Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ARqSgnZzhFHq4Lb_pYGzyyoS8OQ.roa
File: ARqSgnZzhFHq4Lb_pYGzyyoS8OQ.roa (raw, json)
Hash identifier: r5pC1lZs5kvtfkxXpUxkfEXoZ08n6T52C2OiYIEJGVQ=
Subject key identifier: 01:1A:92:82:76:73:84:51:EA:E0:B6:FF:A5:81:B3:CB:2A:12:F0:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019941DD28238D355D528CEFD5F8BBAC9BC4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ARqSgnZzhFHq4Lb_pYGzyyoS8OQ.roa
Signing time: Sat 13 Sep 2025 06:57:16 +0000
ROA not before: Sat 13 Sep 2025 06:57:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.221.0/24 maxlen: 24
31.56.224.0/23 maxlen: 23
31.56.224.0/24 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.32.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.40.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.52.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.67.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.95.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.187.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:dd:28:23:8d:35:5d:52:8c:ef:d5:f8:bb:ac:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 13 06:57:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011a928276738451eae0b6ffa581b3cb2a12f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:85:6c:87:53:ed:3d:fe:a0:90:c4:42:39:
c4:fe:53:ea:3c:13:d9:2a:a0:91:f4:71:7a:e9:5f:
cd:55:68:3f:b4:75:e9:17:61:39:e4:d7:28:ff:72:
16:9c:e1:0b:24:06:ba:1f:63:f4:e7:6c:8e:36:a7:
83:75:6e:19:c5:70:2b:88:08:9c:3d:16:cd:61:66:
cc:76:9d:6f:a9:da:d8:56:ac:3d:cf:fd:fe:ed:ea:
3a:85:f9:b9:dd:9a:0f:0b:24:99:95:0d:84:ef:dd:
8c:e8:27:b4:26:e4:70:24:6e:25:3b:cc:cf:0c:00:
2f:47:45:ed:8b:c6:3b:52:3a:e6:98:28:b6:be:26:
e5:28:6f:06:fe:c3:24:e9:dc:2a:5f:98:44:15:11:
11:a3:29:e3:91:43:e7:59:15:03:08:15:c2:b1:fa:
36:50:b7:1d:8c:de:45:c2:7c:fb:93:c3:3a:37:40:
da:d5:c4:0d:a5:8f:87:c4:17:5c:57:2e:d2:15:8f:
b6:6e:09:40:55:da:e5:4a:4b:c1:f5:94:83:da:2f:
7a:10:71:bc:a2:a5:b1:9e:1c:42:b7:f3:d8:7f:14:
c6:ea:4c:d5:e6:35:6c:44:f7:44:83:30:9c:64:5a:
3a:62:ce:57:19:e8:e5:37:9b:4b:dd:20:c8:6d:a4:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:92:82:76:73:84:51:EA:E0:B6:FF:A5:81:B3:CB:2A:12:F0:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ARqSgnZzhFHq4Lb_pYGzyyoS8OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0-31.57.32.255
31.57.36.0-31.57.40.255
31.57.52.0-31.57.63.255
31.57.67.0/24
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
81:de:bf:83:8f:3a:85:80:28:87:c0:a2:62:43:75:4e:96:43:
0b:c8:34:4a:91:01:53:ca:3c:e7:e0:be:d5:be:da:a5:5d:28:
08:61:c9:a2:b3:f8:e2:0c:94:3c:25:56:72:7e:91:78:d6:77:
23:d6:67:84:77:73:35:3c:ec:ed:e3:23:9c:2a:a6:a7:0f:7b:
df:0b:9e:95:b7:a4:07:5e:d0:4c:bc:8b:a9:a0:c1:0c:b6:30:
be:87:0f:ba:bb:31:da:b2:d8:4e:ed:05:74:f8:b3:16:1b:12:
7a:02:75:d3:18:5a:5b:d4:1e:a6:0a:45:09:09:ed:28:b5:76:
b7:a3:19:ca:24:55:81:eb:01:28:2b:f8:8e:9b:28:b0:f2:88:
ca:1a:13:44:c9:75:cd:2e:21:73:54:53:32:16:fe:b7:38:a1:
32:33:ae:3a:6d:df:9f:cc:55:f5:aa:e5:9c:6c:01:37:ee:b1:
ae:68:79:2d:74:ed:42:f0:56:68:9f:11:b3:0a:ad:9e:67:53:
7b:f0:67:ad:5b:28:2f:b2:f4:60:9e:d2:84:86:f2:51:8d:4e:
fb:fa:0e:40:01:03:87:1c:09:69:da:28:2d:e4:7a:9f:aa:d9:
9e:17:97:55:72:69:eb:e9:03:8c:e9:e5:77:f7:c1:47:29:9e:
3b:b3:e1:ec
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISAZlB3SgjjTVdUozv1fi7rJvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwOTEzMDY1NzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFhOTI4Mjc2NzM4NDUxZWFlMGI2ZmZhNTgxYjNjYjJhMTJmMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGiFbIdT7T3+oJDEQjnE/lPqPBPZ
KqCR9HF66V/NVWg/tHXpF2E55Nco/3IWnOELJAa6H2P052yONqeDdW4ZxXAriAic
PRbNYWbMdp1vqdrYVqw9z/3+7eo6hfm53ZoPCySZlQ2E792M6Ce0JuRwJG4lO8zP
DAAvR0Xti8Y7UjrmmCi2viblKG8G/sMk6dwqX5hEFRERoynjkUPnWRUDCBXCsfo2
ULcdjN5Fwnz7k8M6N0Da1cQNpY+HxBdcVy7SFY+2bglAVdrlSkvB9ZSD2i96EHG8
oqWxnhxCt/PYfxTG6kzV5jVsRPdEgzCcZFo6Ys5XGejlN5tL3SDIbaRjEwIDAQAB
o4IDfDCCA3gwHQYDVR0OBBYEFAEakoJ2c4RR6uC2/6WBs8sqEvDkMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQVJxU2duWnpoRkhxNExiX3BZR3p5eW9TOE9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBkAYIKwYBBQUHAQcBAf8EggF/MIIBezCCAXcEAgABMIIB
bwMEAR84BAMEAh84HAMEAB84OQMEAB84RwMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQCHzi0MAwDBAIfOLwDBAIfOMADBAIfOMgDBAMfONADBAEfONwD
BAEfOOADBAIfOOQDBAIfOOwDBAIfOQwwDAMEAx85GAMEAB85IDAMAwQCHzkkAwQA
HzkoMAwDBAIfOTQDBAYfOQADBAAfOUMDBAEfOV4DBAMfOXgDBAEfOYQDBAMfOYgD
BAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85wAMEAR85yDAMAwQEHznQAwQC
HzngAwQCHznoMAsDBAEfOfoDAwEfOAMEAR86IgMEAR86MgMEAR86QAMEAh86RAME
Ah86VAMEAh86mAMEAh86rDAMAwQCHzrcAwQCHzrgAwQCHztMAwQCHztgAwQCHztw
MAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQAD
ggEBAIHev4OPOoWAKIfAomJDdU6WQwvINEqRAVPKPOfgvtW+2qVdKAhhyaKz+OIM
lDwlVnJ+kXjWdyPWZ4R3czU87O3jI5wqpqcPe98LnpW3pAde0Ey8i6mgwQy2ML6H
D7q7Mdqy2E7tBXT4sxYbEnoCddMYWlvUHqYKRQkJ7Si1drejGcokVYHrASgr+I6b
KLDyiMoaE0TJdc0uIXNUUzIW/rc4oTIzrjpt35/MVfWq5ZxsATfusa5oeS107ULw
VmifEbMKrZ5nU3vwZ61bKC+y9GCe0oSG8lGNTvv6DkABA4ccCWnaKC3kep+q2Z4X
l1VyaevpA4zp5Xf3wUcpnjuz4ew=
-----END CERTIFICATE-----
Generated at Sun Sep 14 11:55:51 2025 by rpki-client