Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n4RK8nxuFjZg8YGc0dzZwTEeJzs.roa
File: n4RK8nxuFjZg8YGc0dzZwTEeJzs.roa (raw, json)
Hash identifier: QiJs8UgCODCkcQHOHkyBGJ6TKcGJPo/dhJx7gMQ6EPw=
Subject key identifier: 9F:84:4A:F2:7C:6E:16:36:60:F1:81:9C:D1:DC:D9:C1:31:1E:27:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198C6881C2FE68276491A162DCC13BDCC39
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n4RK8nxuFjZg8YGc0dzZwTEeJzs.roa
Signing time: Wed 20 Aug 2025 08:11:05 +0000
ROA not before: Wed 20 Aug 2025 08:11:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.90.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.191.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.224.0/24 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.57.0/24 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.152.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.122.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:88:1c:2f:e6:82:76:49:1a:16:2d:cc:13:bd:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 20 08:11:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f844af27c6e163660f1819cd1dcd9c1311e273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:d2:09:6c:3a:af:79:f8:74:4c:5c:bd:47:
f5:7d:77:26:27:8e:09:1b:b6:72:13:21:db:cd:b2:
9c:ba:f3:d5:e1:12:1d:b7:18:21:31:8b:8d:20:45:
8b:ce:66:2c:c6:4f:54:95:b4:42:fb:91:9d:df:13:
74:1e:44:fd:05:83:e3:e1:b4:27:33:59:a0:8b:01:
73:7b:58:7b:95:11:83:81:ce:c8:cd:eb:7e:12:51:
35:ba:ac:f1:0c:22:f1:c9:95:70:84:ab:72:28:a1:
bc:26:8b:e7:e1:a9:e9:07:0b:eb:a3:cc:78:f8:8e:
27:6a:d9:15:08:d8:0b:6b:eb:0d:3d:7f:e5:ce:2b:
68:1b:ed:ef:e6:a5:23:84:5d:65:bd:4e:4d:8e:fa:
72:dc:f0:01:8b:b0:f0:25:b8:3c:f0:cd:fe:39:e8:
5a:aa:14:c8:a1:40:9f:df:2e:d4:4d:1b:0a:74:d2:
24:88:75:b9:f2:aa:bf:be:37:10:ee:56:9c:d9:2f:
81:1b:7f:71:6c:09:79:40:8b:45:fe:75:f4:c4:45:
b1:dc:97:2c:55:a9:55:2d:95:82:8e:2b:80:1e:09:
c7:bf:9b:29:29:37:d0:7b:1b:9d:94:fc:b8:ab:13:
ae:a6:a1:f7:f6:24:4c:61:b1:b9:37:4d:6a:af:98:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:84:4A:F2:7C:6E:16:36:60:F1:81:9C:D1:DC:D9:C1:31:1E:27:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n4RK8nxuFjZg8YGc0dzZwTEeJzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.207.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.122.0/24
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
49:39:68:3e:ce:be:83:f3:7e:ad:17:bf:4a:0c:2a:3f:54:32:
bc:b8:39:c3:99:5a:ab:9f:c5:92:da:2b:de:4f:aa:41:3b:18:
c5:6e:8d:99:71:5a:79:1b:35:09:36:a0:2d:9b:ef:04:a9:61:
5a:c2:62:15:0e:8c:73:53:4c:e1:00:bc:5f:f6:33:b0:c6:13:
70:d3:42:e4:d8:64:79:eb:58:f0:eb:81:6b:16:04:ca:bc:7d:
9e:6d:dc:88:fa:df:44:23:bc:ee:56:34:13:fe:de:c0:ba:f3:
f6:a3:a6:27:e0:e9:3c:45:a2:16:b8:fd:00:67:df:be:8e:a8:
c5:46:39:67:6d:13:f6:8d:98:b0:74:c4:01:be:f3:63:e9:dc:
f7:20:57:3f:4c:10:5c:73:d1:c2:12:ba:e2:60:6b:dc:23:05:
74:fd:36:62:fd:22:14:6b:fc:f3:70:2d:b5:7f:79:0f:68:02:
7e:c5:0d:6e:e3:54:31:cd:70:a2:ba:de:7c:cd:2f:15:e1:78:
95:e9:ee:d4:91:21:98:61:46:6b:27:be:95:93:d2:64:1a:73:
09:3b:a7:86:ca:b7:30:b5:59:1f:e1:50:4c:f6:99:ca:e1:aa:
e2:6f:17:e0:f4:4b:c4:69:eb:65:17:80:9d:f8:a6:bd:ae:6b:
ce:b3:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:05 2025 by rpki-client