugwHQYDVR0OBBYEFK8A1zO7qAGFKvb4m6y+5Byr+pJ4MB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcndEWE03dW9BWVVxOXZpYnJMN2tIS3Y2a25nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAAYIKwYBBQUHAQcBAf8EgfAwge0wgbwEAgABMIG1AwQA
iR8PAwQAiR8xAwQBiR88AwQAiR9lAwQBiR9yMAwDBAOJH3gDBAGJH4ADBAGToYAw
DAMEAZ/+OgMEAZ/+PAMEAp/+QAMEAJ/+RTAMAwQCn/5UAwQAn/5WMAwDBAKf/lwD
BAGf/mAwDAMEAJ/+YwMEAJ/+ZDAMAwQBn/62AwQBn/64AwQAn/7KAwQAn/7RAwQA
n/7ZAwQBn/7cAwQBn/7wMAwDBAKkiQQDBAGkiTQDAwHcKjAsBAIAAjAmAwcAKgPu
wDISAwcAKgPuwDIbMBIDBwAqA+7AMisDBwAqA+7AMi4wDQYJKoZIhvcNAQELBQAD
ggEBABJ309mw9ZuXW7odErIZ7qSkcFXFF54jK5AdhhfGuowCUnbdGl1Gv8Y+X4cZ
sbWF7hzrDNpHPG9FIrVvdrvKVTAYJVBAIdZYfM9FpVGo3feQsFba39+tcw8SnnPd
XeQX3mv6aI9Kc96DuzcRd1vQ+ASewWGl+nk57r0GgUCK5YH3cQwoVPpNGiCHmuKh
5C95hvGAAlMgCPwVtu6aCAXYcD4fUEaF2i7bqsTjxSE7jTAgRXPabA5wGW/A4peP
CDJnJjkRfblPZgirpKcM/PpHosgarVgQkhoAU44PimGgTZWnss0mcH6jvMloMkYP
rZ2EqRVuOl5v0Em+JHc7ttQjmvo=
-----END CERTIFICATE-----
Generated at Thu Jun 25 01:09:43 2026 by rpki-client