Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xq931fw27fmteWk5bQoaK8c-E2A.roa
File: xq931fw27fmteWk5bQoaK8c-E2A.roa (raw, json)
Hash identifier: 3N4NtZpSen0KsqcmxuUG1J0cNLyf6ipzowlT/5o9obk=
Subject key identifier: C6:AF:77:D5:FC:36:ED:F9:AD:79:69:39:6D:0A:1A:2B:C7:3E:13:60
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A59F67FB9C54859D0D3E85D78D3377E7B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xq931fw27fmteWk5bQoaK8c-E2A.roa
Signing time: Thu 06 Nov 2025 16:18:38 +0000
ROA not before: Thu 06 Nov 2025 16:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.196.0/24 maxlen: 24
31.56.197.0/24 maxlen: 24
31.56.204.0/24 maxlen: 24
31.56.205.0/24 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 24
31.57.27.0/24 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/24 maxlen: 24
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 24
31.57.93.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.178.0/24 maxlen: 24
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 24
94.183.190.0/24 maxlen: 24
94.183.191.0/24 maxlen: 24
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 24
94.183.235.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:f6:7f:b9:c5:48:59:d0:d3:e8:5d:78:d3:37:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 16:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6af77d5fc36edf9ad7969396d0a1a2bc73e1360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:90:c9:6a:ce:3c:fd:15:5e:29:88:8b:6a:
75:43:3a:85:6f:b9:b0:79:d0:71:8b:05:7c:69:28:
2b:4e:bc:2f:85:a0:f7:e2:c5:c1:43:03:88:d3:95:
09:18:f0:f1:92:96:3f:cc:97:3e:19:78:06:f9:b8:
20:a7:58:5c:46:3a:dc:db:8c:24:69:15:7a:c0:97:
7a:48:cb:0a:7f:18:73:2b:47:ea:29:00:78:da:8c:
fa:e3:2c:3b:17:96:78:e4:ce:62:36:dc:9d:9b:59:
e0:79:ac:e2:47:b3:05:a4:f0:b1:14:15:d3:e1:a5:
50:89:6d:81:be:e8:73:60:8f:e9:95:2c:72:aa:ee:
6b:d4:de:9b:e5:59:95:72:15:6a:cd:54:99:21:49:
10:f1:35:13:81:e9:ac:39:07:bf:63:4c:4e:48:a9:
99:5e:e6:4b:81:ed:68:15:a8:af:33:46:5e:aa:49:
dd:d8:a0:c5:a6:d4:2d:aa:47:cc:e1:ea:6a:65:b2:
a0:a4:83:2a:19:9b:dc:e7:cc:c7:ef:20:4f:db:4c:
2b:5f:fd:c0:47:bc:82:e9:2f:52:0c:0a:11:82:d5:
a0:08:96:aa:2e:c2:9b:ef:68:c3:d7:3b:7c:74:79:
24:7d:8a:7d:d8:9e:d4:57:60:2d:28:a7:ba:93:2e:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:77:D5:FC:36:ED:F9:AD:79:69:39:6D:0A:1A:2B:C7:3E:13:60
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xq931fw27fmteWk5bQoaK8c-E2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0/24
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.58.50.0/24
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.40.0/23
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.170.0/24
31.59.174.0/23
94.183.178.0/24
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.36.0/22
217.60.186.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9c:03:28:1f:91:1d:7f:dc:96:31:4f:48:1f:3c:92:2e:e7:
18:3d:d5:10:0d:7d:d6:20:bb:aa:1a:07:11:11:e6:a7:64:b8:
a3:02:f8:ad:10:8e:6d:1d:fc:70:8b:bc:ea:a6:6b:26:94:27:
9e:d2:be:10:e8:f2:9b:64:5b:1f:59:3b:11:bb:75:c4:4d:f0:
d8:0b:a6:f0:f2:36:55:d3:8a:04:7d:5c:8d:8c:c9:fe:dc:e7:
8c:86:55:e4:e5:b1:59:b2:bd:1e:59:5d:3a:ba:a8:31:34:56:
ae:b7:b4:91:b6:00:e3:40:4a:bc:1f:ca:22:71:0a:4f:be:36:
b0:d3:87:67:bf:20:89:f3:52:90:63:11:7a:13:20:34:89:da:
19:3f:2e:41:34:69:32:32:a5:8f:e9:ac:48:2c:0b:84:d6:b9:
3e:e1:9c:f8:26:1d:93:08:14:ab:9f:f1:9f:88:4a:e5:16:0d:
ec:59:6f:66:db:b2:de:91:b4:0f:ac:8b:0c:5b:26:d8:23:3b:
63:10:8a:23:12:79:66:f5:1e:06:86:77:49:28:54:89:22:db:
25:67:6d:ae:49:a9:96:d0:12:db:43:7b:b6:17:88:c7:c0:f1:
b9:d6:0d:94:0f:4f:ad:00:af:78:fb:d0:fd:c9:f7:05:40:28:
70:ab:e6:13
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAZpZ9n+5xUhZ0NPoXXjTN357MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTA2MTYxODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmFmNzdkNWZjMzZlZGY5YWQ3OTY5Mzk2ZDBhMWEyYmM3M2UxMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCQyWrOPP0VXimIi2p1QzqFb7mw
edBxiwV8aSgrTrwvhaD34sXBQwOI05UJGPDxkpY/zJc+GXgG+bggp1hcRjrc24wk
aRV6wJd6SMsKfxhzK0fqKQB42oz64yw7F5Z45M5iNtydm1ngeaziR7MFpPCxFBXT
4aVQiW2BvuhzYI/plSxyqu5r1N6b5VmVchVqzVSZIUkQ8TUTgemsOQe/Y0xOSKmZ
XuZLge1oFaivM0Zeqknd2KDFptQtqkfM4epqZbKgpIMqGZvc58zH7yBP20wrX/3A
R7yC6S9SDAoRgtWgCJaqLsKb72jD1zt8dHkkfYp92J7UV2AtKKe6ky7xQQIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFMavd9X8Nu35rXlpOW0KGivHPhNgMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveHE5MzFmdzI3Zm10ZVdrNWJRb2FLOGMtRTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCCAR4EAgABMIIB
FjAMAwQAHzgbAwQAHzgcAwQAHzgwAwQAHzhxAwQAHzh1AwQAHziSAwQBHzjEMAwD
BAIfOMwDBAAfOM4DBAAfON4DBAAfOOMDBAAfORgwDAMEAR85GgMEAR85HAMEAR85
LjAMAwQAHzk9AwQGHzkAAwQBHzlcMAwDBAAfOWkDBAEfOWwDBAAfOXYwDAMEAB85
nQMEAB85ngMEAB86MgMEAB86VwMEAB86hgMEAB86qwMEAB863AMEAB864gMEAR87
KAMEAR87eAMEAB87iAMEAR87igMEAB87qgMEAR87rgMEAF63sjAMAwQBXre2AwQG
XreAAwQCXrfoAwQD2TwAAwQC2TwkAwQA2Ty6AwQB2Tz4AwQA2Tz8MA0GCSqGSIb3
DQEBCwUAA4IBAQCdnAMoH5Edf9yWMU9IHzySLucYPdUQDX3WILuqGgcREeanZLij
AvitEI5tHfxwi7zqpmsmlCee0r4Q6PKbZFsfWTsRu3XETfDYC6bw8jZV04oEfVyN
jMn+3OeMhlXk5bFZsr0eWV06uqgxNFaut7SRtgDjQEq8H8oicQpPvjaw04dnvyCJ
81KQYxF6EyA0idoZPy5BNGkyMqWP6axILAuE1rk+4Zz4Jh2TCBSrn/GfiErlFg3s
WW9m27LekbQPrIsMWybYIztjEIojEnlm9R4GhndJKFSJItslZ22uSamW0BLbQ3u2
F4jHwPG51g2UD0+tAK94+9D9yfcFQChwq+YT
-----END CERTIFICATE-----
Generated at Thu Nov 6 19:47:09 2025 by rpki-client