Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M540PqnVMO7xvoRPTmpkJzKtTa0.roa
File: M540PqnVMO7xvoRPTmpkJzKtTa0.roa (raw, json)
Hash identifier: Wo/YxF+cUuZaorAo7UdNrBavasrTP7ryPK/NZ+XfCls=
Subject key identifier: 33:9E:34:3E:A9:D5:30:EE:F1:BE:84:4F:4E:6A:64:27:32:AD:4D:AD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CAAB2C3100009CFE2E816363E10BC66B3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M540PqnVMO7xvoRPTmpkJzKtTa0.roa
Signing time: Sun 01 Mar 2026 18:39:27 +0000
ROA not before: Sun 01 Mar 2026 18:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.4.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.80.0/24 maxlen: 24
31.56.82.0/23 maxlen: 23
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.100.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.141.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.239.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.13.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.31.0/24 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.54.0/24 maxlen: 24
31.57.55.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.96.0/24 maxlen: 24
31.57.102.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.37.0/24 maxlen: 24
31.58.39.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.53.0/24 maxlen: 24
31.58.55.0/24 maxlen: 24
31.58.57.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.155.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.212.0/24 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.220.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.253.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:b2:c3:10:00:09:cf:e2:e8:16:36:3e:10:bc:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 1 18:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=339e343ea9d530eef1be844f4e6a642732ad4dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:ff:8f:3b:7d:4c:15:5a:ab:26:9c:35:ed:
9f:6f:9a:18:25:07:2b:66:84:24:95:bf:c3:52:70:
33:82:84:9b:89:bc:03:fc:1d:51:ff:4e:4c:18:63:
b1:f6:cb:ce:9e:fb:52:a7:eb:6c:0d:7b:82:6a:e8:
39:8a:dd:de:f6:f2:08:d6:d0:b7:3e:a7:64:24:69:
ca:5e:f5:49:6f:fc:2e:a4:8e:5e:8b:eb:ca:5f:ba:
41:b9:84:7b:da:f6:76:f6:9d:92:9c:90:c4:f9:32:
6f:f7:5b:17:2e:24:1c:99:6a:b9:a1:4e:67:dd:c1:
d6:15:90:0c:0d:2e:64:ea:fb:98:2a:67:2e:56:4f:
b0:c9:63:7a:30:f9:d9:24:d0:fe:77:e6:55:19:9b:
9a:3f:9a:d8:46:77:03:72:54:0d:b4:72:0e:2e:cc:
86:18:e7:44:6b:8e:07:f6:de:2a:44:db:b0:b2:fb:
bf:4c:ba:08:e5:3c:9d:1c:ba:fa:8d:13:d3:7d:e0:
b9:bd:c3:3a:00:71:f2:9d:13:ae:19:41:ba:02:9d:
b7:47:29:f2:52:7d:05:51:c2:38:cb:f9:4c:ce:06:
3d:f8:42:ed:e5:66:1a:80:4b:65:42:22:d9:6a:c7:
63:0f:b4:8d:cf:0d:b3:b5:1a:07:a1:00:4f:48:03:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:34:3E:A9:D5:30:EE:F1:BE:84:4F:4E:6A:64:27:32:AD:4D:AD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M540PqnVMO7xvoRPTmpkJzKtTa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.64.0/24
31.56.68.0/23
31.56.75.0/24
31.56.77.0/24
31.56.79.0-31.56.83.255
31.56.87.0/24
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.141.0/24
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.218.0/24
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.94.0-31.57.96.255
31.57.102.0/24
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.160.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.191.0-31.57.196.255
31.57.200.0-31.57.202.255
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.249.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.45.0/24
31.58.50.0-31.58.55.255
31.58.57.0/24
31.58.64.0/23
31.58.68.0/22
31.58.84.0-31.58.88.255
31.58.96.0/22
31.58.103.0/24
31.58.146.0/24
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.52.0/22
31.59.76.0/22
31.59.96.0/22
31.59.108.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.172.0/24
31.59.196.0-31.59.211.255
31.59.215.0/24
31.59.220.0-31.59.227.255
31.59.232.0/22
31.59.253.0-31.59.255.255
Signature Algorithm: sha256WithRSAEncryption
a9:72:d7:a4:b0:72:35:f8:79:51:f4:66:9c:33:a7:93:55:d6:
82:20:33:67:ba:a8:10:9f:f7:48:b3:c0:44:f0:84:d0:f3:a4:
58:b7:e0:40:64:f4:74:14:71:c1:02:dd:6c:27:f0:00:d5:b3:
d2:92:0a:2b:f8:85:17:9d:88:66:5c:7c:99:b2:20:a0:99:3e:
a8:d9:8c:80:91:90:f6:a8:80:6b:bc:4e:1e:4a:a0:13:46:49:
0c:34:49:8d:ed:14:19:52:6f:ea:a6:6f:66:be:8e:48:95:97:
7b:f3:2b:0b:42:c7:e7:d1:b6:d2:1e:c0:b8:6f:89:63:bf:56:
57:c2:c8:c5:f0:21:b6:f1:0a:00:69:76:d0:dc:c8:73:dd:04:
bf:84:02:68:ec:4e:e0:83:da:16:c3:0d:a4:1c:ea:4f:82:13:
31:36:31:ed:11:f2:2d:e8:db:a3:15:35:ec:f2:ea:7b:1f:aa:
43:53:7c:5e:e7:45:f2:1a:f1:5d:43:23:5c:7b:57:63:7c:48:
11:f9:ad:86:6e:58:6a:a1:4e:b9:f9:fe:03:f2:ef:a5:73:9d:
fa:a2:53:5c:19:b8:e6:ac:ff:07:0f:4a:6c:ce:84:a2:8d:df:
65:3a:50:b6:9d:71:fb:25:22:87:b5:d0:18:05:da:8e:eb:83:
03:ac:58:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:13 2026 by rpki-client