Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/yPG2qCvyP-nKFZPXnlIltH2DG-0.roa
File: yPG2qCvyP-nKFZPXnlIltH2DG-0.roa (raw, json)
Hash identifier: Nkc/T0d2GdLdZhksMIWihEPosGpSwkWR9zdwiawIunM=
Subject key identifier: C8:F1:B6:A8:2B:F2:3F:E9:CA:15:93:D7:9E:52:25:B4:7D:83:1B:ED
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019E2030E8C6A0EF11BD6D55616B394662B1
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/yPG2qCvyP-nKFZPXnlIltH2DG-0.roa
Signing time: Wed 13 May 2026 07:15:36 +0000
ROA not before: Wed 13 May 2026 07:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:30:e8:c6:a0:ef:11:bd:6d:55:61:6b:39:46:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: May 13 07:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8f1b6a82bf23fe9ca1593d79e5225b47d831bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:b9:95:13:15:a6:d6:e5:3a:7f:11:d4:fd:
8c:ec:38:2c:5b:ab:24:0d:76:cf:a3:6a:8d:d6:22:
0e:20:bb:9f:b9:5e:25:73:b7:ac:07:ad:44:19:01:
ad:10:ff:0f:1f:8b:60:79:db:f5:9d:ff:bd:fc:8d:
8b:1c:f6:c5:33:fe:13:13:bf:2b:ac:46:25:ca:d2:
fb:a6:02:6d:ba:e6:71:a8:0e:4b:84:c4:36:9c:a6:
1a:81:27:f9:c0:b3:a8:db:08:46:fa:58:8e:68:25:
b6:05:23:53:f0:fb:e8:bc:7b:3d:81:81:ee:8e:4c:
4c:01:8c:86:4e:de:01:a3:5b:31:03:1d:7c:40:9e:
07:ce:2f:ac:24:48:d2:06:89:cf:ba:6e:22:9c:99:
c4:e1:d3:01:cf:6f:35:a3:93:48:7d:a1:2e:fe:fe:
1d:61:a2:3f:75:b9:aa:07:ab:1c:79:ba:03:bc:de:
92:30:52:22:5e:bb:d1:e8:12:0e:50:1a:3f:81:49:
8f:7a:f1:9f:6a:8b:9c:37:a2:46:b3:e9:b9:8c:61:
35:3f:a5:1c:14:78:43:04:ec:0e:6b:94:bc:c4:c2:
b3:db:18:fd:a8:99:c7:64:d1:e7:8e:af:b1:99:97:
84:90:7e:be:a3:0a:d2:8b:82:54:e2:b0:5d:e0:cf:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:B6:A8:2B:F2:3F:E9:CA:15:93:D7:9E:52:25:B4:7D:83:1B:ED
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/yPG2qCvyP-nKFZPXnlIltH2DG-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.49.0/24
137.31.60.0/23
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:36:5c:e7:9c:fc:42:84:f6:9b:e3:3d:eb:e4:20:ad:ae:e6:
84:ea:d5:80:c0:70:35:b0:12:de:69:93:b8:a3:87:69:20:a1:
25:9f:b8:dc:d6:77:62:ec:58:10:0f:bb:36:93:64:b7:3c:b5:
41:99:66:d0:64:54:1d:a8:c6:db:b1:c9:da:4d:5f:c6:62:d1:
84:36:d2:78:34:15:2d:9a:ec:d3:11:7e:bf:9b:8c:66:16:3f:
57:1f:87:ae:c9:30:60:85:03:71:22:31:2a:2c:bf:96:b7:d4:
4d:cc:98:43:14:2c:99:68:a8:e1:6b:53:24:e8:7e:f6:b6:27:
57:17:99:1c:85:a5:1e:96:eb:28:9a:81:db:4e:5d:b8:73:dc:
9e:0b:c4:28:2c:85:3a:b9:bc:a3:c3:12:1c:7e:f5:f0:12:49:
8c:3a:6d:24:7d:7b:c2:0f:20:7f:8f:60:41:26:c0:19:c3:5d:
36:2e:23:2b:17:e5:61:7c:79:85:8f:8e:d2:bb:5f:43:d3:74:
90:1c:41:7d:ae:32:04:c8:52:4c:59:e7:14:f8:de:3b:83:d8:
4e:62:62:99:00:2e:b6:0b:21:03:c9:02:81:c4:a2:6b:a3:49:
9b:45:05:ac:1f:b0:fb:f3:67:4c:4f:37:f9:68:03:90:bc:05:
01:ff:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:11 2026 by rpki-client