Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tC0bGxqbDkdB0f99o8PQxp7ibzc.roa
File: tC0bGxqbDkdB0f99o8PQxp7ibzc.roa (raw, json)
Hash identifier: 0rnb6RKcI4kI//mmrZZtRiM2iF+4+bhPwMJ6FI3mp7w=
Subject key identifier: B4:2D:1B:1B:1A:9B:0E:47:41:D1:FF:7D:A3:C3:D0:C6:9E:E2:6F:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D1B51D2C8E657C60D6D6E7C43B592C6FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tC0bGxqbDkdB0f99o8PQxp7ibzc.roa
Signing time: Mon 23 Mar 2026 15:30:40 +0000
ROA not before: Mon 23 Mar 2026 15:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.196.0/24 maxlen: 24
31.56.197.0/24 maxlen: 24
31.56.204.0/24 maxlen: 24
31.56.205.0/24 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.56.228.0/24 maxlen: 24
31.56.229.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 24
31.57.27.0/24 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/24 maxlen: 24
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 24
31.57.93.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.79.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.168.0/24 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.178.0/24 maxlen: 24
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 24
94.183.190.0/24 maxlen: 24
94.183.191.0/24 maxlen: 24
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 24
94.183.235.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:51:d2:c8:e6:57:c6:0d:6d:6e:7c:43:b5:92:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 23 15:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b42d1b1b1a9b0e4741d1ff7da3c3d0c69ee26f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:fe:7e:e4:87:80:4b:5a:ee:cc:b8:0e:b5:
a0:e4:58:33:3f:1e:49:00:39:58:af:00:67:8b:7c:
0c:c4:9d:ae:cb:af:cf:18:d5:77:6e:bb:dd:5d:8e:
76:c3:a7:6e:f7:71:1c:e8:57:eb:57:5d:f4:35:31:
61:4a:2b:82:02:4a:77:66:56:82:af:8c:e4:8c:50:
67:12:87:3e:4a:64:e3:b8:95:52:fd:91:c4:d9:72:
26:52:79:28:b6:ff:e0:b1:62:25:33:2c:6b:20:59:
61:1a:cb:f6:a1:a8:71:0b:e2:4d:ef:9c:5f:5e:64:
bf:f2:7b:79:58:b6:20:45:52:7c:25:1c:23:12:9d:
5e:1c:54:da:59:44:57:aa:e7:e1:63:d2:fc:86:af:
97:ea:72:5a:e8:b3:68:fb:ff:a1:dd:7c:9f:65:0e:
23:b7:48:b8:1c:c2:46:d0:4f:27:1f:10:87:8a:aa:
a3:cc:38:22:7d:64:f5:83:7f:8c:c2:f6:1b:fe:81:
02:a9:fc:e6:ea:40:9e:b8:15:d1:bf:ed:44:7e:20:
00:6b:46:48:c9:95:f4:c0:7c:d9:29:37:c3:46:21:
98:0e:f6:29:0c:20:75:58:d7:25:23:f6:40:fe:3d:
e6:ae:64:c1:ac:38:c3:95:b7:9e:a5:6f:e9:3a:6d:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:1B:1B:1A:9B:0E:47:41:D1:FF:7D:A3:C3:D0:C6:9E:E2:6F:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tC0bGxqbDkdB0f99o8PQxp7ibzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.176.0/22
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0-31.56.229.255
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.58.50.0/24
31.58.76.0/22
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.40.0/23
31.59.102.0-31.59.106.255
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.168.0/24
31.59.170.0/24
31.59.174.0/23
94.183.178.0/24
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.36.0/22
217.60.60.0/22
217.60.186.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e2:7a:9e:17:60:ab:3e:5e:d0:b3:7d:ef:46:5d:2f:4a:9c:
26:ea:a7:9b:a3:9d:df:ad:5d:81:3b:7f:0c:b1:a0:16:b3:13:
f9:da:9d:8c:19:12:e9:e9:48:4c:a2:02:b0:3a:ed:28:6b:33:
a0:ef:ef:d9:81:61:76:ae:73:c8:31:03:3d:05:f8:06:99:d6:
ec:a7:3e:1a:cb:de:70:f7:52:b9:1b:39:c6:16:f6:26:8c:b8:
bf:08:38:f0:fd:69:7b:58:4a:25:28:87:3e:c2:d4:20:fd:40:
0d:44:7f:c0:5a:60:1b:58:4d:1f:f5:87:b3:2b:75:a7:01:fc:
e7:d7:8c:0c:e7:34:da:f7:05:20:fa:0d:87:a9:f1:9f:16:b6:
d4:d7:a5:4b:db:eb:2c:84:2e:08:02:1d:1b:61:5d:4c:6c:9d:
1b:7d:9d:da:89:fa:6b:c4:ab:db:ed:14:b1:51:eb:f9:63:a9:
02:c5:31:67:6d:03:63:df:d0:c0:06:7d:f8:96:15:da:54:4d:
a9:c7:86:9b:fb:18:20:bc:ff:3f:97:cd:0c:e0:8d:61:0e:b4:
04:15:ea:5a:73:8a:c0:e0:e2:1d:fd:3b:d5:c5:4d:30:d7:3f:
d4:2a:d8:ad:1d:0a:87:29:b6:d7:55:dc:f7:0e:ee:a9:fb:ea:
91:15:7f:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAZ0bUdLI5lfGDW1ufEO1ksb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzIzMTUzMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDJkMWIxYjFhOWIwZTQ3NDFkMWZmN2RhM2MzZDBjNjllZTI2ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/P+fuSHgEta7sy4DrWg5FgzPx5J
ADlYrwBni3wMxJ2uy6/PGNV3brvdXY52w6du93Ec6FfrV130NTFhSiuCAkp3ZlaC
r4zkjFBnEoc+SmTjuJVS/ZHE2XImUnkotv/gsWIlMyxrIFlhGsv2oahxC+JN75xf
XmS/8nt5WLYgRVJ8JRwjEp1eHFTaWURXqufhY9L8hq+X6nJa6LNo+/+h3XyfZQ4j
t0i4HMJG0E8nHxCHiqqjzDgifWT1g3+MwvYb/oECqfzm6kCeuBXRv+1EfiAAa0ZI
yZX0wHzZKTfDRiGYDvYpDCB1WNclI/ZA/j3mrmTBrDjDlbeepW/pOm3HawIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFLQtGxsamw5HQdH/faPD0Mae4m83MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdEMwYkd4cWJEa2RCMGY5OW84UFF4cDdpYnpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB
RDAMAwQAHzgbAwQAHzgcAwQAHzgwAwQAHzhxAwQAHzh1AwQAHziSAwQCHziwAwQB
HzjEMAwDBAIfOMwDBAAfOM4DBAAfON4wDAMEAB844wMEAR845AMEAB85GDAMAwQB
HzkaAwQBHzkcAwQBHzkuMAwDBAAfOT0DBAYfOQADBAEfOVwwDAMEAB85aQMEAR85
bAMEAB85djAMAwQAHzmdAwQAHzmeAwQAHzoyAwQCHzpMAwQAHzpXAwQAHzqGAwQA
HzqrAwQAHzrcAwQAHzriAwQBHzsoMAwDBAEfO2YDBAAfO2oDBAEfO3gDBAAfO4gD
BAEfO4oDBAAfO6gDBAAfO6oDBAEfO64DBABet7IwDAMEAV63tgMEBl63gAMEAl63
6AMEA9k8AAMEAtk8JAMEAtk8PAMEANk8ugMEAdk8+AMEANk8/DANBgkqhkiG9w0B
AQsFAAOCAQEAheJ6nhdgqz5e0LN970ZdL0qcJuqnm6Od361dgTt/DLGgFrMT+dqd
jBkS6elITKICsDrtKGszoO/v2YFhdq5zyDEDPQX4BpnW7Kc+GsvecPdSuRs5xhb2
Joy4vwg48P1pe1hKJSiHPsLUIP1ADUR/wFpgG1hNH/WHsyt1pwH859eMDOc02vcF
IPoNh6nxnxa21NelS9vrLIQuCAIdG2FdTGydG32d2on6a8Sr2+0UsVHr+WOpAsUx
Z20DY9/QwAZ9+JYV2lRNqceGm/sYILz/P5fNDOCNYQ60BBXqWnOKwODiHf071cVN
MNc/1CrYrR0Khym211Xc9w7uqfvqkRV/EQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 17:55:37 2026 by rpki-client