Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q1iGcGgc7316WpAJREpn8S28j4k.roa
File: q1iGcGgc7316WpAJREpn8S28j4k.roa (raw, json)
Hash identifier: 5eIWLqU3Pfvxq2mVzKE0P7GYqNVepaRH05WWXeUY0Bw=
Subject key identifier: AB:58:86:70:68:1C:EF:7D:7A:5A:90:09:44:4A:67:F1:2D:BC:8F:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F0F4C2A709999BEE51E5861988859F550
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q1iGcGgc7316WpAJREpn8S28j4k.roa
Signing time: Sun 28 Jun 2026 17:34:37 +0000
ROA not before: Sun 28 Jun 2026 17:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.4.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.52.0/22 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.60.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.80.0/24 maxlen: 24
31.56.82.0/23 maxlen: 23
31.56.82.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.91.0/24 maxlen: 24
31.56.96.0/22 maxlen: 22
31.56.96.0/24 maxlen: 24
31.56.98.0/23 maxlen: 23
31.56.99.0/24 maxlen: 24
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.102.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.141.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.152.0/24 maxlen: 24
31.56.153.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.165.0/24 maxlen: 24
31.56.167.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.217.0/24 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.237.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.12.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.15.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.242.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.60.0/22 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.155.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.221.0/24 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.52.0/24 maxlen: 24
31.59.54.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.72.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.98.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.119.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.220.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:4c:2a:70:99:99:be:e5:1e:58:61:98:88:59:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 17:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab588670681cef7d7a5a9009444a67f12dbc8f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:ee:c4:40:5b:7c:ba:cb:d8:3a:2f:e4:e5:
d3:38:a5:fd:87:7b:21:84:aa:30:da:cb:f2:a9:fe:
e8:97:fc:a8:39:d9:be:99:37:d3:88:06:f1:a7:64:
41:cb:b8:64:b4:88:bd:73:a9:c2:f9:f8:1d:72:c6:
df:59:e0:50:a6:f2:71:4c:39:83:71:30:e9:af:58:
00:6a:c3:73:34:39:98:97:c5:9a:c6:01:b9:d5:7f:
4a:d5:a8:26:37:97:46:bb:1f:59:8d:c6:e4:73:e7:
76:3e:ec:a6:6c:0f:e2:b9:03:4d:bd:b4:db:d1:57:
60:de:39:ac:ef:a5:9d:75:3d:45:f3:25:da:ff:14:
ca:a4:48:df:e4:f3:ee:d2:91:df:f8:37:f5:f6:a3:
9c:57:4d:52:3f:63:b2:4b:0d:d3:41:a5:5c:ed:0d:
1e:4f:fb:44:69:37:b2:89:01:20:c5:de:65:5f:49:
ab:6a:9d:31:27:ed:b2:44:c6:14:a9:e5:cf:35:b1:
d2:af:e7:44:ec:1c:9f:bd:e9:ce:d9:ee:45:b1:c5:
cb:7f:6c:19:bc:5a:e9:34:dc:dc:2c:e4:50:70:c2:
9a:55:83:a0:aa:6d:45:70:7c:1e:4e:9f:00:1b:a5:
d5:e4:99:24:44:49:6c:29:4f:aa:d1:93:a9:32:92:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:86:70:68:1C:EF:7D:7A:5A:90:09:44:4A:67:F1:2D:BC:8F:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q1iGcGgc7316WpAJREpn8S28j4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0/22
31.56.34.0/24
31.56.46.0/24
31.56.52.0/22
31.56.59.0-31.56.60.255
31.56.64.0/24
31.56.68.0/23
31.56.71.0/24
31.56.77.0/24
31.56.80.0/22
31.56.87.0/24
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.141.0-31.56.143.255
31.56.148.0-31.56.153.255
31.56.160.0/21
31.56.180.0/22
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.217.0-31.56.218.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.11.0-31.57.15.255
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.166.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0-31.57.202.255
31.57.207.0-31.57.227.255
31.57.232.0/22
31.57.242.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.44.0/23
31.58.50.0-31.58.55.255
31.58.60.0-31.58.66.255
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.103.0/24
31.58.131.0/24
31.58.139.0/24
31.58.152.0/22
31.58.169.0/24
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.57.0/24
31.59.72.0/21
31.59.96.0/22
31.59.109.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.196.0-31.59.211.255
31.59.215.0/24
31.59.220.0-31.59.227.255
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:4a:f1:ec:a3:21:7d:c6:f0:c1:5c:79:7b:94:77:e2:3f:c3:
d9:cd:eb:ad:bf:3f:ae:81:80:99:0e:3d:66:b7:61:48:2e:74:
e2:8e:3e:a4:9c:e3:1d:5e:fe:09:78:e0:59:29:f9:60:ec:9b:
32:aa:af:48:e0:3c:76:7d:2e:40:be:49:f1:bf:b0:ad:e5:0c:
74:e1:45:77:1d:19:ee:7e:50:64:f6:0f:23:f2:83:e3:a0:e8:
53:ef:a1:1a:08:6d:b6:a0:fb:24:d3:46:1b:e8:1a:a0:82:e6:
98:2d:97:a2:7c:b3:77:57:c0:08:7f:88:e9:1e:4e:be:b2:f9:
7e:05:5a:f5:2e:6f:a0:5b:7a:75:dc:b1:af:3c:37:bd:43:24:
11:91:74:ae:88:bf:35:98:f0:01:74:fc:b8:dd:cc:0a:c8:1e:
99:5d:89:57:5d:1f:4c:29:8d:a4:d9:4f:9d:17:ad:a9:f0:9e:
0f:dc:f3:5c:e1:09:4c:9f:2d:4d:b0:52:ba:72:7c:c1:99:d3:
74:35:15:28:e5:42:df:93:5f:14:c6:c2:6a:7e:14:b7:39:e7:
eb:0c:32:42:23:63:2e:86:15:2d:44:94:5d:33:87:19:3f:de:
bd:50:8c:99:b7:4f:cc:bc:27:3f:cb:4b:d1:45:66:56:98:bf:
a7:63:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:51 2026 by rpki-client