Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz7H3Q-JwCYRTGIXNFE_aw33-9k.roa
File:                     bz7H3Q-JwCYRTGIXNFE_aw33-9k.roa (raw, json)
Hash identifier:          tkkpjjh9AHavYwVlZQ/Go1eV5sKXUgNEOCvrWwn6lj4=
Subject key identifier:   6F:3E:C7:DD:0F:89:C0:26:11:4C:62:17:34:51:3F:6B:0D:F7:FB:D9
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019D337F604FC35064F4DDA16FF94D2E2402
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz7H3Q-JwCYRTGIXNFE_aw33-9k.roa
Signing time:             Sat 28 Mar 2026 08:11:18 +0000
ROA not before:           Sat 28 Mar 2026 08:11:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.4.0/24 maxlen: 24
                          31.56.28.0/22 maxlen: 24
                          31.56.57.0/24 maxlen: 24
                          31.56.59.0/24 maxlen: 24
                          31.56.68.0/24 maxlen: 24
                          31.56.69.0/24 maxlen: 24
                          31.56.77.0/24 maxlen: 24
                          31.56.79.0/24 maxlen: 24
                          31.56.80.0/22 maxlen: 22
                          31.56.80.0/24 maxlen: 24
                          31.56.82.0/23 maxlen: 23
                          31.56.87.0/24 maxlen: 24
                          31.56.90.0/23 maxlen: 23
                          31.56.96.0/22 maxlen: 22
                          31.56.97.0/24 maxlen: 24
                          31.56.98.0/23 maxlen: 23
                          31.56.100.0/22 maxlen: 22
                          31.56.100.0/23 maxlen: 23
                          31.56.100.0/24 maxlen: 24
                          31.56.104.0/22 maxlen: 22
                          31.56.108.0/22 maxlen: 22
                          31.56.112.0/24 maxlen: 24
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.122.0/24 maxlen: 24
                          31.56.141.0/24 maxlen: 24
                          31.56.180.0/22 maxlen: 24
                          31.56.180.0/23 maxlen: 23
                          31.56.180.0/24 maxlen: 24
                          31.56.188.0/22 maxlen: 24
                          31.56.190.0/23 maxlen: 23
                          31.56.190.0/24 maxlen: 24
                          31.56.192.0/22 maxlen: 22
                          31.56.192.0/24 maxlen: 24
                          31.56.195.0/24 maxlen: 24
                          31.56.200.0/22 maxlen: 24
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.218.0/24 maxlen: 24
                          31.56.220.0/23 maxlen: 23
                          31.56.224.0/23 maxlen: 23
                          31.56.228.0/22 maxlen: 24
                          31.56.230.0/23 maxlen: 23
                          31.56.231.0/24 maxlen: 24
                          31.56.236.0/22 maxlen: 24
                          31.56.236.0/23 maxlen: 23
                          31.56.239.0/24 maxlen: 24
                          31.57.12.0/23 maxlen: 24
                          31.57.14.0/23 maxlen: 24
                          31.57.24.0/22 maxlen: 24
                          31.57.28.0/22 maxlen: 24
                          31.57.31.0/24 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.39.0/24 maxlen: 24
                          31.57.52.0/22 maxlen: 24
                          31.57.54.0/24 maxlen: 24
                          31.57.55.0/24 maxlen: 24
                          31.57.56.0/22 maxlen: 24
                          31.57.60.0/22 maxlen: 24
                          31.57.94.0/23 maxlen: 23
                          31.57.96.0/24 maxlen: 24
                          31.57.102.0/24 maxlen: 24
                          31.57.120.0/22 maxlen: 24
                          31.57.120.0/23 maxlen: 23
                          31.57.120.0/24 maxlen: 24
                          31.57.124.0/22 maxlen: 24
                          31.57.126.0/23 maxlen: 23
                          31.57.129.0/24 maxlen: 24
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.152.0/24 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.184.0/22 maxlen: 24
                          31.57.186.0/23 maxlen: 23
                          31.57.192.0/22 maxlen: 24
                          31.57.196.0/24 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.202.0/24 maxlen: 24
                          31.57.207.0/24 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.221.0/24 maxlen: 24
                          31.57.222.0/23 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.232.0/22 maxlen: 24
                          31.57.238.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.36.0/22 maxlen: 24
                          31.58.36.0/24 maxlen: 24
                          31.58.37.0/24 maxlen: 24
                          31.58.45.0/24 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.52.0/22 maxlen: 22
                          31.58.53.0/24 maxlen: 24
                          31.58.55.0/24 maxlen: 24
                          31.58.57.0/24 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.96.0/22 maxlen: 24
                          31.58.103.0/24 maxlen: 24
                          31.58.139.0/24 maxlen: 24
                          31.58.146.0/24 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.155.0/24 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.212.0/22 maxlen: 24
                          31.58.212.0/24 maxlen: 24
                          31.58.213.0/24 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.224.0/22 maxlen: 24
                          31.58.231.0/24 maxlen: 24
                          31.59.52.0/22 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.98.0/24 maxlen: 24
                          31.59.108.0/24 maxlen: 24
                          31.59.109.0/24 maxlen: 24
                          31.59.110.0/24 maxlen: 24
                          31.59.112.0/22 maxlen: 22
                          31.59.116.0/22 maxlen: 24
                          31.59.116.0/24 maxlen: 24
                          31.59.136.0/21 maxlen: 24
                          31.59.144.0/21 maxlen: 24
                          31.59.160.0/21 maxlen: 24
                          31.59.172.0/24 maxlen: 24
                          31.59.196.0/22 maxlen: 24
                          31.59.196.0/24 maxlen: 24
                          31.59.197.0/24 maxlen: 24
                          31.59.199.0/24 maxlen: 24
                          31.59.200.0/22 maxlen: 24
                          31.59.200.0/24 maxlen: 24
                          31.59.201.0/24 maxlen: 24
                          31.59.202.0/24 maxlen: 24
                          31.59.203.0/24 maxlen: 24
                          31.59.204.0/22 maxlen: 24
                          31.59.204.0/24 maxlen: 24
                          31.59.205.0/24 maxlen: 24
                          31.59.206.0/24 maxlen: 24
                          31.59.207.0/24 maxlen: 24
                          31.59.208.0/22 maxlen: 24
                          31.59.208.0/24 maxlen: 24
                          31.59.209.0/24 maxlen: 24
                          31.59.210.0/24 maxlen: 24
                          31.59.211.0/24 maxlen: 24
                          31.59.215.0/24 maxlen: 24
                          31.59.220.0/22 maxlen: 24
                          31.59.220.0/24 maxlen: 24
                          31.59.221.0/24 maxlen: 24
                          31.59.222.0/24 maxlen: 24
                          31.59.224.0/22 maxlen: 22
                          31.59.232.0/22 maxlen: 22
                          31.59.232.0/24 maxlen: 24
                          31.59.254.0/24 maxlen: 24
                          31.59.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 08:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:7f:60:4f:c3:50:64:f4:dd:a1:6f:f9:4d:2e:24:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Mar 28 08:11:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f3ec7dd0f89c026114c621734513f6b0df7fbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:71:83:f1:d4:1e:eb:26:3c:95:4a:a7:47:
                    99:bd:85:27:22:bd:32:7f:23:2b:ff:88:88:94:13:
                    32:b1:09:e7:19:c2:4a:ee:49:67:2d:ee:2f:da:07:
                    d0:6a:98:f5:f5:5c:11:04:f4:34:81:aa:7d:24:c0:
                    5a:d2:ae:35:a5:01:b0:0b:30:19:fa:83:00:99:bb:
                    5f:f0:e6:c8:c0:25:d9:67:5f:49:de:c8:83:3c:5c:
                    6c:47:31:bf:c4:e1:2c:de:cb:d7:f5:18:ef:9c:60:
                    91:c0:a0:67:4a:d1:ef:06:c3:e3:63:08:b4:ef:5c:
                    e7:b2:5f:d7:17:94:97:e2:3e:ff:33:82:6b:fc:87:
                    33:e8:81:1e:4a:81:91:eb:40:51:d1:4f:cd:9d:10:
                    63:b6:c3:21:1a:b1:d5:78:3a:21:f0:47:ac:1a:b9:
                    cd:67:ae:9d:76:4a:54:b5:28:c6:74:86:19:c7:61:
                    0c:0e:c8:8c:cf:14:40:8c:5c:20:ce:d9:9a:0f:be:
                    0c:7c:f5:4e:24:9b:e7:84:89:ea:8f:45:29:0e:5e:
                    c0:ea:13:14:77:9c:27:61:52:96:4e:af:9a:3e:10:
                    e0:f7:43:c2:b1:13:f0:06:d6:34:ba:65:2d:0a:11:
                    20:5a:d7:a9:9f:f0:46:61:7e:79:70:c9:3d:a7:65:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:C7:DD:0F:89:C0:26:11:4C:62:17:34:51:3F:6B:0D:F7:FB:D9
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz7H3Q-JwCYRTGIXNFE_aw33-9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.28.0/22
                  31.56.57.0/24
                  31.56.59.0/24
                  31.56.68.0/23
                  31.56.77.0/24
                  31.56.79.0-31.56.83.255
                  31.56.87.0/24
                  31.56.90.0/23
                  31.56.96.0-31.56.112.255
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.141.0/24
                  31.56.180.0/22
                  31.56.188.0-31.56.195.255
                  31.56.200.0/22
                  31.56.208.0/21
                  31.56.218.0/24
                  31.56.220.0/23
                  31.56.224.0/23
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.12.0/22
                  31.57.24.0/21
                  31.57.38.0/23
                  31.57.52.0-31.57.63.255
                  31.57.94.0-31.57.96.255
                  31.57.102.0/24
                  31.57.120.0/21
                  31.57.129.0/24
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.152.0/24
                  31.57.168.0/22
                  31.57.176.0-31.57.187.255
                  31.57.192.0-31.57.196.255
                  31.57.200.0-31.57.202.255
                  31.57.207.0-31.57.227.255
                  31.57.232.0/22
                  31.57.238.0/24
                  31.57.252.0/22
                  31.58.34.0-31.58.39.255
                  31.58.45.0/24
                  31.58.50.0-31.58.55.255
                  31.58.57.0/24
                  31.58.64.0/23
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.96.0/22
                  31.58.103.0/24
                  31.58.139.0/24
                  31.58.146.0/24
                  31.58.152.0/22
                  31.58.172.0/22
                  31.58.212.0/22
                  31.58.220.0-31.58.227.255
                  31.58.231.0/24
                  31.59.52.0/22
                  31.59.76.0/22
                  31.59.96.0/22
                  31.59.108.0-31.59.110.255
                  31.59.112.0/21
                  31.59.136.0-31.59.151.255
                  31.59.160.0/21
                  31.59.172.0/24
                  31.59.196.0-31.59.211.255
                  31.59.215.0/24
                  31.59.220.0-31.59.227.255
                  31.59.232.0/22
                  31.59.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:87:3c:30:7d:45:9e:cf:cf:f8:bc:47:a7:6a:07:74:d1:
         72:48:f9:cb:f2:ff:6c:7a:99:33:90:1c:6f:49:67:81:70:1b:
         5e:6e:1c:d6:c7:75:bc:27:6b:a4:97:4d:ae:15:bc:62:c9:95:
         a0:36:df:86:df:c5:da:c7:a1:c7:2e:1a:4a:5b:b1:58:0e:65:
         6d:f0:11:2b:66:a9:11:33:67:2c:39:07:52:e3:21:7c:ef:7a:
         80:27:49:d6:66:9c:25:d8:51:e1:ab:33:77:9e:9a:4b:7e:d3:
         72:3d:ab:62:fa:e1:2e:44:ca:63:4e:50:c3:28:5a:14:18:ae:
         02:9a:ae:d2:04:20:d2:41:75:6b:0a:1b:b0:bf:71:b4:7f:a3:
         2b:f2:b2:43:23:68:18:09:b9:8e:3d:ef:35:24:18:ef:45:75:
         80:91:dc:1b:08:5c:37:d6:40:0f:1d:de:51:63:22:e5:fa:66:
         a7:1f:a2:50:b3:77:69:3f:80:ca:81:5a:03:af:d3:cd:2f:66:
         be:9e:f1:2f:66:84:91:80:fa:07:c8:29:a1:48:9d:44:5c:92:
         c9:ca:5f:d4:e0:f5:0e:4c:5b:cc:13:ed:de:2e:7b:92:a1:56:
         d0:e3:4f:bc:c3:2e:20:ca:2d:27:76:53:38:e5:17:0d:ec:63:
         c6:b3:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:01:35 2026 by rpki-client