Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/pjXUNlwuTozhGGgjxXS6q27O-Fk.roa
File: pjXUNlwuTozhGGgjxXS6q27O-Fk.roa (raw, json)
Hash identifier: fiwhOZAS8BnkvaKiYOb9zby/Luddgw3KLJYUYwjn0M8=
Subject key identifier: A6:35:D4:36:5C:2E:4E:8C:E1:18:68:23:C5:74:BA:AB:6E:CE:F8:59
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A0E9B2F48D9919A06F533579497F820445
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/pjXUNlwuTozhGGgjxXS6q27O-Fk.roa
Signing time: Mon 28 Sep 2026 20:26:54 +0000
ROA not before: Mon 28 Sep 2026 20:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 137.31.17.0/24 maxlen: 24
137.31.18.0/24 maxlen: 24
137.31.19.0/24 maxlen: 24
137.31.44.0/24 maxlen: 24
137.31.50.0/24 maxlen: 24
137.31.63.0/24 maxlen: 24
137.31.64.0/23 maxlen: 24
137.31.66.0/23 maxlen: 24
137.31.68.0/23 maxlen: 24
137.31.70.0/23 maxlen: 24
137.31.72.0/23 maxlen: 24
137.31.118.0/24 maxlen: 24
137.31.132.0/24 maxlen: 24
137.31.136.0/23 maxlen: 24
137.31.138.0/23 maxlen: 24
137.31.152.0/23 maxlen: 24
137.31.156.0/24 maxlen: 24
137.31.164.0/24 maxlen: 24
137.31.172.0/24 maxlen: 24
137.31.173.0/24 maxlen: 24
137.31.174.0/24 maxlen: 24
137.31.175.0/24 maxlen: 24
137.31.209.0/24 maxlen: 24
147.161.192.0/23 maxlen: 24
147.161.194.0/23 maxlen: 24
147.161.196.0/23 maxlen: 24
147.161.198.0/23 maxlen: 24
147.161.200.0/23 maxlen: 24
147.161.204.0/23 maxlen: 24
147.161.208.0/23 maxlen: 24
147.161.210.0/23 maxlen: 24
147.161.212.0/23 maxlen: 24
147.161.214.0/23 maxlen: 24
147.161.216.0/23 maxlen: 24
147.161.218.0/23 maxlen: 24
147.161.220.0/23 maxlen: 24
159.254.98.0/24 maxlen: 24
159.254.103.0/24 maxlen: 24
159.254.204.0/24 maxlen: 24
164.137.56.0/24 maxlen: 24
164.137.57.0/24 maxlen: 24
164.137.58.0/24 maxlen: 24
164.137.59.0/24 maxlen: 24
164.137.60.0/24 maxlen: 24
164.137.69.0/24 maxlen: 24
164.137.109.0/24 maxlen: 24
164.137.159.0/24 maxlen: 24
164.137.160.0/24 maxlen: 24
164.137.161.0/24 maxlen: 24
164.137.162.0/24 maxlen: 24
164.137.163.0/24 maxlen: 24
164.137.164.0/24 maxlen: 24
164.137.165.0/24 maxlen: 24
164.137.166.0/24 maxlen: 24
164.137.167.0/24 maxlen: 24
164.137.168.0/24 maxlen: 24
164.137.169.0/24 maxlen: 24
164.137.170.0/24 maxlen: 24
164.137.171.0/24 maxlen: 24
164.137.172.0/24 maxlen: 24
164.137.173.0/24 maxlen: 24
164.137.174.0/24 maxlen: 24
164.137.175.0/24 maxlen: 24
164.137.176.0/24 maxlen: 24
164.137.177.0/24 maxlen: 24
164.137.178.0/24 maxlen: 24
164.137.179.0/24 maxlen: 24
164.137.180.0/24 maxlen: 24
164.137.181.0/24 maxlen: 24
164.137.182.0/24 maxlen: 24
164.137.183.0/24 maxlen: 24
164.137.184.0/24 maxlen: 24
164.137.185.0/24 maxlen: 24
164.137.186.0/24 maxlen: 24
164.137.187.0/24 maxlen: 24
164.137.188.0/24 maxlen: 24
164.137.189.0/24 maxlen: 24
164.137.190.0/24 maxlen: 24
164.137.191.0/24 maxlen: 24
164.137.192.0/24 maxlen: 24
2a03:eec0:3211::/48 maxlen: 48
2a03:eec0:3216::/48 maxlen: 48
2a03:eec0:3223::/48 maxlen: 48
2a03:eec0:3224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:b2:f4:8d:99:19:a0:6f:53:35:79:49:7f:82:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Sep 28 20:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a635d4365c2e4e8ce1186823c574baab6ecef859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:e4:f1:bc:25:0b:9c:60:f3:04:52:a4:32:
2e:09:6c:1d:b9:66:c9:d4:c5:69:40:51:54:a4:a4:
f8:bb:a0:7e:06:5a:77:17:a9:31:75:d9:7c:dd:0a:
31:49:57:1a:27:b8:2e:5e:22:85:d8:e2:24:3a:2a:
eb:0b:bc:8f:7c:34:ba:7a:cc:f7:47:86:a5:43:35:
3c:d9:3a:5d:69:5b:fe:8e:4e:9a:0b:a4:26:76:d9:
18:5a:81:52:5f:f6:83:b9:b8:d0:79:23:af:b1:6f:
b9:5e:df:6c:2d:cc:ff:6d:b4:ed:63:3b:e4:0e:8e:
c8:1e:6b:1a:c0:9e:28:67:5d:2a:63:08:f2:01:82:
22:4f:a6:0b:c9:fa:95:33:54:9e:d9:9b:62:ed:7d:
9e:a5:64:c2:48:a5:c3:bf:c6:f7:ef:99:a7:8d:ac:
8c:13:1d:a4:aa:e1:9e:25:e4:6c:e6:89:17:72:58:
04:e3:b4:71:76:80:81:3c:0a:cb:fe:19:c0:76:8b:
4b:0c:47:71:53:75:8c:bc:07:8c:ca:6e:9d:e3:77:
67:1c:05:49:b3:74:64:8b:07:8e:5c:d0:55:fc:e6:
3b:0c:f8:1c:56:95:9c:94:a6:71:2b:db:14:7c:4c:
b7:b8:2f:8b:4d:05:9e:f7:1a:82:f8:ac:f3:e7:42:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:D4:36:5C:2E:4E:8C:E1:18:68:23:C5:74:BA:AB:6E:CE:F8:59
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/pjXUNlwuTozhGGgjxXS6q27O-Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.31.17.0-137.31.19.255
137.31.44.0/24
137.31.50.0/24
137.31.63.0-137.31.73.255
137.31.118.0/24
137.31.132.0/24
137.31.136.0/22
137.31.152.0/23
137.31.156.0/24
137.31.164.0/24
137.31.172.0/22
137.31.209.0/24
147.161.192.0-147.161.201.255
147.161.204.0/23
147.161.208.0-147.161.221.255
159.254.98.0/24
159.254.103.0/24
159.254.204.0/24
164.137.56.0-164.137.60.255
164.137.69.0/24
164.137.109.0/24
164.137.159.0-164.137.192.255
IPv6:
2a03:eec0:3211::/48
2a03:eec0:3216::/48
2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:8a:f2:da:c7:31:21:c1:84:ab:74:1c:b1:3d:d1:5b:91:6a:
3d:90:c0:09:35:5f:4e:5a:32:bc:54:03:c5:43:d7:0f:d3:3f:
9e:3f:6b:74:25:4b:a4:e5:24:82:31:dc:67:8d:7e:d4:02:99:
c8:f9:2f:90:41:4e:98:df:5f:b4:f7:ae:d4:47:4c:70:74:bc:
fe:35:f2:37:75:6e:2a:bd:85:44:d7:1d:87:73:ac:70:15:5b:
83:0e:c1:b7:a0:68:9c:28:95:e9:5a:23:c7:6e:31:ce:13:5d:
3d:7a:13:fb:63:6b:69:fb:42:02:83:ef:fc:20:61:3d:82:2a:
49:d7:02:3e:64:f1:0a:d9:5f:02:52:5d:3f:9b:17:d8:bc:cb:
12:22:e6:85:87:b0:8e:be:87:9e:8d:54:b7:30:c9:4f:0f:c9:
77:13:f0:e2:f8:49:30:84:cf:e6:cb:47:2a:37:23:b2:40:c9:
73:a5:11:19:7a:51:22:41:bf:a7:70:73:4a:20:63:fd:cd:11:
23:0a:df:0d:17:a6:5d:f4:e2:26:d5:1b:9f:3d:60:74:81:5c:
ad:0f:e6:06:10:3d:62:d7:77:89:c0:38:05:15:55:b2:59:54:
e0:1e:25:0e:6e:23:9b:83:7b:07:31:ab:32:74:d4:99:2e:86:
85:ce:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:42:16 2026 by rpki-client