Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Eh-HNGGXEe5JmRXtJIy3xc_hKPs.roa
File: Eh-HNGGXEe5JmRXtJIy3xc_hKPs.roa (raw, json)
Hash identifier: y7bjoJh1t/mDyFCgedNLkijKTCJgq6H0CRwmHmKFmII=
Subject key identifier: 12:1F:87:34:61:97:11:EE:49:99:15:ED:24:8C:B7:C5:CF:E1:28:FB
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019EADCD97CC42923CAC8B808D1FBC24A50F
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Eh-HNGGXEe5JmRXtJIy3xc_hKPs.roa
Signing time: Tue 09 Jun 2026 19:13:12 +0000
ROA not before: Tue 09 Jun 2026 19:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.118.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:cd:97:cc:42:92:3c:ac:8b:80:8d:1f:bc:24:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jun 9 19:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=121f8734619711ee499915ed248cb7c5cfe128fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:22:dc:d6:27:4b:75:2d:a7:34:ed:eb:12:
2c:cf:4e:85:ce:18:03:a3:a2:97:c8:46:7a:c0:fd:
70:51:75:74:a9:63:c5:f0:eb:d7:3f:d3:80:4b:12:
e9:e5:14:98:3d:9b:f6:da:e2:11:e7:8b:f0:9c:66:
19:79:63:5c:50:71:bb:02:50:11:95:84:6d:14:ba:
8d:ff:96:03:55:16:d2:1a:0f:3f:61:1d:fa:6c:e8:
e6:5b:01:6f:78:9d:e3:78:c4:0c:ea:aa:de:25:86:
b2:84:32:e8:f9:67:84:20:ef:7e:c6:a8:a0:d3:af:
d9:30:7a:4c:29:d2:1c:5e:d8:43:93:fc:7e:2b:59:
d3:8a:7f:4a:cf:2f:c7:24:8d:cc:64:2c:45:ec:bb:
3d:df:e0:91:46:a0:26:46:0b:45:04:2d:ff:bd:23:
af:c7:47:1f:a6:c7:e1:1a:a5:6d:c6:07:32:8c:e7:
f9:95:54:8e:a7:b8:fe:83:b4:8e:01:55:1c:8f:5a:
81:e0:5e:f7:f2:c6:a3:9e:04:cf:7b:36:3d:dc:53:
44:e5:be:20:97:1c:30:a5:e5:a2:c8:19:d0:28:e1:
78:ec:3e:7b:78:68:7f:fe:97:2f:4e:09:cb:4b:7e:
67:de:b5:16:86:31:dd:25:e9:f4:5d:68:73:1a:f6:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:87:34:61:97:11:EE:49:99:15:ED:24:8C:B7:C5:CF:E1:28:FB
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Eh-HNGGXEe5JmRXtJIy3xc_hKPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0/24
137.31.118.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:95:5c:8f:fa:ce:12:7d:84:79:ed:85:00:64:a2:4e:38:58:
bf:2e:c3:5c:0f:ce:61:e2:da:e9:1b:eb:cd:31:82:b4:ff:91:
44:80:aa:57:60:be:83:eb:a3:d9:fb:48:73:bc:ab:89:a5:5c:
38:a5:86:54:ea:33:6c:7e:87:0e:e9:be:73:17:15:8b:e7:69:
0d:4f:86:56:ec:ef:c7:9e:e2:dd:67:2c:1e:fe:db:b2:91:c1:
b1:b1:2b:db:a4:a4:36:14:d9:77:85:7e:a6:a7:b3:0e:d9:10:
ab:21:a9:30:ab:41:9c:bc:cd:59:7b:73:ec:0a:9e:3f:69:9d:
a2:37:71:f2:f6:65:8d:48:77:c2:5d:ff:8e:9a:0a:3e:cb:2e:
6b:dc:ce:d1:e7:d6:16:c5:22:2a:8b:bd:a8:72:66:5b:26:89:
f5:96:5e:c1:c5:b7:7b:34:e9:f1:09:06:dc:c1:0b:6a:40:78:
27:95:c8:54:ee:fa:ff:bf:bd:01:1f:96:fa:eb:7c:c1:bf:bb:
71:2f:e8:cd:d2:a1:cf:e2:25:95:09:c0:15:40:00:81:e5:0a:
a4:06:58:c1:fc:e3:4a:b4:4f:6c:78:92:d4:f9:fa:14:84:28:
e4:11:cd:51:d1:3b:35:7c:5c:e6:ac:ca:b2:83:35:0c:53:56:
6b:ed:cd:aa
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZ6tzZfMQpI8rIuAjR+8JKUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNjA5MTkxMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjFmODczNDYxOTcxMWVlNDk5OTE1ZWQyNDhjYjdjNWNmZTEyOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh14i3NYnS3UtpzTt6xIsz06FzhgD
o6KXyEZ6wP1wUXV0qWPF8OvXP9OASxLp5RSYPZv22uIR54vwnGYZeWNcUHG7AlAR
lYRtFLqN/5YDVRbSGg8/YR36bOjmWwFveJ3jeMQM6qreJYayhDLo+WeEIO9+xqig
06/ZMHpMKdIcXthDk/x+K1nTin9Kzy/HJI3MZCxF7Ls93+CRRqAmRgtFBC3/vSOv
x0cfpsfhGqVtxgcyjOf5lVSOp7j+g7SOAVUcj1qB4F738sajngTPezY93FNE5b4g
lxwwpeWiyBnQKOF47D57eGh//pcvTgnLS35n3rUWhjHdJen0XWhzGvZLvQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFBIfhzRhlxHuSZkV7SSMt8XP4Sj7MB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvRWgtSE5HR1hFZTVKbVJYdEpJeTN4Y19oS1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBiQQCAAEwgYIwDAME
AIkfEQMEAokfEAMEAIkfLAMEAIkfMgMEAIkfPwMEAIkfdjAMAwQGk6HAAwQBk6HI
AwQBk6HMMAwDBASTodADBAGTodwDBACf/mIDBACf/mcDBACf/swwDAMEA6SJOAME
AKSJPAMEAKSJRQMEAKSJbTAMAwQApImfAwQApInAMCwEAgACMCYDBwAqA+7AMhED
BwAqA+7AMhYwEgMHACoD7sAyIwMHACoD7sAyJDANBgkqhkiG9w0BAQsFAAOCAQEA
PpVcj/rOEn2Eee2FAGSiTjhYvy7DXA/OYeLa6RvrzTGCtP+RRICqV2C+g+uj2ftI
c7yriaVcOKWGVOozbH6HDum+cxcVi+dpDU+GVuzvx57i3WcsHv7bspHBsbEr26Sk
NhTZd4V+pqezDtkQqyGpMKtBnLzNWXtz7AqeP2mdojdx8vZljUh3wl3/jpoKPssu
a9zO0efWFsUiKou9qHJmWyaJ9ZZewcW3ezTp8QkG3MELakB4J5XIVO76/7+9AR+W
+ut8wb+7cS/ozdKhz+IllQnAFUAAgeUKpAZYwfzjSrRPbHiS1Pn6FIQo5BHNUdE7
NXxc5qzKsoM1DFNWa+3Nqg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:27 2026 by rpki-client