Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XPjTYJHgjzFSf6ntH2gMdOMO8s4.roa
File: XPjTYJHgjzFSf6ntH2gMdOMO8s4.roa (raw, json)
Hash identifier: gRsjCLj5lD3BXADCUCwWuWpLikO4wcEO1n0V79JBTs4=
Subject key identifier: 5C:F8:D3:60:91:E0:8F:31:52:7F:A9:ED:1F:68:0C:74:E3:0E:F2:CE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EB28098FB68FF4FB6F98A0CCF1595BCA8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XPjTYJHgjzFSf6ntH2gMdOMO8s4.roa
Signing time: Wed 10 Jun 2026 17:07:12 +0000
ROA not before: Wed 10 Jun 2026 17:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.4.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.52.0/22 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.60.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.80.0/24 maxlen: 24
31.56.82.0/23 maxlen: 23
31.56.82.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.91.0/24 maxlen: 24
31.56.96.0/22 maxlen: 22
31.56.96.0/24 maxlen: 24
31.56.98.0/23 maxlen: 23
31.56.99.0/24 maxlen: 24
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.141.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.153.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.217.0/24 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.237.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.132.0/24 maxlen: 24
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.242.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.138.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.169.0/24 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.52.0/24 maxlen: 24
31.59.54.0/24 maxlen: 24
31.59.72.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.119.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.220.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:80:98:fb:68:ff:4f:b6:f9:8a:0c:cf:15:95:bc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 17:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf8d36091e08f31527fa9ed1f680c74e30ef2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:bf:d3:88:03:e5:fc:07:72:85:f8:b2:b2:
88:88:45:42:32:e6:58:83:1c:c7:d2:2c:89:11:88:
5f:90:1b:dc:a3:5e:ab:c9:0d:da:55:c4:de:67:90:
10:53:42:90:24:d9:09:10:7a:fa:96:2d:7f:12:2c:
b5:f2:a3:22:f6:f9:63:5e:34:98:73:ec:bb:7f:7f:
45:ed:de:d8:88:07:13:19:b1:0f:cd:83:d0:c0:bb:
91:d8:03:d6:48:1d:94:60:0f:c4:a3:42:06:b0:c3:
0d:c9:a6:f4:c9:c6:28:2b:9a:94:e5:1c:12:cd:a5:
5c:70:13:8f:6f:6f:4a:6d:29:76:2d:13:ea:46:c6:
78:95:28:97:a0:c3:62:71:b9:f1:01:c6:b5:08:74:
3e:8d:87:3e:87:b6:70:27:82:28:a3:ed:37:6b:4e:
11:58:80:a1:cb:64:f8:d2:49:86:95:b1:ea:9b:3d:
43:a3:22:9b:8a:c8:aa:4b:a7:34:ba:68:3b:ee:3c:
88:10:2e:2b:6c:9d:09:8a:64:d8:f6:1b:d4:0c:5d:
7d:05:8f:e7:bc:f6:c8:d4:56:6d:b9:94:a9:7e:5b:
95:a4:fd:87:77:52:c7:47:64:1b:c3:cc:ba:4b:85:
90:24:c4:4b:96:b6:75:11:c6:4d:8b:a2:22:85:63:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:D3:60:91:E0:8F:31:52:7F:A9:ED:1F:68:0C:74:E3:0E:F2:CE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XPjTYJHgjzFSf6ntH2gMdOMO8s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0/22
31.56.34.0/23
31.56.46.0/24
31.56.52.0/22
31.56.59.0-31.56.60.255
31.56.64.0/24
31.56.68.0/23
31.56.77.0/24
31.56.80.0/22
31.56.87.0/24
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.141.0-31.56.143.255
31.56.148.0-31.56.153.255
31.56.160.0/21
31.56.180.0/22
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.217.0-31.56.218.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.155.0/24
31.57.166.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.191.0-31.57.195.255
31.57.200.0-31.57.202.255
31.57.207.0-31.57.227.255
31.57.232.0/22
31.57.242.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.131.0/24
31.58.138.0/23
31.58.152.0/22
31.58.169.0/24
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.72.0/21
31.59.96.0/22
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.196.0-31.59.211.255
31.59.215.0/24
31.59.220.0-31.59.227.255
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:b5:55:d1:9a:f2:dd:b4:52:35:fe:4d:40:37:53:45:7e:0c:
ff:95:6b:09:26:1a:c6:0a:46:99:dd:46:ad:41:d3:d6:b0:82:
12:51:fb:41:90:26:f0:a3:d3:2a:8d:1e:27:48:06:9e:b7:83:
5c:cd:d0:d2:3b:12:a9:b2:93:38:47:54:f5:bd:10:c1:e0:c4:
7f:ff:6a:4d:31:58:f5:d7:c7:58:95:70:af:22:f8:46:92:bb:
bf:47:dd:05:99:4b:e1:8c:bb:68:63:11:d5:62:6f:d5:b0:92:
26:6c:d7:97:12:67:98:2e:e2:35:5f:c1:d3:cb:d1:43:26:58:
ad:c5:1e:82:70:99:97:ca:31:3f:3a:a8:b4:d6:0c:e6:00:39:
e6:3e:c8:c5:a7:f2:80:17:6a:6b:a0:7e:4b:85:cc:2e:00:42:
47:7d:9a:4b:11:45:66:49:8f:49:6b:5a:05:a3:e3:68:d3:56:
73:85:af:aa:7e:9b:ef:1c:ae:27:8c:bf:42:18:cd:b5:71:5d:
ec:e4:d0:d5:24:e7:2c:2d:cf:7a:b4:7e:ca:3c:a1:fe:62:2e:
ad:97:0b:2b:ea:66:ba:c2:b7:a4:27:fa:2e:2b:36:e6:37:c6:
9c:75:0a:61:7e:3b:c6:3a:9b:08:63:15:a1:e4:ba:7c:44:e5:
55:6d:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:26 2026 by rpki-client