Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/glpy5Cggj2yiu0cPkj0UHPSNW6w.roa
File: glpy5Cggj2yiu0cPkj0UHPSNW6w.roa (raw, json)
Hash identifier: ivRFsgHkZR2Vt1kC3Z99++xTWKuJVh1N+QMWaFYZc8M=
Subject key identifier: 82:5A:72:E4:28:20:8F:6C:A2:BB:47:0F:92:3D:14:1C:F4:8D:5B:AC
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A1D06ED0FAE481A3BD326823A50567145F
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/glpy5Cggj2yiu0cPkj0UHPSNW6w.roa
Signing time: Thu 12 Nov 2026 15:44:45 +0000
ROA not before: Thu 12 Nov 2026 15:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.102.0/23 maxlen: 24
137.31.104.0/23 maxlen: 24
137.31.106.0/23 maxlen: 24
137.31.108.0/23 maxlen: 24
137.31.110.0/23 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.119.0/24 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
137.31.141.0/24 maxlen: 24
137.31.157.0/24 maxlen: 24
137.31.158.0/24 maxlen: 24
137.31.160.0/23 maxlen: 24
137.31.162.0/23 maxlen: 24
137.31.167.0/24 maxlen: 24
137.31.168.0/24 maxlen: 24
137.31.176.0/23 maxlen: 24
137.31.187.0/24 maxlen: 24
137.31.190.0/24 maxlen: 24
137.31.191.0/24 maxlen: 24
137.31.208.0/24 maxlen: 24
137.31.217.0/24 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 16
220.42.20.0/23 maxlen: 24
220.43.0.0/16 maxlen: 16
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:6e:d0:fa:e4:81:a3:bd:32:68:23:a5:05:67:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Nov 12 15:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825a72e428208f6ca2bb470f923d141cf48d5bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:86:92:fe:b2:40:b7:12:62:a0:1b:37:78:
67:b6:bf:93:bf:fe:e5:b6:8c:67:43:bc:3a:ba:4e:
a2:7e:f8:3b:28:83:73:27:d7:94:6a:87:ba:02:a2:
f7:f6:df:49:af:af:80:d4:28:ca:de:a3:f6:e5:47:
5e:e1:29:d7:a3:ad:6e:23:42:5c:1e:43:4d:b3:e8:
fe:aa:f1:6e:cc:56:c3:2b:aa:67:37:df:b0:cc:66:
80:a2:b6:57:3b:d2:97:b8:7d:81:6d:8b:e9:5a:f7:
39:c5:a8:0f:c2:3f:e8:84:0f:f0:ae:60:e9:b5:e6:
7d:7b:54:d3:82:f6:64:77:01:b9:e2:67:83:7b:04:
86:62:a0:c1:d3:04:f6:dd:01:a1:7e:cb:4b:5a:e0:
19:66:e9:79:f7:f8:ec:18:03:e6:c2:d6:ca:82:0b:
78:f1:15:8e:c1:1d:d5:2d:9c:f0:94:59:ea:a4:f0:
df:01:af:cb:bd:89:63:ff:bd:49:12:64:98:5f:c1:
fd:60:d5:ff:2c:96:dd:da:02:10:19:b4:da:7a:1e:
db:2c:d0:bf:cd:a4:a0:b9:bd:be:b7:06:16:7d:79:
90:ac:d6:de:f7:07:da:51:04:35:ff:08:1c:e7:88:
79:12:13:6d:7c:96:8b:df:de:be:63:bc:69:34:c4:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:72:E4:28:20:8F:6C:A2:BB:47:0F:92:3D:14:1C:F4:8D:5B:AC
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/glpy5Cggj2yiu0cPkj0UHPSNW6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0-137.31.111.255
137.31.114.0/23
137.31.119.0-137.31.129.255
137.31.141.0/24
137.31.157.0-137.31.158.255
137.31.160.0/22
137.31.167.0-137.31.168.255
137.31.176.0/23
137.31.187.0/24
137.31.190.0/23
137.31.208.0/24
137.31.217.0/24
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:5d:93:49:a2:c4:b0:2d:4c:b6:f2:8a:1f:36:d5:e6:65:e4:
21:6e:42:df:fb:27:48:09:55:e5:a1:23:d0:ec:d4:47:d2:f4:
3e:7c:e4:61:db:92:ff:ab:0f:19:c6:0d:6e:c7:5d:c1:17:af:
50:f3:38:f7:2e:91:75:d2:74:47:d6:31:97:84:21:5d:66:e9:
d1:ad:33:5f:46:7d:e7:fc:16:28:54:3a:ce:86:55:01:14:96:
2e:03:af:63:62:ff:fb:13:75:15:63:60:7f:61:77:9d:05:f8:
b2:a0:77:8d:9d:7b:53:d6:03:ab:17:27:97:e2:e6:0e:df:8b:
62:59:ee:f2:27:ef:28:6d:fa:f9:d3:24:34:81:ed:c2:e0:fa:
30:fc:9b:51:bb:b6:30:35:59:47:e1:33:79:42:d3:ec:4d:7f:
01:db:b8:a3:ca:94:e5:79:a8:74:26:73:63:bd:39:5d:84:85:
c6:39:d2:ed:a2:77:2d:0b:7a:42:8e:fa:a5:83:dd:9b:5b:4f:
36:03:59:0d:0f:cc:aa:cc:b1:9c:4d:f9:75:44:06:d0:88:16:
19:1c:c1:85:69:df:f2:c2:30:55:d1:58:f6:e7:85:d0:99:b9:
e3:9f:22:c6:4d:6d:ef:7c:4a:fd:08:13:d3:84:05:c3:5d:c7:
d0:80:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:43 2026 by rpki-client