Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C7E4QTNnvrmZYcQ4CRIvG4AcC30.roa
File:                     C7E4QTNnvrmZYcQ4CRIvG4AcC30.roa (raw, json)
Hash identifier:          uPNceh4aFGOUpk1aQhCK23FcFjpxUt6TnOVs2BB5mPM=
Subject key identifier:   0B:B1:38:41:33:67:BE:B9:99:61:C4:38:09:12:2F:1B:80:1C:0B:7D
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01A1AAE29CB1AAEC64799900F812B2082C78
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C7E4QTNnvrmZYcQ4CRIvG4AcC30.roa
Signing time:             Thu 05 Nov 2026 08:45:40 +0000
ROA not before:           Thu 05 Nov 2026 08:45:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.8.0/21 maxlen: 24
                          31.56.8.0/24 maxlen: 24
                          31.56.28.0/22 maxlen: 24
                          31.56.46.0/24 maxlen: 24
                          31.56.73.0/24 maxlen: 24
                          31.56.80.0/22 maxlen: 22
                          31.56.82.0/23 maxlen: 23
                          31.56.90.0/23 maxlen: 23
                          31.56.96.0/22 maxlen: 22
                          31.56.98.0/23 maxlen: 23
                          31.56.100.0/22 maxlen: 22
                          31.56.100.0/23 maxlen: 23
                          31.56.104.0/22 maxlen: 22
                          31.56.108.0/22 maxlen: 22
                          31.56.111.0/24 maxlen: 24
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.142.0/23 maxlen: 24
                          31.56.148.0/22 maxlen: 24
                          31.56.150.0/24 maxlen: 24
                          31.56.152.0/23 maxlen: 24
                          31.56.152.0/24 maxlen: 24
                          31.56.160.0/21 maxlen: 24
                          31.56.160.0/22 maxlen: 24
                          31.56.164.0/24 maxlen: 24
                          31.56.165.0/24 maxlen: 24
                          31.56.166.0/24 maxlen: 24
                          31.56.180.0/23 maxlen: 23
                          31.56.190.0/23 maxlen: 23
                          31.56.190.0/24 maxlen: 24
                          31.56.192.0/22 maxlen: 22
                          31.56.192.0/24 maxlen: 24
                          31.56.193.0/24 maxlen: 24
                          31.56.195.0/24 maxlen: 24
                          31.56.200.0/22 maxlen: 24
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.217.0/24 maxlen: 24
                          31.56.218.0/24 maxlen: 24
                          31.56.220.0/23 maxlen: 23
                          31.56.220.0/24 maxlen: 24
                          31.56.224.0/23 maxlen: 23
                          31.56.228.0/22 maxlen: 24
                          31.56.230.0/23 maxlen: 23
                          31.56.231.0/24 maxlen: 24
                          31.56.236.0/22 maxlen: 24
                          31.56.236.0/23 maxlen: 23
                          31.56.237.0/24 maxlen: 24
                          31.56.238.0/24 maxlen: 24
                          31.57.6.0/24 maxlen: 24
                          31.57.8.0/24 maxlen: 24
                          31.57.12.0/23 maxlen: 24
                          31.57.14.0/23 maxlen: 24
                          31.57.24.0/22 maxlen: 24
                          31.57.28.0/22 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.52.0/22 maxlen: 24
                          31.57.56.0/22 maxlen: 24
                          31.57.60.0/22 maxlen: 24
                          31.57.94.0/23 maxlen: 23
                          31.57.120.0/22 maxlen: 24
                          31.57.120.0/23 maxlen: 23
                          31.57.124.0/22 maxlen: 24
                          31.57.126.0/23 maxlen: 23
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.137.0/24 maxlen: 24
                          31.57.138.0/24 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.155.0/24 maxlen: 24
                          31.57.159.0/24 maxlen: 24
                          31.57.167.0/24 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.177.0/24 maxlen: 24
                          31.57.184.0/22 maxlen: 24
                          31.57.186.0/23 maxlen: 23
                          31.57.191.0/24 maxlen: 24
                          31.57.192.0/22 maxlen: 24
                          31.57.197.0/24 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.207.0/24 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.212.0/23 maxlen: 24
                          31.57.212.0/24 maxlen: 24
                          31.57.213.0/24 maxlen: 24
                          31.57.215.0/24 maxlen: 24
                          31.57.221.0/24 maxlen: 24
                          31.57.222.0/23 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.232.0/22 maxlen: 24
                          31.57.242.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.33.0/24 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.36.0/22 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.52.0/22 maxlen: 22
                          31.58.54.0/24 maxlen: 24
                          31.58.60.0/22 maxlen: 24
                          31.58.60.0/24 maxlen: 24
                          31.58.61.0/24 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.96.0/22 maxlen: 24
                          31.58.96.0/24 maxlen: 24
                          31.58.97.0/24 maxlen: 24
                          31.58.98.0/24 maxlen: 24
                          31.58.116.0/22 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.212.0/22 maxlen: 24
                          31.58.212.0/24 maxlen: 24
                          31.58.213.0/24 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.222.0/23 maxlen: 24
                          31.58.224.0/22 maxlen: 24
                          31.59.52.0/22 maxlen: 24
                          31.59.72.0/22 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.109.0/24 maxlen: 24
                          31.59.110.0/24 maxlen: 24
                          31.59.112.0/22 maxlen: 22
                          31.59.116.0/22 maxlen: 24
                          31.59.116.0/24 maxlen: 24
                          31.59.117.0/24 maxlen: 24
                          31.59.119.0/24 maxlen: 24
                          31.59.136.0/21 maxlen: 24
                          31.59.172.0/24 maxlen: 24
                          31.59.196.0/22 maxlen: 24
                          31.59.196.0/24 maxlen: 24
                          31.59.197.0/24 maxlen: 24
                          31.59.200.0/22 maxlen: 24
                          31.59.201.0/24 maxlen: 24
                          31.59.202.0/24 maxlen: 24
                          31.59.203.0/24 maxlen: 24
                          31.59.215.0/24 maxlen: 24
                          31.59.224.0/22 maxlen: 22
                          31.59.230.0/24 maxlen: 24
                          31.59.232.0/22 maxlen: 22
                          31.59.232.0/24 maxlen: 24
                          31.59.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:e2:9c:b1:aa:ec:64:79:99:00:f8:12:b2:08:2c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Nov  5 08:45:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0bb138413367beb99961c43809122f1b801c0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:11:40:17:cb:ad:14:36:97:7f:a6:48:56:
                    6d:14:a5:db:ec:1d:8f:bc:72:35:e9:ac:e6:04:2a:
                    fd:a5:4e:71:7e:c7:34:83:ea:b4:21:f6:1b:88:4e:
                    d3:24:b2:c0:5a:50:7b:79:9a:c9:01:a6:ce:13:a7:
                    eb:8c:27:39:78:85:0e:02:b7:72:96:99:62:05:5d:
                    07:e9:83:55:61:fe:93:80:56:d1:39:8d:1d:00:d3:
                    bb:b6:2c:57:61:2d:79:ec:01:ec:2f:44:40:13:7b:
                    3a:75:8d:83:1c:62:53:65:5e:4e:b5:a6:0f:83:ed:
                    77:03:86:21:8b:94:88:ef:25:e0:8b:55:dc:ce:21:
                    dd:5d:73:15:22:54:5c:10:ba:6a:47:4e:22:0e:85:
                    10:53:0c:74:64:c5:b2:7e:63:b8:ef:ba:37:19:05:
                    af:15:67:cd:d1:34:45:74:06:94:fc:48:60:66:f7:
                    9f:28:c7:47:8b:4a:e6:20:2a:5a:f6:a1:db:a9:6d:
                    3f:c2:75:49:a0:c9:50:62:14:1a:f3:0e:92:d2:9f:
                    99:f9:4f:84:d7:6b:77:99:34:73:7d:53:d8:22:0c:
                    fc:a7:3f:35:e1:96:6e:1e:c5:d9:3f:5c:60:f3:7e:
                    51:1f:f4:84:fe:7d:dd:00:9f:9a:7f:20:50:77:9e:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B1:38:41:33:67:BE:B9:99:61:C4:38:09:12:2F:1B:80:1C:0B:7D
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C7E4QTNnvrmZYcQ4CRIvG4AcC30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.8.0/21
                  31.56.28.0/22
                  31.56.46.0/24
                  31.56.73.0/24
                  31.56.80.0/22
                  31.56.90.0/23
                  31.56.96.0/20
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.142.0/23
                  31.56.148.0-31.56.153.255
                  31.56.160.0/21
                  31.56.180.0/23
                  31.56.190.0-31.56.195.255
                  31.56.200.0/22
                  31.56.208.0/21
                  31.56.217.0-31.56.218.255
                  31.56.220.0/23
                  31.56.224.0/23
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.6.0/24
                  31.57.8.0/24
                  31.57.12.0/22
                  31.57.24.0/21
                  31.57.38.0/23
                  31.57.52.0-31.57.63.255
                  31.57.94.0/23
                  31.57.120.0/21
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.155.0/24
                  31.57.159.0/24
                  31.57.167.0-31.57.171.255
                  31.57.176.0-31.57.187.255
                  31.57.191.0-31.57.195.255
                  31.57.197.0/24
                  31.57.200.0/23
                  31.57.207.0-31.57.227.255
                  31.57.232.0/22
                  31.57.242.0/24
                  31.57.252.0/22
                  31.58.33.0-31.58.39.255
                  31.58.50.0-31.58.55.255
                  31.58.60.0-31.58.65.255
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.96.0/22
                  31.58.116.0/22
                  31.58.152.0/22
                  31.58.172.0/22
                  31.58.212.0/22
                  31.58.220.0-31.58.227.255
                  31.59.52.0/22
                  31.59.72.0/21
                  31.59.96.0/22
                  31.59.109.0-31.59.110.255
                  31.59.112.0/21
                  31.59.136.0/21
                  31.59.172.0/24
                  31.59.196.0-31.59.203.255
                  31.59.215.0/24
                  31.59.224.0/22
                  31.59.230.0/24
                  31.59.232.0/22
                  31.59.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:c1:7f:25:fb:d5:6f:55:05:33:5c:6a:eb:9f:9f:12:9c:
         bd:31:16:0a:62:11:98:e7:0b:de:b2:36:f5:7b:24:ab:bd:39:
         9e:8d:e2:a0:03:e8:e6:56:77:50:35:29:7d:13:fd:d9:70:08:
         74:6c:24:bd:d3:30:9a:e1:08:df:a5:52:3e:86:8c:d8:3d:b7:
         10:cc:e9:f1:c0:05:14:bf:54:33:9f:5f:14:03:47:33:c4:1b:
         0d:c3:eb:3a:b3:3b:e4:c4:a9:a2:d5:40:cc:53:fa:f0:5c:72:
         26:c8:4f:cc:dd:58:62:e5:01:d1:9e:fb:be:86:03:36:08:42:
         3f:db:7d:13:ce:91:ec:07:08:6b:58:3c:05:e8:10:67:89:dc:
         62:ab:18:5a:a3:68:2a:39:a2:7e:46:b7:ac:ba:04:ac:da:6d:
         11:98:33:d5:08:9f:6a:42:aa:ad:f4:43:41:15:25:63:4d:68:
         11:f9:34:63:c1:14:69:41:92:4c:da:44:72:7e:bf:23:9e:0e:
         b3:a6:ac:ab:eb:73:dd:b2:7a:31:ff:30:15:98:bf:e0:74:2f:
         0c:d1:ac:56:d7:40:83:5c:02:d9:e6:13:3f:32:37:2a:d7:99:
         82:28:b6:26:a6:00:16:2b:dc:40:b1:56:92:9e:c3:2d:23:bb:
         8b:9b:7a:b8
-----BEGIN CERTIFICATE-----
MIIHETCCBfmgAwIBAgISAaGq4pyxquxkeZkA+BKyCCx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTA1MDg0NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmIxMzg0MTMzNjdiZWI5OTk2MWM0MzgwOTEyMmYxYjgwMWMwYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4QRQBfLrRQ2l3+mSFZtFKXb7B2P
vHI16azmBCr9pU5xfsc0g+q0IfYbiE7TJLLAWlB7eZrJAabOE6frjCc5eIUOArdy
lpliBV0H6YNVYf6TgFbROY0dANO7tixXYS157AHsL0RAE3s6dY2DHGJTZV5OtaYP
g+13A4Yhi5SI7yXgi1XcziHdXXMVIlRcELpqR04iDoUQUwx0ZMWyfmO477o3GQWv
FWfN0TRFdAaU/EhgZvefKMdHi0rmICpa9qHbqW0/wnVJoMlQYhQa8w6S0p+Z+U+E
12t3mTRzfVPYIgz8pz814ZZuHsXZP1xg835RH/SE/n3dAJ+afyBQd57oOwIDAQAB
o4IEHTCCBBkwHQYDVR0OBBYEFAuxOEEzZ765mWHEOAkSLxuAHAt9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQzdFNFFUTm52cm1aWWNRNENSSXZHNEFjQzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICMQYIKwYBBQUHAQcBAf8EggIgMIICHDCCAhgEAgABMIIC
EAMEAR84BAMEAx84CAMEAh84HAMEAB84LgMEAB84SQMEAh84UAMEAR84WgMEBB84
YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQBHziOMAwDBAIfOJQDBAEfOJgDBAMfOKAD
BAEfOLQwDAMEAR84vgMEAh84wAMEAh84yAMEAx840DAMAwQAHzjZAwQAHzjaAwQB
HzjcAwQBHzjgAwQCHzjkAwQCHzjsAwQAHzkGAwQAHzkIAwQCHzkMAwQDHzkYAwQB
HzkmMAwDBAIfOTQDBAYfOQADBAEfOV4DBAMfOXgDBAEfOYQDBAMfOYgDBAEfOZID
BAAfOZsDBAAfOZ8wDAMEAB85pwMEAh85qDAMAwQEHzmwAwQCHzm4MAwDBAAfOb8D
BAIfOcADBAAfOcUDBAEfOcgwDAMEAB85zwMEAh854AMEAh856AMEAB858gMEAh85
/DAMAwQAHzohAwQDHzogMAwDBAEfOjIDBAMfOjAwDAMEAh86PAMEAR86QAMEAh86
RAMEAh86VAMEAh86YAMEAh86dAMEAh86mAMEAh86rAMEAh861DAMAwQCHzrcAwQC
HzrgAwQCHzs0AwQDHztIAwQCHztgMAwDBAAfO20DBAAfO24DBAMfO3ADBAMfO4gD
BAAfO6wwDAMEAh87xAMEAh87yAMEAB871wMEAh874AMEAB875gMEAh876AMEAB87
/jANBgkqhkiG9w0BAQsFAAOCAQEALb/BfyX71W9VBTNcauufnxKcvTEWCmIRmOcL
3rI29Xskq705no3ioAPo5lZ3UDUpfRP92XAIdGwkvdMwmuEI36VSPoaM2D23EMzp
8cAFFL9UM59fFANHM8QbDcPrOrM75MSpotVAzFP68FxyJshPzN1YYuUB0Z77voYD
NghCP9t9E86R7AcIa1g8BegQZ4ncYqsYWqNoKjmifka3rLoErNptEZgz1QifakKq
rfRDQRUlY01oEfk0Y8EUaUGSTNpEcn6/I54Os6asq+tz3bJ6Mf8wFZi/4HQvDNGs
VtdAg1wC2eYTPzI3KteZgii2JqYAFivcQLFWkp7DLSO7i5t6uA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:09 2026 by rpki-client