Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4BQXk5716zNZHcWzvDUxZcGl0BM.roa
File: 4BQXk5716zNZHcWzvDUxZcGl0BM.roa (raw, json)
Hash identifier: R4hLI7eeX89rYYWHrE96l+KkDlzpYo19YYJpTKH347k=
Subject key identifier: E0:14:17:93:9E:F5:EB:33:59:1D:C5:B3:BC:35:31:65:C1:A5:D0:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DAA784E101D493D1F375E8B9A17CD37C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4BQXk5716zNZHcWzvDUxZcGl0BM.roa
Signing time: Sat 14 Nov 2026 15:22:53 +0000
ROA not before: Sat 14 Nov 2026 15:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.8.0/21 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.82.0/23 maxlen: 23
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.152.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.164.0/24 maxlen: 24
31.56.165.0/24 maxlen: 24
31.56.166.0/24 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.193.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.217.0/24 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.237.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.12.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.112.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.131.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.137.0/24 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.159.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.177.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/23 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.242.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.60.0/22 maxlen: 24
31.58.60.0/24 maxlen: 24
31.58.61.0/24 maxlen: 24
31.58.62.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.98.0/24 maxlen: 24
31.58.116.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.222.0/23 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.72.0/22 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.117.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:a7:84:e1:01:d4:93:d1:f3:75:e8:b9:a1:7c:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 14 15:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e01417939ef5eb33591dc5b3bc353165c1a5d013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f0:2e:f6:32:b0:a7:7d:cc:8c:5c:84:2f:8f:
50:f7:9c:b7:52:cc:c3:2b:27:33:68:27:6a:50:b8:
53:d6:41:ff:29:96:eb:70:99:eb:ca:b6:f9:ab:d5:
f9:b4:f5:94:81:c8:3d:fe:7d:09:b3:ca:1f:91:81:
40:fe:e4:7f:ce:44:95:ba:d9:87:ac:da:5c:5a:5c:
d8:83:02:b6:85:bc:ec:a0:3a:e1:29:c5:79:16:f1:
d2:cc:28:65:95:08:88:2e:ec:3d:90:d1:5a:9f:58:
d2:73:a8:60:3c:ce:4e:06:e0:bc:a4:3a:21:97:9d:
5d:b8:6b:4d:6b:62:63:6c:d5:88:6c:d1:c0:41:0d:
f0:cb:7e:cd:79:f8:13:17:f9:6e:52:87:a7:aa:7b:
ba:78:c2:ef:b5:09:03:64:fb:31:7a:34:d9:32:49:
ea:41:dd:73:3b:b2:70:77:09:e0:e1:5e:46:2e:8d:
28:3a:16:57:2f:5d:c9:2c:9b:aa:8d:e7:b1:fb:a6:
1c:a4:4a:28:eb:a6:98:50:1c:82:a1:8a:12:d1:e9:
7f:1f:42:70:09:ac:b7:1e:0f:17:09:04:1b:39:ed:
2e:91:16:c9:c2:02:3c:9a:08:c9:96:f0:0f:1c:e7:
61:12:b5:f8:ee:1e:fe:e1:8d:9b:b3:10:59:ed:ff:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:17:93:9E:F5:EB:33:59:1D:C5:B3:BC:35:31:65:C1:A5:D0:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4BQXk5716zNZHcWzvDUxZcGl0BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.4.0/23
31.56.8.0/21
31.56.28.0/22
31.56.46.0/24
31.56.73.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.142.0/23
31.56.148.0-31.56.153.255
31.56.160.0/21
31.56.180.0/23
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.217.0-31.56.218.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.6.0/24
31.57.8.0/24
31.57.11.0-31.57.15.255
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.112.0/24
31.57.120.0/21
31.57.131.0-31.57.133.255
31.57.136.0/21
31.57.146.0/23
31.57.155.0/24
31.57.159.0/24
31.57.167.0-31.57.171.255
31.57.176.0-31.57.187.255
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.207.0-31.57.227.255
31.57.232.0/22
31.57.242.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.50.0-31.58.55.255
31.58.60.0-31.58.65.255
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.116.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.57.0/24
31.59.72.0/21
31.59.96.0/22
31.59.109.0-31.59.110.255
31.59.112.0/21
31.59.136.0/21
31.59.172.0/24
31.59.196.0-31.59.203.255
31.59.215.0/24
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
31.59.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:45:d8:77:ff:53:b3:38:5f:28:6f:ae:46:8c:bd:fb:76:ff:
e4:ba:00:d4:0a:43:1f:c3:dc:06:67:46:2a:13:26:b9:20:80:
6d:f3:09:c8:8e:63:a3:b9:c8:04:81:38:dc:42:40:db:b8:d1:
81:25:26:a2:5d:15:41:b0:b1:f5:8e:7a:b3:d3:21:62:43:f2:
09:03:e5:22:da:7b:26:ca:c0:60:65:9a:5c:17:48:2d:b1:fb:
be:a5:07:9e:5d:3b:5f:58:9e:31:2f:75:30:cd:2d:f4:17:36:
a0:a0:4f:75:39:21:ef:aa:c3:0d:c5:57:8a:34:f6:47:3e:3f:
10:63:34:df:39:21:7c:5f:23:70:03:31:bb:3e:50:f5:5b:7d:
d5:b8:46:5b:58:ee:66:fa:87:36:36:76:2d:68:1f:c6:d7:b3:
d3:66:5e:74:8d:82:9a:9f:fd:f7:0f:f4:90:e0:c9:80:c9:78:
c1:3c:b2:be:78:f3:ae:aa:26:cb:7b:d4:6c:7b:13:6b:49:b1:
0f:5d:fb:5b:0f:87:ec:d9:de:1a:0e:1a:60:c1:86:82:68:dd:
66:4f:18:1f:d1:1a:ef:d2:71:c5:39:d7:75:30:dc:05:20:cf:
e3:20:a8:1e:d2:c6:ab:92:fe:3e:3c:6a:b0:41:9f:ff:8b:82:
4d:bf:13:55
-----BEGIN CERTIFICATE-----
MIIHMzCCBhugAwIBAgISAaHap4ThAdST0fN16LmhfNN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTE0MTUyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDE0MTc5MzllZjVlYjMzNTkxZGM1YjNiYzM1MzE2NWMxYTVkMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vAu9jKwp33MjFyEL49Q95y3UszD
KyczaCdqULhT1kH/KZbrcJnryrb5q9X5tPWUgcg9/n0Js8ofkYFA/uR/zkSVutmH
rNpcWlzYgwK2hbzsoDrhKcV5FvHSzChllQiILuw9kNFan1jSc6hgPM5OBuC8pDoh
l51duGtNa2JjbNWIbNHAQQ3wy37NefgTF/luUoenqnu6eMLvtQkDZPsxejTZMknq
Qd1zO7Jwdwng4V5GLo0oOhZXL13JLJuqjeex+6YcpEoo66aYUByCoYoS0el/H0Jw
Cay3Hg8XCQQbOe0ukRbJwgI8mgjJlvAPHOdhErX47h7+4Y2bsxBZ7f8BTwIDAQAB
o4IEPzCCBDswHQYDVR0OBBYEFOAUF5Oe9eszWR3Fs7w1MWXBpdATMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNEJRWGs1NzE2ek5aSGNXenZEVXhaY0dsMEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICUwYIKwYBBQUHAQcBAf8EggJCMIICPjCCAjoEAgABMIIC
MgMEAB84AgMEAR84BAMEAx84CAMEAh84HAMEAB84LgMEAB84SQMEAh84UAMEAR84
WgMEBB84YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQBHziOMAwDBAIfOJQDBAEfOJgD
BAMfOKADBAEfOLQwDAMEAR84vgMEAh84wAMEAh84yAMEAx840DAMAwQAHzjZAwQA
HzjaAwQBHzjcAwQBHzjgAwQCHzjkAwQCHzjsAwQAHzkGAwQAHzkIMAwDBAAfOQsD
BAQfOQADBAMfORgDBAEfOSYwDAMEAh85NAMEBh85AAMEAR85XgMEAB85cAMEAx85
eDAMAwQAHzmDAwQBHzmEAwQDHzmIAwQBHzmSAwQAHzmbAwQAHzmfMAwDBAAfOacD
BAIfOagwDAMEBB85sAMEAh85uDAMAwQAHzm/AwQCHznAAwQAHznFAwQBHznIMAwD
BAAfOc8DBAIfOeADBAIfOegDBAAfOfIDBAIfOfwwDAMEAR86IgMEAx86IDAMAwQB
HzoyAwQDHzowMAwDBAIfOjwDBAEfOkADBAIfOkQDBAIfOlQDBAIfOmADBAIfOnQD
BAIfOpgDBAIfOqwwDAMEAh863AMEAh864AMEAB865wMEAh87NAMEAB87OQMEAx87
SAMEAh87YDAMAwQAHzttAwQAHztuAwQDHztwAwQDHzuIAwQAHzusMAwDBAIfO8QD
BAIfO8gDBAAfO9cDBAIfO+ADBAAfO+YDBAIfO+gDBAAfO/4wDQYJKoZIhvcNAQEL
BQADggEBAItF2Hf/U7M4XyhvrkaMvft2/+S6ANQKQx/D3AZnRioTJrkggG3zCciO
Y6O5yASBONxCQNu40YElJqJdFUGwsfWOerPTIWJD8gkD5SLaeybKwGBlmlwXSC2x
+76lB55dO19YnjEvdTDNLfQXNqCgT3U5Ie+qww3FV4o09kc+PxBjNN85IXxfI3AD
Mbs+UPVbfdW4RltY7mb6hzY2di1oH8bXs9NmXnSNgpqf/fcP9JDgyYDJeME8sr54
866qJst71Gx7E2tJsQ9d+1sPh+zZ3hoOGmDBhoJo3WZPGB/RGu/SccU513Uw3AUg
z+MgqB7SxquS/j48arBBn/+Lgk2/E1U=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:59 2026 by rpki-client