Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5hzzN3lyv4X0feJgWvBosLbDFMo.roa
File: 5hzzN3lyv4X0feJgWvBosLbDFMo.roa (raw, json)
Hash identifier: tC4JBKfrGLOjkrc5BggMS+/yqOQr7CkLM3G8E138aic=
Subject key identifier: E6:1C:F3:37:79:72:BF:85:F4:7D:E2:60:5A:F0:68:B0:B6:C3:14:CA
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0C6156A0DE51841A70890AE39015BE830
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5hzzN3lyv4X0feJgWvBosLbDFMo.roa
Signing time: Mon 21 Sep 2026 22:28:07 +0000
ROA not before: Mon 21 Sep 2026 22:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
137.31.136.0/23 maxlen: 24
137.31.138.0/23 maxlen: 24
137.31.152.0/23 maxlen: 24
137.31.156.0/24 maxlen: 24
137.31.164.0/24 maxlen: 24
137.31.172.0/24 maxlen: 24
137.31.173.0/24 maxlen: 24
137.31.174.0/24 maxlen: 24
137.31.175.0/24 maxlen: 24
137.31.209.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:15:6a:0d:e5:18:41:a7:08:90:ae:39:01:5b:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 21 22:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e61cf3377972bf85f47de2605af068b0b6c314ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0a:c7:62:46:ee:91:4c:33:b2:62:3d:5d:12:
c4:35:f6:8f:56:65:b2:74:eb:7f:12:46:1a:a0:da:
7c:0a:a3:48:d5:66:01:b3:cb:77:57:9b:4b:01:b3:
1a:98:1f:cb:7d:33:d1:33:d1:78:e6:7e:a5:89:21:
4a:75:fd:44:a5:b9:23:9f:10:22:9d:4f:62:6d:c8:
08:82:ff:a0:00:7d:df:8d:b8:84:72:32:f3:21:3e:
19:7d:60:86:c6:de:70:eb:77:7c:a6:81:cc:a1:6f:
4f:03:24:be:70:6a:a1:d0:53:78:a1:84:a1:3d:7a:
aa:5c:a9:a6:fb:f0:b0:11:c5:15:a1:92:8c:6d:20:
21:6a:6c:80:4d:3e:ba:2f:da:72:d4:ca:2c:1f:fd:
a0:4a:08:e6:bf:5d:31:7b:78:c1:81:1a:f3:d9:a8:
a5:35:ea:ba:f4:72:51:e7:20:98:14:8e:5d:66:66:
f3:0f:a7:e2:cf:2c:80:0e:71:18:3e:df:0b:6b:e9:
ca:b9:38:5a:13:69:59:e2:7b:00:25:44:6d:14:7b:
77:a1:53:c4:da:e1:ce:a0:82:29:4d:00:34:c5:68:
65:e8:8c:e6:74:c2:38:77:ce:d1:c5:bd:7a:5f:ef:
3c:d7:fd:d7:f0:56:fb:45:04:93:7d:3c:d2:03:1b:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1C:F3:37:79:72:BF:85:F4:7D:E2:60:5A:F0:68:B0:B6:C3:14:CA
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/5hzzN3lyv4X0feJgWvBosLbDFMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
137.31.118.0/24
137.31.132.0/24
137.31.136.0/22
137.31.152.0/23
137.31.156.0/24
137.31.164.0/24
137.31.172.0/22
137.31.209.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:15:4e:50:9d:cd:38:e6:a5:38:18:83:db:f2:ed:f3:d5:bc:
0b:5d:64:d0:70:44:cd:f8:f1:92:cf:28:b6:00:35:67:67:07:
58:62:74:2c:00:e3:c2:38:33:58:a2:c2:8f:c0:cb:b2:70:92:
f2:24:39:8b:2f:19:49:95:4b:eb:5f:0e:ab:87:55:dd:dc:0a:
6d:17:e4:f4:1d:4b:d8:85:fc:45:0c:08:c3:c0:c8:7f:ac:b4:
5e:14:4a:55:a7:63:61:86:d2:b7:e0:91:7b:0e:b6:d3:54:0b:
e4:4b:2d:87:25:b4:c1:5a:65:e9:97:64:1b:ab:f8:39:ef:79:
45:67:59:56:47:2e:0e:6e:96:09:99:d5:6b:99:26:7d:a6:ed:
23:a9:54:51:fb:47:47:54:13:e7:14:53:70:3a:9b:b1:b4:ed:
be:21:24:c6:87:ec:53:4a:21:3f:cf:7c:a4:43:f2:a1:e4:83:
61:ab:fb:14:8e:98:02:1b:d7:6a:19:f5:18:a1:81:8e:8f:17:
a1:3d:23:d0:e4:88:6e:6c:d7:15:68:6f:e0:c9:d3:3f:ea:60:
c3:96:7c:0a:bf:c3:fc:c4:5b:6f:09:9d:dd:32:0f:48:17:4f:
82:da:ab:2a:51:b3:75:ee:ce:87:9f:bd:bd:e7:31:33:b6:94:
9d:30:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:19 2026 by rpki-client