Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIAw45vC29CL77z5y87V8Kr9KM0.roa
File: AIAw45vC29CL77z5y87V8Kr9KM0.roa (raw, json)
Hash identifier: M6QCQJ3loXvgwfAOB7fMC5zKkLJRrv2FR2skXjmrtYY=
Subject key identifier: 00:80:30:E3:9B:C2:DB:D0:8B:EF:BC:F9:CB:CE:D5:F0:AA:FD:28:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CAAB2C3E5E782C75691F78E4761934F9D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIAw45vC29CL77z5y87V8Kr9KM0.roa
Signing time: Sun 01 Mar 2026 18:39:28 +0000
ROA not before: Sun 01 Mar 2026 18:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.58.116.0/22 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.92.0/22 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:b2:c3:e5:e7:82:c7:56:91:f7:8e:47:61:93:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 1 18:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008030e39bc2dbd08befbcf9cbced5f0aafd28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:7a:a6:e1:9c:e0:b0:a9:62:24:60:9d:40:
fd:cd:82:d0:11:18:fb:0a:e5:c8:1c:8b:09:61:05:
82:b4:30:de:45:8c:c8:b4:83:ec:6b:05:93:a1:4a:
87:87:cf:99:fd:63:c2:e5:e2:29:83:90:69:f4:81:
cb:12:7b:af:02:73:cb:9b:f0:9d:4d:3f:ab:1b:56:
41:01:cd:dc:af:7f:aa:a3:35:ee:eb:a6:cd:99:9b:
e7:64:15:5f:62:75:86:0b:4e:8b:02:7b:e5:1e:02:
18:d6:88:03:c5:c5:2d:19:49:36:3a:7e:b8:22:6a:
9d:fa:9a:dd:4e:b9:e9:06:c2:6f:bf:0b:d0:07:31:
25:9b:88:e8:ce:ac:ef:57:69:ca:1f:e5:a7:50:5b:
20:aa:8e:87:31:d5:f3:f1:e5:7b:6b:22:de:22:e1:
6a:52:bf:19:8e:b9:00:2b:6e:ce:c4:7e:99:f0:14:
26:e4:b5:b7:e4:ec:19:77:ef:97:a5:ab:14:79:47:
82:84:ab:19:45:72:8a:46:72:34:30:a3:a0:39:7f:
e1:65:89:1c:3d:1d:e8:25:f9:bb:7d:c8:de:bb:ad:
c4:47:b3:fd:49:83:8c:a9:1e:5c:1b:b6:16:95:a0:
a9:35:ef:1f:fd:37:2f:2c:7c:fb:7a:4c:3e:52:71:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:30:E3:9B:C2:DB:D0:8B:EF:BC:F9:CB:CE:D5:F0:AA:FD:28:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIAw45vC29CL77z5y87V8Kr9KM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.119.0/24
31.56.128.0-31.56.137.255
31.56.207.0/24
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.58.116.0/22
31.59.0.0-31.59.9.255
31.59.92.0/22
31.59.246.0/23
Signature Algorithm: sha256WithRSAEncryption
12:2a:e3:63:c6:43:b7:40:86:15:71:11:94:c8:37:c3:26:9a:
82:dd:56:6f:2f:c0:43:5e:a4:c7:3b:52:72:45:d5:fb:de:44:
20:e6:db:46:db:92:16:f5:52:13:4f:19:9e:58:11:de:ee:40:
d4:53:6e:50:f9:a8:e8:20:9c:10:d9:c7:66:fa:34:c8:b4:d4:
d3:f1:8a:bc:48:16:cb:eb:ac:ca:1f:01:8e:2d:6f:e4:08:62:
e8:9b:67:31:de:68:c1:f0:34:3d:fe:7f:be:10:72:a5:de:64:
fc:8c:2c:5d:4e:e8:5f:46:d9:dd:b0:2e:5f:30:06:e6:81:a2:
22:55:37:85:e0:8c:34:4a:7a:b4:ae:f9:5d:a6:6b:8d:a0:49:
91:31:45:39:78:3e:1c:36:73:8e:07:d7:9d:00:11:37:24:d1:
45:91:c3:fc:68:2d:b3:97:c3:b4:a7:02:02:d9:8a:b2:c6:c7:
39:f7:97:6e:16:c3:81:ad:dd:a3:66:0d:46:24:64:72:64:9b:
82:dc:cc:ac:e7:e4:bc:c4:fb:7d:69:2b:5d:9b:ac:d8:36:95:
01:7a:13:06:cd:3b:5f:37:8b:60:8c:cd:2a:13:a2:fd:42:39:
3e:82:07:b7:ec:c0:82:35:94:61:84:b0:94:06:18:63:35:51:
5b:ca:65:1c
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZyqssPl54LHVpH3jkdhk0+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzAxMTgzOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDgwMzBlMzliYzJkYmQwOGJlZmJjZjljYmNlZDVmMGFhZmQyOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAd6puGc4LCpYiRgnUD9zYLQERj7
CuXIHIsJYQWCtDDeRYzItIPsawWToUqHh8+Z/WPC5eIpg5Bp9IHLEnuvAnPLm/Cd
TT+rG1ZBAc3cr3+qozXu66bNmZvnZBVfYnWGC06LAnvlHgIY1ogDxcUtGUk2On64
Imqd+prdTrnpBsJvvwvQBzElm4jozqzvV2nKH+WnUFsgqo6HMdXz8eV7ayLeIuFq
Ur8ZjrkAK27OxH6Z8BQm5LW35OwZd++XpasUeUeChKsZRXKKRnI0MKOgOX/hZYkc
PR3oJfm7fcjeu63ER7P9SYOMqR5cG7YWlaCpNe8f/TcvLHz7ekw+UnE0OQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFACAMOObwtvQi++8+cvO1fCq/SjNMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQUlBdzQ1dkMyOUNMNzd6NXk4N1Y4S3I5S00wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAHzgFAwQA
Hzh3MAwDBAcfOIADBAEfOIgDBAAfOM8wCwMEAR849gMDAB84MAwDBAAfOSkDBAAf
OSoDBAAfOVIDBAIfOnQwCwMDAB87AwQBHzsIAwQCHztcAwQBHzv2MA0GCSqGSIb3
DQEBCwUAA4IBAQASKuNjxkO3QIYVcRGUyDfDJpqC3VZvL8BDXqTHO1JyRdX73kQg
5ttG25IW9VITTxmeWBHe7kDUU25Q+ajoIJwQ2cdm+jTItNTT8Yq8SBbL66zKHwGO
LW/kCGLom2cx3mjB8DQ9/n++EHKl3mT8jCxdTuhfRtndsC5fMAbmgaIiVTeF4Iw0
Snq0rvldpmuNoEmRMUU5eD4cNnOOB9edABE3JNFFkcP8aC2zl8O0pwIC2Yqyxsc5
95duFsOBrd2jZg1GJGRyZJuC3Mys5+S8xPt9aStdm6zYNpUBehMGzTtfN4tgjM0q
E6L9Qjk+gge37MCCNZRhhLCUBhhjNVFbymUc
-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:07 2026 by rpki-client