Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CKhpQGwwkug-oIKzE-HCobgcR4A.roa
File: CKhpQGwwkug-oIKzE-HCobgcR4A.roa (raw, json)
Hash identifier: CRuee7TIYL51rRaqwxt+VcUSo7XJFJ0dkGNM/8UqGiM=
Subject key identifier: 08:A8:69:40:6C:30:92:E8:3E:A0:82:B3:13:E1:C2:A1:B8:1C:47:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B58023754F3554C7D34B418AB7ACB7C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CKhpQGwwkug-oIKzE-HCobgcR4A.roa
Signing time: Fri 18 Sep 2026 17:11:08 +0000
ROA not before: Fri 18 Sep 2026 17:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.82.0/23 maxlen: 23
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.12.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.15.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.48.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.55.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.66.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.96.0/24 maxlen: 24
31.57.102.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/23 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.242.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.37.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.55.0/24 maxlen: 24
31.58.60.0/22 maxlen: 24
31.58.62.0/24 maxlen: 24
31.58.63.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.89.0/24 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.96.0/24 maxlen: 24
31.58.98.0/24 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.155.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.222.0/23 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.59.0/24 maxlen: 24
31.59.72.0/22 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
31.59.75.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.117.0/24 maxlen: 24
31.59.119.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 16:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:80:23:75:4f:35:54:c7:d3:4b:41:8a:b7:ac:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 17:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08a869406c3092e83ea082b313e1c2a1b81c4780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:40:6b:ee:8f:1b:8a:48:6b:b2:54:55:ba:
14:6e:15:11:42:eb:c7:b0:ce:7e:2c:c9:06:f6:da:
d5:ca:4c:19:8f:7c:2a:a9:13:05:57:9e:e6:1f:86:
0c:0f:fa:eb:65:93:22:42:52:4f:07:50:87:5f:c3:
d1:9b:a4:4f:40:95:56:23:65:b5:a4:9f:e5:63:93:
47:50:85:56:7b:0f:67:de:0c:01:02:c0:23:55:2f:
b6:09:49:b0:ec:7f:46:92:6a:96:8f:b8:0c:e3:ca:
6c:e2:70:43:a7:71:b4:c3:69:61:47:be:2c:b8:59:
68:95:f3:5d:c4:0a:6a:10:e9:2b:fe:32:1a:d2:a7:
b0:7b:8c:6e:1b:22:aa:cb:95:20:5f:a8:6c:32:0e:
83:41:37:6f:dd:33:2f:cf:62:0f:08:a6:0b:ae:2c:
90:c6:58:20:2f:cc:f1:0d:c4:d7:da:19:ed:28:a3:
ee:81:d1:16:0c:47:c4:c3:4c:43:16:3e:e6:2d:1b:
5f:67:f1:2e:5f:a2:50:73:48:7a:38:d8:3f:3a:76:
ff:d1:62:2b:03:7f:20:8b:a8:7a:04:2d:0a:89:13:
b8:01:93:d2:a8:81:15:ce:35:09:86:08:cd:3f:cb:
30:a9:b4:e1:9f:5c:cb:17:b9:9c:65:d2:f8:45:fc:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:69:40:6C:30:92:E8:3E:A0:82:B3:13:E1:C2:A1:B8:1C:47:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CKhpQGwwkug-oIKzE-HCobgcR4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0/22
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.142.0/23
31.56.148.0-31.56.153.255
31.56.160.0/21
31.56.180.0/23
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.2.0/23
31.57.5.0-31.57.6.255
31.57.8.0/24
31.57.11.0-31.57.15.255
31.57.24.0/21
31.57.38.0/23
31.57.48.0/24
31.57.52.0-31.57.63.255
31.57.66.0/24
31.57.94.0-31.57.96.255
31.57.102.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.242.0/24
31.57.252.0/22
31.58.33.0-31.58.39.255
31.58.41.0/24
31.58.45.0/24
31.58.50.0-31.58.55.255
31.58.60.0-31.58.65.255
31.58.68.0/22
31.58.84.0/22
31.58.89.0/24
31.58.96.0/22
31.58.103.0/24
31.58.146.0/24
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.57.0/24
31.59.59.0/24
31.59.72.0/21
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/21
31.59.136.0/21
31.59.171.0-31.59.172.255
31.59.196.0-31.59.203.255
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
31.59.254.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:66:59:06:c5:fe:f4:80:5b:22:e2:83:1a:79:95:9b:8f:03:
28:6e:3f:1d:61:2e:4e:b5:1b:fa:5c:00:37:82:bc:66:20:d1:
f7:8f:3b:0e:17:c5:37:46:8c:53:34:bc:c8:9b:c6:ae:0e:d1:
05:f8:11:c6:fb:8a:b1:7b:00:81:9f:6e:6c:65:58:fe:cb:1d:
c0:53:ee:85:47:ae:a2:ca:46:6f:50:29:b9:78:15:6e:12:d5:
8a:76:ee:f8:d3:3d:33:35:26:98:4e:4e:d8:c7:4e:95:57:08:
79:c5:95:61:8c:ff:38:ca:4d:bd:c8:de:fd:47:4f:e4:ff:90:
0c:2c:98:96:ea:36:5e:69:ea:58:b5:9e:72:de:1f:27:78:16:
6e:e8:65:d9:34:3c:30:53:e4:e6:d9:6f:7a:e4:39:15:0c:ea:
3b:8f:09:0c:80:f5:a6:d2:83:c8:f4:80:f0:1f:81:2b:69:38:
7c:00:c5:72:02:9c:4c:63:64:20:3c:0b:e2:96:a9:8e:34:1a:
53:28:8b:a2:af:e1:50:4c:c4:bf:97:97:2c:7d:4b:59:08:25:
16:b1:01:ee:f2:92:da:65:94:b7:da:d9:91:53:8b:33:a0:f0:
87:31:41:75:a9:96:a4:cf:c8:b6:47:e4:f3:d9:d4:7c:ec:94:
e9:2e:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:10 2026 by rpki-client