Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_wFSoEHVISJa2FSRBFOVaNxWO0.roa
File: M_wFSoEHVISJa2FSRBFOVaNxWO0.roa (raw, json)
Hash identifier: Cgs0oyYML8Z28WCiqiRJh0n4FTugYWHhu6FA6zNOI9s=
Subject key identifier: 33:FC:05:4A:81:07:54:84:89:6B:61:52:44:11:4E:55:A3:71:58:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A359D77AD080997D58581F210E53B6585
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_wFSoEHVISJa2FSRBFOVaNxWO0.roa
Signing time: Thu 30 Oct 2025 14:55:03 +0000
ROA not before: Thu 30 Oct 2025 14:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.221.0/24 maxlen: 24
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:9d:77:ad:08:09:97:d5:85:81:f2:10:e5:3b:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 14:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33fc054a81075484896b615244114e55a37158ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:c6:28:9c:6f:7d:64:56:a8:80:8f:6c:f8:
b6:8b:8f:1e:03:87:7c:c1:57:4f:97:46:8d:10:2a:
ed:4f:79:b4:a4:77:aa:5c:75:d1:83:74:3a:f3:6d:
65:ca:b9:9d:76:92:4b:d1:15:08:57:b4:3d:9a:54:
d2:24:02:05:77:f1:81:0b:c5:ca:37:b9:60:1b:ec:
de:81:e1:f0:7e:04:bc:b9:87:6a:58:7f:7a:83:01:
68:e0:1d:a0:1d:cc:1e:c1:f9:3d:3b:39:c7:88:14:
9b:89:86:56:3d:fe:3b:d3:87:f1:81:b6:bc:e3:94:
08:db:43:b4:f3:54:cd:57:bf:01:70:e3:6a:6b:b4:
ca:0c:4a:ac:31:a1:71:1e:b5:8a:6c:17:6e:b8:f0:
47:1c:21:f4:7f:57:c4:01:d3:ee:55:a7:57:40:dc:
56:25:e2:05:e7:84:ab:69:c7:25:ca:18:de:f6:93:
3d:56:aa:46:99:37:a8:e0:cb:b3:ab:8e:d0:2b:7c:
c1:2a:cc:07:30:f4:c9:69:d3:52:d9:69:00:cd:5c:
a4:d4:e3:01:8e:69:20:36:48:6b:53:e8:e1:72:95:
8e:f6:2c:04:5a:70:1c:44:30:db:42:0e:4a:65:bf:
c8:92:57:86:e7:d1:87:d7:4f:1c:cc:20:bc:8c:da:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FC:05:4A:81:07:54:84:89:6B:61:52:44:11:4E:55:A3:71:58:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_wFSoEHVISJa2FSRBFOVaNxWO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.35.0/24
31.56.43.0/24
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:91:fb:50:bc:e1:e2:4e:79:44:65:73:67:8f:75:d1:83:64:
cd:d8:76:f3:66:94:f8:28:6c:51:08:e0:cf:d5:e2:2b:f3:c5:
49:43:4a:28:08:64:44:b8:2d:86:a0:c2:f4:7c:4e:4e:e7:81:
99:42:52:cf:09:00:a1:38:45:2d:b0:ef:ef:af:8e:a7:a9:e8:
22:d8:74:b1:07:8b:e4:bc:e1:9b:f5:78:21:d0:51:08:25:33:
f1:41:60:0c:ba:47:f4:6d:ce:47:10:7c:1f:9b:96:de:08:99:
39:85:3c:f0:88:2c:ff:f7:c1:24:f6:75:cc:99:75:a1:be:4a:
a9:96:3e:05:00:8a:6c:b0:c6:14:8b:13:b2:80:ff:30:cb:71:
fb:10:90:9f:34:70:8a:f3:fb:33:d5:9a:7b:17:d4:06:f9:63:
8b:f4:b2:02:92:64:da:c7:2d:ec:fb:30:b5:b7:e3:09:87:4f:
e8:22:f0:be:70:6e:3d:e9:78:ff:a3:06:f1:e2:dd:29:9e:50:
11:ba:7d:e3:31:9a:67:d9:bd:23:e7:b5:02:a5:01:c9:8c:a1:
1d:00:05:cf:50:a7:a5:33:84:f5:07:1e:9f:f7:05:47:90:fc:
6b:e9:61:07:cc:e1:a2:5e:44:15:37:a1:8f:ad:98:fe:80:06:
00:c5:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:28:45 2025 by rpki-client