Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o7phmMSOqXiyR5LNcZURt2l4WTo.roa
File: o7phmMSOqXiyR5LNcZURt2l4WTo.roa (raw, json)
Hash identifier: fNHMnMm+BtAt4XnTCBFORFjMjZvwiEWDlV5QEo15Lcw=
Subject key identifier: A3:BA:61:98:C4:8E:A9:78:B2:47:92:CD:71:95:11:B7:69:78:59:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A7BEB6E0ECB549ABE5932D67BAC6A4A1D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o7phmMSOqXiyR5LNcZURt2l4WTo.roa
Signing time: Thu 13 Nov 2025 06:33:37 +0000
ROA not before: Thu 13 Nov 2025 06:33:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7b:eb:6e:0e:cb:54:9a:be:59:32:d6:7b:ac:6a:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 06:33:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ba6198c48ea978b24792cd719511b76978593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:02:79:08:17:f5:21:35:24:24:cc:3f:3d:
a6:42:6f:ba:a9:43:cf:cb:14:93:33:50:b6:c7:89:
24:ff:f8:15:bc:4c:f4:43:2b:d8:7d:80:6c:ef:4a:
2c:ec:8c:64:8e:7f:74:5f:47:93:56:5b:8d:1a:6e:
c2:49:e1:df:36:81:12:95:d4:58:10:06:ff:3d:2d:
69:ea:81:58:b7:fd:e1:4e:4e:2f:d0:7b:a6:a8:01:
4a:79:3b:3a:24:1e:de:a1:6a:d0:f6:00:2d:83:c4:
74:4c:30:bf:48:5b:cc:49:de:ae:5a:54:1b:b9:5d:
8f:04:6c:22:34:c8:96:65:04:36:7a:df:a2:3e:4d:
83:87:9c:b9:db:df:d1:59:3a:b4:f1:b3:9a:ef:d9:
92:bf:56:97:6d:13:7a:da:cc:25:26:57:9f:dd:6c:
65:da:1a:59:aa:98:1a:5f:24:be:e9:d9:68:8a:4b:
75:ea:30:7e:f3:88:1e:8f:0e:8d:15:b2:0d:74:70:
89:64:e7:a0:0f:27:0b:1d:29:31:d1:d1:cf:2f:a1:
93:c7:8c:ea:d6:e8:a5:06:a4:d3:20:c8:90:9f:62:
7d:47:4b:8d:5f:06:19:62:90:35:79:2b:33:3d:b7:
4f:e6:7b:d4:c1:dd:fb:5a:2d:9e:f5:09:88:12:bb:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:61:98:C4:8E:A9:78:B2:47:92:CD:71:95:11:B7:69:78:59:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o7phmMSOqXiyR5LNcZURt2l4WTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0-31.56.32.255
31.56.35.0/24
31.56.43.0-31.56.44.255
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.191.0-31.57.195.255
31.57.200.0-31.57.202.255
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.33.0-31.58.35.255
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.157.0/24
31.58.163.0/24
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.57.0/24
31.59.76.0/22
31.59.96.0/22
31.59.109.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:72:fc:8c:2d:d3:37:b1:71:b5:0b:ad:b8:09:fc:93:42:4d:
e0:e8:32:48:ce:a1:01:b4:3e:93:aa:c0:fe:00:9d:39:c2:8d:
57:12:af:eb:13:2c:01:25:77:3a:63:fc:e4:de:68:a7:12:3d:
34:46:17:a1:5f:02:ea:30:b6:0d:01:a8:15:11:02:07:1d:9b:
8a:92:c8:cb:6c:6e:e5:bf:ba:79:d0:d5:c5:1f:4c:22:07:ce:
ac:c1:1b:1f:d6:23:dd:8f:ec:ce:e5:a1:39:eb:57:62:51:f4:
49:dc:49:d1:2f:f4:32:c3:20:cd:2f:46:4c:04:0f:9a:1d:20:
30:dc:29:b7:fd:b9:78:16:9d:e8:6a:48:83:c1:8a:89:72:a4:
15:67:07:31:f7:50:5f:16:54:f8:0e:92:ee:44:05:a0:49:37:
3c:fc:19:6d:dd:f6:f9:b7:1a:04:cd:55:31:8e:c7:40:eb:e1:
b3:ac:1a:3e:d6:99:e5:52:82:09:a9:15:33:af:c5:d9:67:1f:
30:83:b5:39:02:eb:fb:e9:d3:e8:19:b8:ff:4b:10:69:9f:35:
a1:90:11:03:5d:ea:d4:a3:8f:81:61:2f:ba:e0:5a:08:8e:87:
a3:09:23:d8:cb:2e:34:29:07:eb:b6:77:6b:c9:1c:35:f7:bd:
e4:4e:98:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 13 20:51:02 2025 by rpki-client