Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBGIJtIZL_N8ZwMuoW1263zpG7s.roa
File: kBGIJtIZL_N8ZwMuoW1263zpG7s.roa (raw, json)
Hash identifier: D8FblpOiYdr/pOnLqf4NEN4/fIknqwvSALcnUaw8Yo8=
Subject key identifier: 90:11:88:26:D2:19:2F:F3:7C:67:03:2E:A1:6D:76:EB:7C:E9:1B:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BFE5F83B0C61F3D3055C74A9B33F29
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBGIJtIZL_N8ZwMuoW1263zpG7s.roa
Signing time: Tue 03 Jun 2025 12:24:17 +0000
ROA not before: Tue 03 Jun 2025 12:24:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.23.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.60.0/22 maxlen: 24
31.57.92.0/22 maxlen: 22
31.57.98.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.159.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.182.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.244.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:bf:e5:f8:3b:0c:61:f3:d3:05:5c:74:a9:b3:3f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:24:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90118826d2192ff37c67032ea16d76eb7ce91bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:45:ee:81:a0:31:c3:40:8e:45:12:9b:61:
8d:bc:29:44:6f:f8:9b:1b:a7:7c:30:f9:c1:50:2d:
f8:94:cf:8d:29:77:ad:f3:8b:18:61:cf:9e:4f:e0:
78:be:e0:2b:a8:c8:51:ae:ce:1a:97:6f:e3:b7:76:
b8:1e:5d:5f:38:7f:6a:b3:4e:89:2b:1b:a6:8b:df:
d0:c3:62:52:4b:5b:49:85:1d:f5:74:7d:65:09:c3:
1a:1f:5d:5c:91:52:38:ea:e3:97:77:b5:4f:a9:27:
bd:e7:aa:f7:4a:16:09:6e:72:fc:a2:bf:69:e9:36:
63:ef:22:e2:b0:b3:98:40:86:be:ec:7f:3b:c3:b0:
0e:fb:aa:d8:c5:0c:d9:29:5e:59:96:5b:45:13:01:
02:16:38:2a:60:78:da:90:34:9f:13:54:49:31:e1:
c1:53:05:99:ca:e9:e0:eb:c3:59:b7:d5:cb:9b:63:
2a:cd:19:fb:b0:c1:89:d7:04:ce:c9:e7:3b:32:2a:
8e:e5:a0:4c:87:52:dc:f9:dc:5d:6d:61:83:f1:df:
b2:f4:a8:f2:57:96:70:91:c3:da:72:a8:9d:af:f3:
df:88:73:30:cd:94:bf:13:f1:de:0a:15:b7:9d:ee:
c8:d9:7c:43:e8:53:68:2e:ab:12:2e:84:3f:a5:48:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:88:26:D2:19:2F:F3:7C:67:03:2E:A1:6D:76:EB:7C:E9:1B:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kBGIJtIZL_N8ZwMuoW1263zpG7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.23.0/24
31.56.57.0/24
31.56.77.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.146.0/24
31.56.180.0/22
31.56.188.0/22
31.56.196.0-31.56.203.255
31.56.208.0/21
31.56.228.0/22
31.56.236.0/22
31.57.12.0/23
31.57.36.0/22
31.57.60.0/22
31.57.92.0/22
31.57.98.0/24
31.57.104.0/21
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.159.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.244.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.134.0/24
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.212.0/22
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
70:35:2c:ee:e7:37:fc:51:e2:3c:b1:6f:a9:1f:29:f8:17:4f:
af:bf:04:e9:57:b9:eb:53:fe:9c:62:aa:32:01:29:4f:03:7a:
a0:e0:0d:f1:eb:47:14:8a:0b:a1:a8:d5:78:9b:ac:15:5c:8f:
ce:5f:7c:1f:07:71:36:e4:0d:91:37:b0:b0:ca:b4:23:de:76:
06:0c:6e:3f:c1:a8:6f:82:8c:57:13:8b:4f:6a:f0:e9:79:b4:
f8:02:a3:2e:6e:8b:27:66:fe:1f:42:73:82:53:c2:e3:4a:ff:
58:52:3b:8c:f6:a7:a1:e2:06:df:f5:80:3d:15:32:80:a5:12:
22:a5:b4:61:9b:93:72:20:ab:b3:f5:e4:27:f9:ad:52:29:ad:
b6:27:e6:de:05:bc:9b:5e:7a:2c:bc:20:52:b4:14:45:1c:1e:
6c:cf:5e:49:b7:c4:b8:3c:f2:57:ba:58:e4:a3:4f:76:a7:c6:
89:8e:7c:ab:09:a8:b0:1c:87:15:35:83:7e:7b:07:de:3a:5f:
a7:99:21:1c:a8:db:e8:3b:59:36:4f:49:8d:b5:fe:de:f0:cf:
6a:33:31:64:c0:a1:7e:4e:c1:6c:80:da:6d:3b:68:7f:e0:c7:
f1:8b:e7:45:d8:6a:4c:41:0e:73:b4:33:35:63:b3:62:68:35:
74:d2:ea:7f
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISAZc1v+X4Owxh89MFXHSpsz8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjAzMTIyNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDExODgyNmQyMTkyZmYzN2M2NzAzMmVhMTZkNzZlYjdjZTkxYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJF7oGgMcNAjkUSm2GNvClEb/ib
G6d8MPnBUC34lM+NKXet84sYYc+eT+B4vuArqMhRrs4al2/jt3a4Hl1fOH9qs06J
Kxumi9/Qw2JSS1tJhR31dH1lCcMaH11ckVI46uOXd7VPqSe956r3ShYJbnL8or9p
6TZj7yLisLOYQIa+7H87w7AO+6rYxQzZKV5ZlltFEwECFjgqYHjakDSfE1RJMeHB
UwWZyung68NZt9XLm2MqzRn7sMGJ1wTOyec7MiqO5aBMh1Lc+dxdbWGD8d+y9Kjy
V5ZwkcPacqidr/PfiHMwzZS/E/HeChW3ne7I2XxD6FNoLqsSLoQ/pUhQkwIDAQAB
o4IDdjCCA3IwHQYDVR0OBBYEFJARiCbSGS/zfGcDLqFtdut86Ru7MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva0JHSUp0SVpMX044WndNdW9XMTI2M3pwRzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBigYIKwYBBQUHAQcBAf8EggF5MIIBdTCCAXEEAgABMIIB
aQMEAR84BAMEAB84FwMEAB84OQMEAB84TQMEAR84WgMEAx84aAMEAR84cjAMAwQB
Hzh2AwQCHzh4AwQAHziSAwQCHzi0AwQCHzi8MAwDBAIfOMQDBAIfOMgDBAMfONAD
BAIfOOQDBAIfOOwDBAEfOQwDBAIfOSQDBAIfOTwDBAIfOVwDBAAfOWIDBAMfOWgD
BAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIDBAAfOZ8DBAIfOagwDAMEBB85sAMEAh85
uAMEAh85wAMEAR85yDAMAwQEHznQAwQCHzngAwQCHznoAwQAHzn0MAsDBAEfOfoD
AwEfOAMEAR86IgMEAR86MgMEAR86QAMEAh86RAMEAh86VAMEAB86hgMEAh86mAME
Ah86rDAMAwQCHzrcAwQCHzrgAwQCHztMAwQCHztgAwQCHztwMAwDBAMfO4gDBAMf
O5ADBAMfO6ADBAIfO9QDBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAHA1
LO7nN/xR4jyxb6kfKfgXT6+/BOlXuetT/pxiqjIBKU8DeqDgDfHrRxSKC6Go1Xib
rBVcj85ffB8HcTbkDZE3sLDKtCPedgYMbj/BqG+CjFcTi09q8Ol5tPgCoy5uiydm
/h9Cc4JTwuNK/1hSO4z2p6HiBt/1gD0VMoClEiKltGGbk3Igq7P15Cf5rVIprbYn
5t4FvJteeiy8IFK0FEUcHmzPXkm3xLg88le6WOSjT3anxomOfKsJqLAchxU1g357
B946X6eZIRyo2+g7WTZPSY21/t7wz2ozMWTAoX5OwWyA2m07aH/gx/GL50XYakxB
DnO0MzVjs2JoNXTS6n8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:55 2025 by rpki-client