Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/BZbjJl33wtC5Kx6I29mOqiiRHZA.roa
File: BZbjJl33wtC5Kx6I29mOqiiRHZA.roa (raw, json)
Hash identifier: UwvFEfahmlGM3+zeVy05GqUYOrXQjKRZoc15GwQat18=
Subject key identifier: 05:96:E3:26:5D:F7:C2:D0:B9:2B:1E:88:DB:D9:8E:AA:28:91:1D:90
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019F4D40DB8B5FC9019116803BDA11921F18
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/BZbjJl33wtC5Kx6I29mOqiiRHZA.roa
Signing time: Fri 10 Jul 2026 18:18:43 +0000
ROA not before: Fri 10 Jul 2026 18:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:40:db:8b:5f:c9:01:91:16:80:3b:da:11:92:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jul 10 18:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0596e3265df7c2d0b92b1e88dbd98eaa28911d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:25:b8:0b:eb:85:c6:d0:dc:54:25:eb:ac:
ef:c9:92:c3:79:95:ee:4b:a9:d6:1d:6d:20:17:e7:
24:3d:51:cf:3e:57:30:27:b4:5d:18:b1:0d:a3:3f:
85:cb:a6:78:7a:4c:2a:f5:fb:db:b8:cc:24:4d:62:
0d:b8:cd:49:47:d1:60:07:ef:58:18:8f:d1:3d:6d:
47:af:f0:38:39:14:6d:5f:54:83:c0:4a:79:f3:4f:
67:a1:5f:46:47:24:07:58:9d:d0:fc:5d:59:6d:ff:
6b:94:69:a8:6d:f1:57:fc:65:a1:49:f7:40:7c:82:
9d:b6:8a:02:f3:9e:22:90:f6:7f:80:9b:15:1f:74:
d4:e3:b8:7f:fc:09:6f:b2:b7:4c:9c:57:a3:41:7b:
c5:8d:ff:67:3a:e4:98:8e:8f:91:2c:5d:f6:15:7e:
a8:71:ca:19:d4:a3:22:26:fe:ff:d2:6b:d1:9a:c1:
49:52:2f:2a:1f:d7:ab:89:fb:4e:31:bf:17:52:1a:
97:06:72:6c:5d:88:22:0b:5e:c0:de:7a:eb:f7:3d:
6f:3f:99:56:71:67:37:30:55:08:bc:07:95:dd:27:
69:df:97:b2:6f:70:e6:d4:2d:9e:40:e1:6d:f1:b1:
c3:b9:f6:8e:e4:07:26:1a:09:3e:a7:30:dc:b3:2d:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:E3:26:5D:F7:C2:D0:B9:2B:1E:88:DB:D9:8E:AA:28:91:1D:90
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/BZbjJl33wtC5Kx6I29mOqiiRHZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0/24
137.31.114.0/23
137.31.120.0-137.31.129.255
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:6c:4d:eb:9a:e1:d7:a3:e8:c1:82:fa:e3:74:dc:20:07:77:
19:e0:f9:9f:6f:c3:6b:81:8e:e5:86:64:4c:65:41:04:8c:56:
d1:aa:fd:ae:a7:19:25:a3:da:4d:cd:a3:58:ba:1d:4c:60:b7:
54:12:5d:63:e5:f1:dc:92:c4:b1:41:d0:c3:dc:42:9c:d8:5f:
6c:b3:53:b3:c7:27:f8:24:cd:f2:fc:c7:9b:83:7e:24:eb:8c:
78:d8:bd:30:81:84:61:65:05:c7:64:a6:a4:91:35:74:21:68:
e8:48:bc:1d:24:d3:0c:be:43:2a:35:cf:91:d1:2b:d8:62:4b:
a6:a7:0c:12:db:da:2d:7a:52:46:e1:a6:c8:4b:43:b4:9a:89:
07:28:c2:fa:ac:0b:49:32:9b:66:9e:86:04:99:58:33:4f:23:
11:8d:4f:f4:33:1f:3d:5e:d7:d0:20:25:02:c9:89:e0:42:74:
c2:64:fc:9f:80:69:4c:09:73:02:32:ae:c5:a5:2f:3c:d5:c4:
a2:68:70:ea:af:03:a2:76:f8:7e:19:68:b5:5f:51:d4:de:c0:
b8:bd:9f:3a:f5:30:52:29:f8:84:4c:21:70:5d:46:46:d8:83:
db:c0:c9:1e:c4:a3:81:4f:aa:2d:55:5a:fd:5f:86:a1:c6:33:
12:d5:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:21 2026 by rpki-client