Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9LNb_9PZbve_OomIaChtCM3k4so.roa
File: 9LNb_9PZbve_OomIaChtCM3k4so.roa (raw, json)
Hash identifier: sE6lgMqZnhOrphKgsrZ4WG0emFX/4GnVx3HFaE7J0Qo=
Subject key identifier: F4:B3:5B:FF:D3:D9:6E:F7:BF:3A:89:88:68:28:6D:08:CD:E4:E2:CA
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0C6148005AE35A813AA6A0D07DCFBEDE9
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9LNb_9PZbve_OomIaChtCM3k4so.roa
Signing time: Mon 21 Sep 2026 22:27:07 +0000
ROA not before: Mon 21 Sep 2026 22:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.102.0/23 maxlen: 24
137.31.104.0/23 maxlen: 24
137.31.106.0/23 maxlen: 24
137.31.108.0/23 maxlen: 24
137.31.110.0/23 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.119.0/24 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
137.31.141.0/24 maxlen: 24
137.31.157.0/24 maxlen: 24
137.31.158.0/24 maxlen: 24
137.31.160.0/23 maxlen: 24
137.31.162.0/23 maxlen: 24
137.31.167.0/24 maxlen: 24
137.31.168.0/24 maxlen: 24
137.31.176.0/23 maxlen: 24
137.31.187.0/24 maxlen: 24
137.31.190.0/24 maxlen: 24
137.31.191.0/24 maxlen: 24
137.31.208.0/24 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:14:80:05:ae:35:a8:13:aa:6a:0d:07:dc:fb:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 21 22:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4b35bffd3d96ef7bf3a898868286d08cde4e2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:b3:bf:9f:dc:86:22:7b:f4:31:6e:89:e9:
a5:12:10:88:ed:66:ef:a7:5f:d8:b9:e7:d0:fd:ff:
dd:de:0a:e4:7d:5f:35:15:15:a8:67:1a:64:e8:5d:
14:de:2e:0c:d6:a0:e9:db:c9:67:88:81:db:f6:8f:
be:fe:89:45:a1:99:60:55:af:0c:d0:9a:c2:06:bf:
bb:57:f1:c4:64:6e:4b:7b:3c:d7:e4:63:a4:e7:91:
55:c8:e3:d3:86:98:1e:99:d2:d5:7b:47:61:24:ee:
f5:70:6d:d5:55:b0:63:c0:c3:59:2c:1c:81:fb:8f:
63:e5:f7:e2:81:ff:01:10:67:6f:68:1b:68:37:0a:
70:b7:55:ce:56:00:f9:9f:5b:de:d4:ce:83:9c:1a:
97:70:2e:a5:4b:4d:ab:16:bb:ba:9a:03:fb:07:6d:
a1:02:e4:64:ad:ba:03:a2:4a:c0:07:ab:a1:ca:dd:
74:d2:37:ae:ae:26:34:e3:3b:46:50:3d:98:9f:52:
60:e7:03:e9:68:9c:24:79:f0:19:47:1a:7e:fd:67:
d2:47:32:9d:df:45:69:c8:6a:66:5d:0e:6e:30:b7:
cc:98:4d:ab:fc:e3:21:96:5f:56:79:32:d5:fe:dc:
c8:d4:5c:e6:14:be:6b:db:81:0f:ca:56:d5:64:14:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:5B:FF:D3:D9:6E:F7:BF:3A:89:88:68:28:6D:08:CD:E4:E2:CA
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/9LNb_9PZbve_OomIaChtCM3k4so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0-137.31.111.255
137.31.114.0/23
137.31.119.0-137.31.129.255
137.31.141.0/24
137.31.157.0-137.31.158.255
137.31.160.0/22
137.31.167.0-137.31.168.255
137.31.176.0/23
137.31.187.0/24
137.31.190.0/23
137.31.208.0/24
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:4b:e1:b9:70:a1:d2:31:80:cc:1d:ae:8a:31:e9:fe:82:c7:
f8:6b:fd:f5:5d:91:0c:17:39:a7:f4:07:41:3e:b7:42:06:ae:
24:b7:5b:9f:05:dc:cd:4e:21:cc:99:d2:68:80:5d:b6:da:d0:
8b:98:5a:5c:ae:4c:50:78:29:c0:30:19:1a:76:99:a6:e0:8c:
38:c9:11:07:3f:6e:4b:19:8c:dc:c5:2b:74:02:32:fa:71:9e:
d9:1b:5c:2a:c1:e9:7a:91:04:92:b6:b2:9f:a6:c5:0a:ca:49:
2b:81:29:05:13:49:06:44:ee:83:a4:32:9c:68:51:b7:78:97:
b9:2e:5e:8d:c9:8e:c2:c1:c0:c9:b0:d3:7a:2a:72:ab:3c:d5:
10:4d:dc:e3:1d:81:43:e5:5c:a5:4e:cb:0c:be:4a:7d:61:85:
6e:5c:3a:c7:5e:14:2b:b7:cc:5e:a9:8b:31:b4:5d:6c:1c:e8:
76:22:79:22:a3:fa:05:f8:93:24:d3:f4:b1:cd:2b:1b:b6:f0:
a4:f9:a6:5b:76:0e:47:4e:ac:b1:52:f5:61:86:22:1a:c4:e9:
fc:68:56:59:ac:54:69:15:5c:93:cb:62:92:1c:59:18:e6:45:
83:10:cc:2d:78:3d:98:85:51:ac:6e:69:55:8c:7a:d8:00:cc:
5b:a2:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:32 2026 by rpki-client