Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sIvIPrqTSHpcD-7uaY93RzL35yw.roa
File: sIvIPrqTSHpcD-7uaY93RzL35yw.roa (raw, json)
Hash identifier: kW7II0x76Olpy4lxpUSm+TitE4JoXrnrPQkIbKyYnO8=
Subject key identifier: B0:8B:C8:3E:BA:93:48:7A:5C:0F:EE:EE:69:8F:77:47:32:F7:E7:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F0390CD4FCB887AEC41035C5FBAE54B05
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sIvIPrqTSHpcD-7uaY93RzL35yw.roa
Signing time: Fri 26 Jun 2026 10:54:08 +0000
ROA not before: Fri 26 Jun 2026 10:54:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 32
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.176.0/22 maxlen: 32
31.56.196.0/24 maxlen: 32
31.56.197.0/24 maxlen: 32
31.56.204.0/24 maxlen: 32
31.56.205.0/24 maxlen: 32
31.56.206.0/24 maxlen: 32
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 32
31.56.228.0/24 maxlen: 24
31.56.229.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 32
31.57.27.0/24 maxlen: 32
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 32
31.57.62.0/24 maxlen: 32
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 32
31.57.93.0/24 maxlen: 32
31.57.105.0/24 maxlen: 32
31.57.106.0/24 maxlen: 32
31.57.107.0/24 maxlen: 32
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 32
31.58.79.0/24 maxlen: 32
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.137.0/24 maxlen: 24
31.58.171.0/24 maxlen: 32
31.58.209.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.38.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 32
31.59.44.0/23 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 32
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.168.0/24 maxlen: 32
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.159.0/24 maxlen: 24
94.183.177.0/24 maxlen: 24
94.183.178.0/24 maxlen: 32
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 32
94.183.190.0/24 maxlen: 32
94.183.191.0/24 maxlen: 32
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 32
94.183.235.0/24 maxlen: 32
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.60.0/22 maxlen: 32
217.60.98.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:90:cd:4f:cb:88:7a:ec:41:03:5c:5f:ba:e5:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 10:54:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08bc83eba93487a5c0feeee698f774732f7e72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:df:55:0b:ee:5d:fd:9d:fe:03:c8:6c:da:
89:84:d1:c6:1d:61:be:22:7a:28:fb:c5:ec:13:e1:
7c:42:61:41:26:3a:ef:1e:06:9a:99:a3:ce:5c:61:
f1:2d:8d:a3:b0:a3:67:b2:64:71:30:55:6c:7b:47:
18:05:86:0a:8a:23:47:cb:59:20:bf:8b:04:4b:63:
6f:ea:d3:fa:ef:05:2d:cf:b3:71:7c:ab:90:30:23:
57:d1:de:f3:44:71:33:4a:9a:c8:c4:e1:e1:e1:d3:
80:70:51:1c:19:31:c3:51:e0:ef:3d:04:c8:52:5b:
9d:d9:58:07:6c:af:23:51:a4:b6:df:78:60:05:6c:
10:f2:f5:f5:25:ca:f9:e5:69:23:0b:bd:5d:24:87:
2d:90:17:92:ae:a5:87:1f:2d:03:a5:ba:a4:8f:a6:
52:2d:1d:91:5a:85:43:b7:d3:54:c3:da:33:d3:12:
ee:e6:fa:6e:ff:5b:a3:53:4e:a2:b7:56:57:63:97:
e2:0f:c3:6d:f4:65:bc:a7:83:80:ca:b2:23:6a:54:
da:8a:c8:54:5a:4c:b4:5d:94:de:41:35:37:11:e2:
dc:c9:b7:31:8b:19:34:88:2b:de:67:ed:ab:9f:f8:
ea:bf:bf:c7:10:c8:2d:cd:85:be:4f:3e:0b:d0:b8:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:C8:3E:BA:93:48:7A:5C:0F:EE:EE:69:8F:77:47:32:F7:E7:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sIvIPrqTSHpcD-7uaY93RzL35yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.176.0/22
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0-31.56.229.255
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.57.250.0/24
31.58.50.0/24
31.58.76.0/22
31.58.87.0/24
31.58.134.0/24
31.58.137.0/24
31.58.171.0/24
31.58.209.0/24
31.58.220.0/24
31.58.226.0/24
31.59.38.0/24
31.59.40.0/23
31.59.44.0/23
31.59.102.0-31.59.106.255
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.168.0/24
31.59.170.0/24
31.59.174.0/23
94.183.151.0/24
94.183.159.0/24
94.183.177.0-94.183.178.255
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.11.0/24
217.60.26.0/24
217.60.36.0/22
217.60.60.0/22
217.60.98.0/24
217.60.186.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
71:cf:05:b7:ed:47:65:5f:0b:41:a0:6c:32:a5:c8:92:15:a9:
c9:ab:47:c6:7f:ca:c3:b2:47:63:ee:2a:bb:3f:5f:b6:d1:8b:
b0:7a:91:75:4d:e2:a6:29:9d:ae:48:2e:30:4e:45:4c:ab:7a:
d1:12:d6:86:9c:90:90:50:b3:3f:8e:15:53:ff:00:db:84:b4:
28:42:bd:14:bb:69:8d:75:68:86:a3:56:f6:0d:60:3a:74:c2:
3c:38:f7:cb:92:7a:e8:c3:8c:56:cb:e9:7a:09:0f:ba:1b:23:
7b:00:f6:e8:de:c0:9d:f4:7e:f4:af:b7:d9:3a:bb:fb:4e:50:
f7:5f:64:e8:c6:b2:9d:14:98:c9:4e:29:fa:c2:92:27:15:f5:
6d:ae:38:2a:fe:04:a9:10:d1:72:0a:61:b7:dd:a6:fa:f5:3f:
c0:2f:94:22:41:74:81:52:8a:a1:30:21:be:7b:b9:f1:91:50:
8f:d4:5c:8c:60:3c:4a:53:28:03:41:89:c1:ba:80:d9:dc:c2:
ac:90:00:df:38:44:c7:0c:06:be:ec:af:cb:56:ee:7e:f3:d9:
1a:0a:d9:a3:25:03:39:4b:14:ca:3b:7e:44:6d:e2:d2:5d:af:
8c:ed:57:fe:d0:ef:66:94:e2:cb:59:4d:42:60:ee:a9:cc:31:
3f:5c:71:2d
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgISAZ8DkM1Py4h67EEDXF+65UsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjI2MTA1NDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDhiYzgzZWJhOTM0ODdhNWMwZmVlZWU2OThmNzc0NzMyZjdlNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS/fVQvuXf2d/gPIbNqJhNHGHWG+
Inoo+8XsE+F8QmFBJjrvHgaamaPOXGHxLY2jsKNnsmRxMFVse0cYBYYKiiNHy1kg
v4sES2Nv6tP67wUtz7NxfKuQMCNX0d7zRHEzSprIxOHh4dOAcFEcGTHDUeDvPQTI
Ulud2VgHbK8jUaS233hgBWwQ8vX1Jcr55WkjC71dJIctkBeSrqWHHy0Dpbqkj6ZS
LR2RWoVDt9NUw9oz0xLu5vpu/1ujU06it1ZXY5fiD8Nt9GW8p4OAyrIjalTaishU
Wky0XZTeQTU3EeLcybcxixk0iCveZ+2rn/jqv7/HEMgtzYW+Tz4L0LjpCwIDAQAB
o4IDlTCCA5EwHQYDVR0OBBYEFLCLyD66k0h6XA/u7mmPd0cy9+csMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvc0l2SVBycVRTSHBjRC03dWFZOTNSekwzNXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqQYIKwYBBQUHAQcBAf8EggGYMIIBlDCCAZAEAgABMIIB
iDAMAwQAHzgbAwQAHzgcAwQAHzgwAwQAHzhxAwQAHzh1AwQAHziSAwQCHziwAwQB
HzjEMAwDBAIfOMwDBAAfOM4DBAAfON4wDAMEAB844wMEAR845AMEAB85GDAMAwQB
HzkaAwQBHzkcAwQBHzkuMAwDBAAfOT0DBAYfOQADBAEfOVwwDAMEAB85aQMEAR85
bAMEAB85djAMAwQAHzmdAwQAHzmeAwQAHzn6AwQAHzoyAwQCHzpMAwQAHzpXAwQA
HzqGAwQAHzqJAwQAHzqrAwQAHzrRAwQAHzrcAwQAHzriAwQAHzsmAwQBHzsoAwQB
HzssMAwDBAEfO2YDBAAfO2oDBAEfO3gDBAAfO4gDBAEfO4oDBAAfO6gDBAAfO6oD
BAEfO64DBABet5cDBABet58wDAMEAF63sQMEAF63sjAMAwQBXre2AwQGXreAAwQC
XrfoAwQD2TwAAwQA2TwLAwQA2TwaAwQC2TwkAwQC2Tw8AwQA2TxiAwQA2Ty6AwQB
2Tz4AwQA2Tz8MA0GCSqGSIb3DQEBCwUAA4IBAQBxzwW37UdlXwtBoGwypciSFanJ
q0fGf8rDskdj7iq7P1+20YuwepF1TeKmKZ2uSC4wTkVMq3rREtaGnJCQULM/jhVT
/wDbhLQoQr0Uu2mNdWiGo1b2DWA6dMI8OPfLknrow4xWy+l6CQ+6GyN7APbo3sCd
9H70r7fZOrv7TlD3X2ToxrKdFJjJTin6wpInFfVtrjgq/gSpENFyCmG33ab69T/A
L5QiQXSBUoqhMCG+e7nxkVCP1FyMYDxKUygDQYnBuoDZ3MKskADfOETHDAa+7K/L
Vu5+89kaCtmjJQM5SxTKO35EbeLSXa+M7Vf+0O9mlOLLWU1CYO6pzDE/XHEt
-----END CERTIFICATE-----
Generated at Fri Jun 26 17:02:02 2026 by rpki-client