Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/nkIrKZlgFS0-2bloQOAl4B4IDtw.roa
File: nkIrKZlgFS0-2bloQOAl4B4IDtw.roa (raw, json)
Hash identifier: 4mnOQTeiJHt1snv92D1Pn+fX2RJPxzCmuqyQA6CANK4=
Subject key identifier: 9E:42:2B:29:99:60:15:2D:3E:D9:B9:68:40:E0:25:E0:1E:08:0E:DC
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A06263C3B91EEED9A08EAC8FAD0EDC9D23
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/nkIrKZlgFS0-2bloQOAl4B4IDtw.roa
Signing time: Wed 02 Sep 2026 13:51:40 +0000
ROA not before: Wed 02 Sep 2026 13:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22616
IP address blocks: 137.31.15.0/24 maxlen: 24
137.31.24.0/23 maxlen: 24
137.31.26.0/23 maxlen: 24
137.31.49.0/24 maxlen: 24
137.31.60.0/24 maxlen: 24
137.31.61.0/24 maxlen: 24
137.31.80.0/23 maxlen: 24
137.31.82.0/23 maxlen: 24
137.31.84.0/23 maxlen: 24
137.31.86.0/23 maxlen: 24
137.31.101.0/24 maxlen: 24
137.31.102.0/23 maxlen: 24
137.31.104.0/23 maxlen: 24
137.31.106.0/23 maxlen: 24
137.31.108.0/23 maxlen: 24
137.31.110.0/23 maxlen: 24
137.31.114.0/23 maxlen: 24
137.31.119.0/24 maxlen: 24
137.31.120.0/23 maxlen: 24
137.31.122.0/23 maxlen: 24
137.31.124.0/23 maxlen: 24
137.31.126.0/23 maxlen: 24
137.31.128.0/23 maxlen: 24
137.31.141.0/24 maxlen: 24
137.31.157.0/24 maxlen: 24
137.31.158.0/24 maxlen: 24
137.31.160.0/23 maxlen: 24
137.31.162.0/23 maxlen: 24
137.31.167.0/24 maxlen: 24
137.31.168.0/24 maxlen: 24
137.31.176.0/23 maxlen: 24
137.31.187.0/24 maxlen: 24
137.31.190.0/24 maxlen: 24
137.31.191.0/24 maxlen: 24
147.161.128.0/23 maxlen: 24
159.254.58.0/23 maxlen: 24
159.254.60.0/23 maxlen: 24
159.254.64.0/23 maxlen: 24
159.254.66.0/23 maxlen: 24
159.254.69.0/24 maxlen: 24
159.254.84.0/24 maxlen: 24
159.254.85.0/24 maxlen: 24
159.254.86.0/24 maxlen: 24
159.254.92.0/24 maxlen: 24
159.254.93.0/24 maxlen: 24
159.254.94.0/24 maxlen: 24
159.254.95.0/24 maxlen: 24
159.254.96.0/24 maxlen: 24
159.254.97.0/24 maxlen: 24
159.254.99.0/24 maxlen: 24
159.254.100.0/24 maxlen: 24
159.254.182.0/23 maxlen: 24
159.254.184.0/23 maxlen: 24
159.254.202.0/24 maxlen: 24
159.254.209.0/24 maxlen: 24
159.254.217.0/24 maxlen: 24
159.254.220.0/24 maxlen: 24
159.254.221.0/24 maxlen: 24
159.254.240.0/24 maxlen: 24
159.254.241.0/24 maxlen: 24
164.137.4.0/24 maxlen: 24
164.137.5.0/24 maxlen: 24
164.137.6.0/24 maxlen: 24
164.137.7.0/24 maxlen: 24
164.137.8.0/24 maxlen: 24
164.137.9.0/24 maxlen: 24
164.137.10.0/24 maxlen: 24
164.137.11.0/24 maxlen: 24
164.137.12.0/24 maxlen: 24
164.137.13.0/24 maxlen: 24
164.137.14.0/24 maxlen: 24
164.137.15.0/24 maxlen: 24
164.137.16.0/24 maxlen: 24
164.137.17.0/24 maxlen: 24
164.137.18.0/24 maxlen: 24
164.137.19.0/24 maxlen: 24
164.137.20.0/24 maxlen: 24
164.137.21.0/24 maxlen: 24
164.137.22.0/24 maxlen: 24
164.137.23.0/24 maxlen: 24
164.137.24.0/24 maxlen: 24
164.137.25.0/24 maxlen: 24
164.137.26.0/24 maxlen: 24
164.137.27.0/24 maxlen: 24
164.137.28.0/24 maxlen: 24
164.137.29.0/24 maxlen: 24
164.137.30.0/24 maxlen: 24
164.137.31.0/24 maxlen: 24
164.137.32.0/24 maxlen: 24
164.137.33.0/24 maxlen: 24
164.137.34.0/24 maxlen: 24
164.137.35.0/24 maxlen: 24
164.137.36.0/24 maxlen: 24
164.137.37.0/24 maxlen: 24
164.137.38.0/24 maxlen: 24
164.137.39.0/24 maxlen: 24
164.137.40.0/24 maxlen: 24
164.137.41.0/24 maxlen: 24
164.137.42.0/24 maxlen: 24
164.137.43.0/24 maxlen: 24
164.137.44.0/24 maxlen: 24
164.137.45.0/24 maxlen: 24
164.137.46.0/24 maxlen: 24
164.137.47.0/24 maxlen: 24
164.137.48.0/24 maxlen: 24
164.137.49.0/24 maxlen: 24
164.137.50.0/24 maxlen: 24
164.137.51.0/24 maxlen: 24
164.137.52.0/24 maxlen: 24
164.137.53.0/24 maxlen: 24
220.42.0.0/16 maxlen: 24
220.43.0.0/16 maxlen: 24
2a03:eec0:3212::/48 maxlen: 48
2a03:eec0:321b::/48 maxlen: 48
2a03:eec0:322b::/48 maxlen: 48
2a03:eec0:322c::/48 maxlen: 48
2a03:eec0:322d::/48 maxlen: 48
2a03:eec0:322e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:63:c3:b9:1e:ee:d9:a0:8e:ac:8f:ad:0e:dc:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 2 13:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e422b299960152d3ed9b96840e025e01e080edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:a2:f2:62:15:1c:1a:26:68:59:4c:b0:4b:
8a:5d:1f:60:57:1f:a0:72:1a:fb:ac:5a:2b:f8:f0:
af:f6:83:1e:3e:30:f0:be:92:5a:2e:3d:3a:e9:3e:
e7:fa:3a:68:8d:23:e0:85:13:05:af:80:11:bd:4b:
c7:48:b2:ef:56:43:c0:1e:c5:ae:e7:1e:61:c3:21:
68:4a:06:b4:5c:29:1b:9f:0a:40:01:bd:fc:7d:e3:
0d:e9:f2:9a:bf:bc:ac:df:84:54:c9:3a:ef:a4:15:
58:8c:d8:d9:a3:4c:22:bd:83:e6:bb:fe:bb:c7:67:
cb:ce:66:67:08:6f:36:41:d7:b1:98:61:d7:5a:e0:
09:65:8e:ae:62:62:98:78:da:8d:57:d2:58:d3:61:
e9:15:69:00:b2:29:73:0f:87:f6:a2:7b:05:8f:40:
35:4a:93:b8:ee:9a:2f:2d:54:a4:07:a4:f4:96:99:
61:37:d1:57:4b:b6:7a:fe:c1:93:ad:5b:1b:ab:d2:
ab:62:fd:cc:17:2a:18:91:31:05:21:de:aa:40:5b:
39:8b:62:58:5b:f8:76:aa:f8:d1:5e:9d:a1:3c:ac:
be:b9:bf:c1:29:93:6e:ea:a2:a3:89:9d:ec:b7:69:
41:0a:f6:df:0d:27:63:40:5f:9c:6a:15:70:dc:9c:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:2B:29:99:60:15:2D:3E:D9:B9:68:40:E0:25:E0:1E:08:0E:DC
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/nkIrKZlgFS0-2bloQOAl4B4IDtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.15.0/24
137.31.24.0/22
137.31.49.0/24
137.31.60.0/23
137.31.80.0/21
137.31.101.0-137.31.111.255
137.31.114.0/23
137.31.119.0-137.31.129.255
137.31.141.0/24
137.31.157.0-137.31.158.255
137.31.160.0/22
137.31.167.0-137.31.168.255
137.31.176.0/23
137.31.187.0/24
137.31.190.0/23
147.161.128.0/23
159.254.58.0-159.254.61.255
159.254.64.0/22
159.254.69.0/24
159.254.84.0-159.254.86.255
159.254.92.0-159.254.97.255
159.254.99.0-159.254.100.255
159.254.182.0-159.254.185.255
159.254.202.0/24
159.254.209.0/24
159.254.217.0/24
159.254.220.0/23
159.254.240.0/23
164.137.4.0-164.137.53.255
220.42.0.0/15
IPv6:
2a03:eec0:3212::/48
2a03:eec0:321b::/48
2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:4b:f8:00:d5:14:e2:7d:1c:17:a9:c0:66:33:08:f5:94:e9:
c6:69:99:ae:6c:3c:fa:5a:27:1e:f5:26:a6:8f:3b:42:9f:cf:
46:24:a4:d3:10:a1:69:5a:c6:e7:37:f7:84:98:ea:7b:8c:71:
d3:70:5a:dd:38:b1:b6:79:2d:00:1c:c3:24:49:d0:26:9e:6a:
93:19:b6:23:df:c2:0a:82:13:d0:ff:7b:4d:9b:de:09:8e:62:
ba:6f:db:44:09:4e:14:6e:ba:d2:3a:2b:d2:0e:2a:49:07:0e:
97:38:2f:cf:dc:12:04:43:2f:1c:ba:1f:fb:04:60:24:c2:99:
99:d4:69:1f:1d:f9:0f:de:82:87:4d:85:18:c8:96:83:3e:5c:
4c:bd:18:66:77:77:14:ac:d1:f0:ac:45:56:96:0b:47:21:7c:
78:97:c3:4a:f3:f0:69:0f:b4:cf:fa:aa:a5:f1:18:8b:7f:84:
90:ea:c0:c4:39:e6:e3:7f:4e:6f:e5:16:72:e9:26:01:05:ae:
55:1e:c4:f9:f5:7d:f7:8e:d7:d7:c1:db:65:7d:c8:87:58:00:
e2:3b:64:d6:ce:7a:ad:34:1a:97:19:4b:16:08:bc:67:0c:82:
34:f5:9c:54:ad:c3:68:4b:37:16:50:47:3e:67:f6:d3:ec:91:
fd:12:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:05 2026 by rpki-client