Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DvVisPlAcP3IwZQKSYIxrgYQ64Y.roa
File:                     DvVisPlAcP3IwZQKSYIxrgYQ64Y.roa (raw, json)
Hash identifier:          N9+YdjZSABbQ34wFyzhuTidj1I/biQHiRv7rBsGsG4Y=
Subject key identifier:   0E:F5:62:B0:F9:40:70:FD:C8:C1:94:0A:49:82:31:AE:06:10:EB:86
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019C6BE761DA858CA6756C909E1B5806C463
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DvVisPlAcP3IwZQKSYIxrgYQ64Y.roa
Signing time:             Tue 17 Feb 2026 14:00:51 +0000
ROA not before:           Tue 17 Feb 2026 14:00:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56971
IP address blocks:        31.56.27.0/24 maxlen: 24
                          31.56.28.0/24 maxlen: 24
                          31.56.48.0/24 maxlen: 24
                          31.56.113.0/24 maxlen: 24
                          31.56.117.0/24 maxlen: 24
                          31.56.146.0/24 maxlen: 24
                          31.56.176.0/22 maxlen: 24
                          31.56.196.0/24 maxlen: 24
                          31.56.197.0/24 maxlen: 24
                          31.56.204.0/24 maxlen: 24
                          31.56.205.0/24 maxlen: 24
                          31.56.206.0/24 maxlen: 24
                          31.56.222.0/24 maxlen: 24
                          31.56.227.0/24 maxlen: 24
                          31.56.228.0/24 maxlen: 24
                          31.56.229.0/24 maxlen: 24
                          31.57.24.0/24 maxlen: 24
                          31.57.26.0/24 maxlen: 24
                          31.57.27.0/24 maxlen: 24
                          31.57.28.0/23 maxlen: 24
                          31.57.28.0/24 maxlen: 24
                          31.57.29.0/24 maxlen: 24
                          31.57.46.0/24 maxlen: 24
                          31.57.47.0/24 maxlen: 24
                          31.57.61.0/24 maxlen: 24
                          31.57.62.0/24 maxlen: 24
                          31.57.63.0/24 maxlen: 24
                          31.57.92.0/24 maxlen: 24
                          31.57.93.0/24 maxlen: 24
                          31.57.105.0/24 maxlen: 24
                          31.57.106.0/24 maxlen: 24
                          31.57.107.0/24 maxlen: 24
                          31.57.108.0/24 maxlen: 24
                          31.57.109.0/24 maxlen: 24
                          31.57.118.0/24 maxlen: 24
                          31.57.157.0/24 maxlen: 24
                          31.57.158.0/24 maxlen: 24
                          31.58.50.0/24 maxlen: 24
                          31.58.76.0/22 maxlen: 24
                          31.58.76.0/24 maxlen: 24
                          31.58.77.0/24 maxlen: 24
                          31.58.78.0/24 maxlen: 24
                          31.58.79.0/24 maxlen: 24
                          31.58.87.0/24 maxlen: 24
                          31.58.134.0/24 maxlen: 24
                          31.58.171.0/24 maxlen: 24
                          31.58.220.0/24 maxlen: 24
                          31.58.226.0/24 maxlen: 24
                          31.59.40.0/23 maxlen: 24
                          31.59.40.0/24 maxlen: 24
                          31.59.41.0/24 maxlen: 24
                          31.59.102.0/23 maxlen: 24
                          31.59.104.0/23 maxlen: 24
                          31.59.106.0/24 maxlen: 24
                          31.59.120.0/24 maxlen: 24
                          31.59.121.0/24 maxlen: 24
                          31.59.136.0/24 maxlen: 24
                          31.59.138.0/24 maxlen: 24
                          31.59.139.0/24 maxlen: 24
                          31.59.168.0/24 maxlen: 24
                          31.59.170.0/24 maxlen: 24
                          31.59.174.0/24 maxlen: 24
                          31.59.175.0/24 maxlen: 24
                          94.183.178.0/24 maxlen: 24
                          94.183.182.0/24 maxlen: 24
                          94.183.183.0/24 maxlen: 24
                          94.183.184.0/24 maxlen: 24
                          94.183.185.0/24 maxlen: 24
                          94.183.186.0/24 maxlen: 24
                          94.183.187.0/24 maxlen: 24
                          94.183.188.0/24 maxlen: 24
                          94.183.189.0/24 maxlen: 24
                          94.183.190.0/24 maxlen: 24
                          94.183.191.0/24 maxlen: 24
                          94.183.232.0/24 maxlen: 24
                          94.183.233.0/24 maxlen: 24
                          94.183.234.0/24 maxlen: 24
                          94.183.235.0/24 maxlen: 24
                          217.60.0.0/21 maxlen: 24
                          217.60.0.0/24 maxlen: 24
                          217.60.1.0/24 maxlen: 24
                          217.60.2.0/24 maxlen: 24
                          217.60.3.0/24 maxlen: 24
                          217.60.4.0/24 maxlen: 24
                          217.60.5.0/24 maxlen: 24
                          217.60.6.0/24 maxlen: 24
                          217.60.7.0/24 maxlen: 24
                          217.60.36.0/24 maxlen: 24
                          217.60.37.0/24 maxlen: 24
                          217.60.38.0/24 maxlen: 24
                          217.60.39.0/24 maxlen: 24
                          217.60.60.0/22 maxlen: 24
                          217.60.186.0/24 maxlen: 24
                          217.60.248.0/24 maxlen: 24
                          217.60.249.0/24 maxlen: 24
                          217.60.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6b:e7:61:da:85:8c:a6:75:6c:90:9e:1b:58:06:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Feb 17 14:00:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ef562b0f94070fdc8c1940a498231ae0610eb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:42:09:d6:7d:c6:7c:2d:3d:6a:2b:8f:c6:
                    cf:39:8a:f7:e5:68:02:95:a5:51:18:18:87:45:ba:
                    7d:e4:3c:86:db:16:0a:ba:43:22:6f:d3:af:1b:b4:
                    8c:18:09:04:2e:2f:c3:6b:57:16:52:b3:f1:b9:f5:
                    50:2d:e9:15:65:1b:be:61:e9:ec:5e:8a:54:0f:4a:
                    09:06:6a:1c:f3:b0:eb:29:b0:d6:c2:2d:42:2b:10:
                    c9:cd:72:34:3c:30:01:9b:76:f0:7e:f6:70:17:dc:
                    42:8c:e5:0c:94:2d:96:28:01:1c:d8:6c:ce:d0:45:
                    d5:23:e3:1e:ca:de:f9:c0:db:0b:d1:46:9e:6f:64:
                    cb:a8:29:a4:8a:e6:1b:e8:50:a0:99:1f:f8:f2:85:
                    42:11:a7:28:b9:24:45:2e:41:e1:c8:f5:75:df:5a:
                    86:69:da:3a:49:49:ac:0e:2b:69:01:7b:6f:f5:53:
                    35:d9:7c:aa:4b:4f:d7:37:36:ba:84:76:43:27:17:
                    af:3a:6e:fd:9a:a2:09:34:0e:9e:f5:dd:a0:0e:e0:
                    85:53:6a:fe:5d:a5:00:51:5c:bb:6c:ca:4b:1f:62:
                    6f:6c:0d:5c:d5:e6:4a:a0:ab:3e:c8:c5:ed:44:5e:
                    e6:a7:06:d6:da:62:d8:04:cf:43:cc:88:35:fd:f6:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:62:B0:F9:40:70:FD:C8:C1:94:0A:49:82:31:AE:06:10:EB:86
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DvVisPlAcP3IwZQKSYIxrgYQ64Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.27.0-31.56.28.255
                  31.56.48.0/24
                  31.56.113.0/24
                  31.56.117.0/24
                  31.56.146.0/24
                  31.56.176.0/22
                  31.56.196.0/23
                  31.56.204.0-31.56.206.255
                  31.56.222.0/24
                  31.56.227.0-31.56.229.255
                  31.57.24.0/24
                  31.57.26.0-31.57.29.255
                  31.57.46.0/23
                  31.57.61.0-31.57.63.255
                  31.57.92.0/23
                  31.57.105.0-31.57.109.255
                  31.57.118.0/24
                  31.57.157.0-31.57.158.255
                  31.58.50.0/24
                  31.58.76.0/22
                  31.58.87.0/24
                  31.58.134.0/24
                  31.58.171.0/24
                  31.58.220.0/24
                  31.58.226.0/24
                  31.59.40.0/23
                  31.59.102.0-31.59.106.255
                  31.59.120.0/23
                  31.59.136.0/24
                  31.59.138.0/23
                  31.59.168.0/24
                  31.59.170.0/24
                  31.59.174.0/23
                  94.183.178.0/24
                  94.183.182.0-94.183.191.255
                  94.183.232.0/22
                  217.60.0.0/21
                  217.60.36.0/22
                  217.60.60.0/22
                  217.60.186.0/24
                  217.60.248.0/23
                  217.60.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:f9:c4:a6:0d:b3:5c:92:b3:f7:f0:8f:3c:dd:8d:5a:bc:
         96:ce:21:d1:8a:b1:dc:54:83:5a:a3:a1:1b:e9:87:9d:11:ca:
         f3:4f:fc:f0:1b:2f:15:d5:7b:97:31:85:5e:4c:2e:7c:47:98:
         be:08:ba:f6:d6:00:be:f6:30:ec:fc:01:4f:f6:7c:66:d3:88:
         e6:d4:68:08:53:63:55:62:16:c1:2e:47:7d:ee:7c:ae:80:fd:
         ac:65:bd:da:a6:40:51:c6:7c:21:a7:b2:34:22:ba:85:d8:bb:
         16:3c:7f:85:d2:34:86:23:2f:98:e8:34:7c:f3:d2:bc:d7:c4:
         d1:fb:9d:44:d6:80:1e:48:cf:6d:47:e7:21:1c:31:a3:7e:51:
         1e:3f:4f:7b:67:88:fa:06:3a:9c:30:0c:4b:c9:07:13:09:d9:
         59:dd:a8:1d:c4:4f:10:cf:ad:9a:ef:94:77:bf:f4:a6:b3:81:
         b4:95:f6:13:e2:e3:50:74:3f:ef:13:80:dc:72:ee:79:0a:1f:
         b4:f4:ef:7d:24:91:9d:5a:57:6e:b8:ba:33:6c:b3:fb:9c:0d:
         3f:f7:33:88:d0:ee:14:40:78:14:f6:18:08:71:ce:ae:89:ad:
         fc:99:b2:27:ae:09:31:0d:11:66:2c:e5:8c:70:4e:22:b7:f1:
         c6:e9:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:42 2026 by rpki-client