Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QJhnhEi8mglBVbkTT2k_20v3ito.roa
File: QJhnhEi8mglBVbkTT2k_20v3ito.roa (raw, json)
Hash identifier: t0xTYVFu/J1747XhdJGBIQ8731xFpb8YJmjPEZD0U3c=
Subject key identifier: 40:98:67:84:48:BC:9A:09:41:55:B9:13:4F:69:3F:DB:4B:F7:8A:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A062249E007C5D6E86274BB663356CFD3F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QJhnhEi8mglBVbkTT2k_20v3ito.roa
Signing time: Wed 02 Sep 2026 12:42:41 +0000
ROA not before: Wed 02 Sep 2026 12:42:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 32
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.176.0/22 maxlen: 32
31.56.196.0/24 maxlen: 32
31.56.197.0/24 maxlen: 32
31.56.204.0/24 maxlen: 32
31.56.205.0/24 maxlen: 32
31.56.206.0/24 maxlen: 32
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 32
31.56.228.0/24 maxlen: 24
31.56.229.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 32
31.57.27.0/24 maxlen: 32
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 32
31.57.62.0/24 maxlen: 32
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 32
31.57.93.0/24 maxlen: 32
31.57.105.0/24 maxlen: 32
31.57.106.0/24 maxlen: 32
31.57.107.0/24 maxlen: 32
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 32
31.58.79.0/24 maxlen: 32
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.137.0/24 maxlen: 24
31.58.171.0/24 maxlen: 32
31.58.179.0/24 maxlen: 24
31.58.181.0/24 maxlen: 24
31.58.209.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.59.38.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 32
31.59.44.0/23 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 32
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.168.0/24 maxlen: 32
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.159.0/24 maxlen: 24
94.183.177.0/24 maxlen: 24
94.183.178.0/24 maxlen: 32
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 32
94.183.190.0/24 maxlen: 32
94.183.191.0/24 maxlen: 32
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 32
94.183.235.0/24 maxlen: 32
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.60.0/22 maxlen: 32
217.60.98.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:24:9e:00:7c:5d:6e:86:27:4b:b6:63:35:6c:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 12:42:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4098678448bc9a094155b9134f693fdb4bf78ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:04:9a:1f:f9:c5:45:ca:e5:4b:56:ab:dc:
5c:3f:8d:ba:d2:19:df:44:3d:42:b3:bd:53:15:bb:
ae:c7:16:89:4c:78:b4:45:0d:ff:ed:47:ac:ca:c1:
1c:b5:6e:8f:da:96:27:6c:dc:a3:a2:3f:85:54:cd:
29:73:43:97:40:1b:6b:cc:a9:35:1c:ef:07:7f:8a:
90:d5:4b:0d:fd:14:55:39:19:28:6e:d2:20:e3:71:
3c:0e:b2:8b:85:53:35:6b:f7:1c:6d:57:21:81:85:
e3:eb:75:e8:21:61:da:f3:c8:de:2f:6f:e9:f1:ea:
41:11:1b:40:79:8c:2d:0a:b6:5e:b4:09:af:9e:f4:
cb:96:a0:3d:e8:b7:f9:14:c1:4b:7f:ae:98:7e:9e:
9d:56:46:4d:92:a2:76:18:d1:cf:94:9d:fe:23:5c:
09:28:e9:02:bf:c1:90:ad:91:fd:de:6a:33:fb:b6:
e1:5a:a4:71:41:70:3f:b6:12:56:95:fa:54:40:36:
51:0e:a3:38:ec:91:48:29:64:88:9f:d1:24:cc:9e:
41:2f:18:9e:00:fe:10:bd:3d:ae:2b:41:a2:d2:42:
52:d2:8c:a6:4b:9c:18:ef:fc:a0:ea:aa:da:e1:d6:
4c:c6:fe:cc:32:5c:29:d5:e4:c2:d6:7d:7a:2c:ac:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:67:84:48:BC:9A:09:41:55:B9:13:4F:69:3F:DB:4B:F7:8A:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QJhnhEi8mglBVbkTT2k_20v3ito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.176.0/22
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0-31.56.229.255
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.57.250.0/24
31.58.50.0/24
31.58.76.0/22
31.58.87.0/24
31.58.134.0/24
31.58.137.0/24
31.58.171.0/24
31.58.179.0/24
31.58.181.0/24
31.58.209.0/24
31.58.220.0/24
31.58.226.0/24
31.58.244.0/24
31.59.38.0/24
31.59.40.0/23
31.59.44.0/23
31.59.102.0-31.59.106.255
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.168.0/24
31.59.170.0/24
31.59.174.0/23
94.183.151.0/24
94.183.159.0/24
94.183.177.0-94.183.178.255
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.11.0/24
217.60.26.0/24
217.60.36.0/22
217.60.60.0/22
217.60.98.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5f:18:85:36:ca:2a:61:1f:6b:92:30:5a:2e:c4:8d:a8:df:
8f:d1:cb:44:6e:ec:d5:0e:39:9b:61:b2:12:39:5c:ab:26:8a:
78:82:43:6d:f4:92:fb:d3:e5:15:fa:ee:d5:06:e5:dd:7c:a4:
76:25:43:0e:7e:8c:53:5f:eb:9c:14:40:f0:2e:93:95:30:4c:
24:82:49:87:7e:f9:61:f3:72:85:99:e2:7d:f1:d2:01:93:d4:
d8:76:97:f6:ad:7e:4f:8e:f4:37:6d:9d:ad:a6:fa:8e:db:86:
f0:45:32:6b:c7:e0:a8:80:56:9d:a2:7d:41:46:e4:47:16:e2:
dd:8a:9a:07:9d:fd:4b:6b:31:12:8f:4b:c0:94:4c:bd:41:46:
f0:18:53:23:01:f0:23:65:b6:c5:24:f4:64:74:95:f9:dc:b2:
ca:f7:f9:3a:a4:c0:f9:fa:0f:29:a0:bd:f1:ce:5c:e8:46:37:
fc:5e:ec:a8:a1:3b:1f:19:6e:71:4a:77:0a:49:6b:06:bc:db:
6a:d8:07:31:99:92:12:96:fe:68:93:7a:61:e8:99:fe:5e:a3:
41:e5:27:21:d9:3c:39:ad:48:25:b6:39:d1:a1:e5:a9:af:55:
20:06:10:11:e2:0b:17:63:7c:49:ae:d2:3b:a4:da:9e:50:5c:
ea:58:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:08 2026 by rpki-client