Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ohWdAF__uJxnkOXZstX-xppPzBc.roa
File: ohWdAF__uJxnkOXZstX-xppPzBc.roa (raw, json)
Hash identifier: WjJyn+egn9AuH5TQ59cABpGNgKU8RDuHNhLPKD33YtQ=
Subject key identifier: A2:15:9D:00:5F:FF:B8:9C:67:90:E5:D9:B2:D5:FE:C6:9A:4F:CC:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A88AC347E46047D9F2A156DEFF48D9467
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ohWdAF__uJxnkOXZstX-xppPzBc.roa
Signing time: Sat 15 Nov 2025 17:59:38 +0000
ROA not before: Sat 15 Nov 2025 17:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.102.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.129.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:88:ac:34:7e:46:04:7d:9f:2a:15:6d:ef:f4:8d:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 17:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2159d005fffb89c6790e5d9b2d5fec69a4fcc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:d4:4c:16:55:f8:f2:90:7c:12:dc:71:37:
ed:a6:e6:37:74:a7:ab:40:b4:31:82:b9:0c:50:af:
3b:4f:a0:b6:ce:d2:1a:f6:91:09:51:73:58:16:83:
13:92:57:d5:b9:99:ba:79:8f:6a:2f:e8:0a:fb:7b:
b7:c5:24:3a:20:ca:c3:9b:52:d2:1a:6c:ee:bc:d4:
20:ca:a1:dd:c0:72:e5:97:b4:dc:13:f2:15:71:c6:
cc:80:30:ba:a3:51:d6:b3:f4:86:88:9b:07:c2:95:
25:76:85:c8:e9:05:11:69:bc:b7:da:42:1f:78:e1:
50:78:24:bc:05:4c:e1:bf:ca:52:e4:70:c6:ac:c6:
88:c8:62:a1:30:b6:8e:1b:8e:e9:e2:bd:79:2b:9f:
f6:6f:c4:80:9f:ee:a7:24:35:9c:a5:d2:6e:bc:bc:
f1:cd:7a:68:5c:ec:9a:cf:37:16:42:5c:ca:f7:7f:
f2:d2:d3:e2:b8:a9:45:c6:a0:8a:93:ab:65:2e:49:
b7:78:15:2f:81:d0:da:e8:02:81:11:f0:e2:aa:f3:
11:40:b1:b8:b0:b7:2b:e7:76:d9:57:7b:20:0e:65:
0e:27:05:6a:7d:86:3f:b7:aa:09:4b:17:40:1b:a1:
0a:63:0c:3b:52:e5:b3:b1:86:4b:a6:7d:88:6a:d8:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:9D:00:5F:FF:B8:9C:67:90:E5:D9:B2:D5:FE:C6:9A:4F:CC:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ohWdAF__uJxnkOXZstX-xppPzBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0-31.56.32.255
31.56.35.0/24
31.56.43.0-31.56.44.255
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.156.0/24
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.129.0/24
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0-31.57.202.255
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.33.0-31.58.35.255
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:fc:75:3d:bc:06:87:25:f7:3d:4a:04:36:f4:f9:55:23:83:
c9:78:8d:42:30:46:21:61:1d:d0:74:68:e3:29:98:46:41:cf:
c7:9d:3d:22:66:4e:7f:d1:fb:9e:bd:6a:11:18:9e:7a:38:4c:
97:81:29:e3:83:53:31:f3:44:40:71:b6:1e:f1:ad:f8:3c:76:
78:7a:2d:57:8a:b1:fc:7a:0b:60:4b:41:7d:48:26:5e:3e:c6:
1a:38:f2:2a:4a:0f:3c:26:25:87:1a:db:39:5b:3a:f9:e9:b0:
b2:d8:bb:1c:5b:e1:95:be:57:29:17:7d:31:cc:d3:a5:3c:5f:
c0:d9:02:a8:88:fe:03:42:a8:20:e6:af:44:09:17:8f:88:4a:
42:05:50:02:40:f5:2d:8d:ea:63:3d:b6:e6:5f:98:16:68:47:
3b:2d:db:3c:fe:48:c7:51:f8:c6:13:42:60:eb:bb:20:41:f7:
a6:3b:28:5e:34:78:c4:7f:a6:f4:76:e1:5a:7b:6b:ad:c2:ec:
19:b9:c7:a8:6f:3b:2f:db:2a:e0:ba:e4:93:f5:c9:66:ea:6b:
82:cd:25:cb:60:9d:be:ff:04:74:9c:bc:79:b1:a9:7b:42:2e:
77:2e:42:04:ad:59:08:19:4d:90:55:1b:8f:ea:3c:2e:33:ce:
94:00:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 00:45:43 2025 by rpki-client