Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnfZ-PACxEfbumZhw8ckUlIaAhs.roa
File: AnfZ-PACxEfbumZhw8ckUlIaAhs.roa (raw, json)
Hash identifier: pskSK+g8c0duMfCyYuzkFFztDFxw719aU2sTPdHeLjY=
Subject key identifier: 02:77:D9:F8:F0:02:C4:47:DB:BA:66:61:C3:C7:24:52:52:1A:02:1B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D3DD62A865744925F74FA3A13479991BE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnfZ-PACxEfbumZhw8ckUlIaAhs.roa
Signing time: Mon 30 Mar 2026 08:22:18 +0000
ROA not before: Mon 30 Mar 2026 08:22:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.4.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.80.0/24 maxlen: 24
31.56.82.0/23 maxlen: 23
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.97.0/24 maxlen: 24
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.100.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.141.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.239.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.31.0/24 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.54.0/24 maxlen: 24
31.57.55.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.96.0/24 maxlen: 24
31.57.102.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.36.0/24 maxlen: 24
31.58.37.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.53.0/24 maxlen: 24
31.58.55.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.155.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.212.0/24 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.98.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.116.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.220.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:d6:2a:86:57:44:92:5f:74:fa:3a:13:47:99:91:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 30 08:22:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0277d9f8f002c447dbba6661c3c72452521a021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:85:8d:b6:b0:a4:8d:83:52:96:64:42:11:
8d:3a:c6:e7:58:42:6f:db:eb:48:53:52:55:14:8d:
07:d5:bd:97:2c:bc:93:10:e1:45:fc:50:1c:30:73:
7a:f5:88:6e:84:45:70:aa:20:7f:1a:3a:1a:8e:cc:
f4:f3:d5:10:17:30:63:10:69:42:4a:ef:49:c6:32:
72:c5:e4:7d:d5:a4:08:b7:7e:36:94:04:41:b1:ea:
a0:01:8e:70:79:da:a9:5d:c2:b6:85:7e:7a:8d:37:
d1:78:d7:da:a9:6c:31:4d:00:3b:eb:3a:85:45:d5:
0e:43:1c:b7:b4:2a:0f:99:f9:2a:27:d5:c2:2a:52:
61:9b:b2:8c:9f:d7:1a:02:a7:3b:2f:aa:09:b8:59:
9b:92:f9:94:83:1f:58:2b:ce:08:d8:ed:8b:93:f4:
da:63:44:e4:82:60:e5:48:18:54:5b:e7:b6:5e:e6:
48:da:c8:17:93:23:3d:7f:a3:c1:6a:31:b4:ef:0c:
5f:17:97:07:9a:59:52:a2:cd:aa:a5:b1:e0:88:a7:
7d:6e:96:f8:ff:61:74:31:0e:de:81:d6:1c:83:25:
51:9a:71:98:8f:ca:8d:e8:89:5c:fe:f7:4e:65:7e:
e3:31:f4:95:13:da:39:62:c1:df:b0:de:18:e9:0d:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:D9:F8:F0:02:C4:47:DB:BA:66:61:C3:C7:24:52:52:1A:02:1B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AnfZ-PACxEfbumZhw8ckUlIaAhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.59.0/24
31.56.68.0/23
31.56.80.0/22
31.56.87.0/24
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.141.0/24
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.94.0-31.57.96.255
31.57.102.0/24
31.57.120.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.152.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0-31.57.196.255
31.57.200.0-31.57.202.255
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.45.0/24
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.103.0/24
31.58.139.0/24
31.58.146.0/24
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.76.0/22
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.172.0/24
31.59.196.0-31.59.211.255
31.59.215.0/24
31.59.220.0-31.59.227.255
31.59.232.0/22
31.59.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4e:b5:23:53:31:e2:06:1d:54:7f:67:33:e6:84:ca:e6:11:
9a:f1:f3:29:99:5e:9b:9f:3e:6c:2c:1c:d7:69:35:4f:bd:88:
e2:c6:2d:b9:80:34:6c:35:6b:d7:5b:a1:35:71:31:13:8d:51:
4e:35:75:df:0c:fc:89:22:a6:3a:d0:22:ae:5c:ac:42:e3:dc:
b6:81:88:86:11:2f:e1:25:9b:86:86:51:ce:4a:f8:ab:d6:7b:
43:cc:b5:37:70:6e:2c:5d:cb:5d:3a:16:81:6c:3d:4d:f5:d8:
37:28:68:e7:4a:94:97:07:f6:fb:68:51:9f:bf:38:08:77:40:
80:c2:1a:02:55:a5:92:f7:31:93:77:aa:78:5b:22:82:1e:3c:
35:4f:10:5c:83:2d:d5:ca:54:6d:d5:4d:94:d9:c8:fe:75:41:
86:ad:f3:f9:c4:9c:25:98:64:6f:5e:5e:ae:4b:31:f6:4e:c6:
52:0a:02:33:26:31:fe:50:6d:46:df:31:d2:8d:80:7d:3c:9f:
96:0c:17:99:cb:62:f5:30:f8:fe:78:52:63:d3:ae:fd:09:e1:
35:94:e5:5e:f3:69:a1:5a:0c:90:7e:11:13:6f:98:f2:80:62:
89:85:09:11:82:41:d2:0b:0c:52:03:2c:71:2c:cc:b2:3f:e1:
fa:ce:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:18:17 2026 by rpki-client