Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCdvN3uxQ_oj_afVEx2vWMQ0Tjk.roa
File: oCdvN3uxQ_oj_afVEx2vWMQ0Tjk.roa (raw, json)
Hash identifier: WNCqKs3qqvATaYXkcTYjPZxPxhRRFBd4ihYiy/cM15Y=
Subject key identifier: A0:27:6F:37:7B:B1:43:FA:23:FD:A7:D5:13:1D:AF:58:C4:34:4E:39
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A4D91AAC0140E0A1CBAFE84D890541F0D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCdvN3uxQ_oj_afVEx2vWMQ0Tjk.roa
Signing time: Tue 04 Nov 2025 06:33:03 +0000
ROA not before: Tue 04 Nov 2025 06:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.104.0/22 maxlen: 22
31.56.107.0/24 maxlen: 24
31.56.108.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.120.0/24 maxlen: 24
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.205.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:91:aa:c0:14:0e:0a:1c:ba:fe:84:d8:90:54:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 4 06:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0276f377bb143fa23fda7d5131daf58c4344e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:16:69:e4:cb:60:ea:a7:71:b1:ff:27:5d:
e8:e8:14:c4:84:ee:f6:5e:5e:2f:1a:86:14:d5:b1:
2c:b6:28:1c:30:87:20:1f:9a:ee:26:e4:31:d0:18:
91:75:fb:33:e7:86:23:bf:3e:46:be:0e:54:02:c8:
45:ae:62:f4:ee:78:ba:2a:15:6a:87:32:bb:19:09:
e0:82:bb:a2:3d:fd:f7:0e:28:dc:24:f1:58:d3:d6:
c8:5f:e0:cc:c3:91:ee:10:07:c5:14:5e:42:fd:4a:
7f:df:80:ea:45:7a:73:cc:a7:c0:dc:f1:a3:98:1d:
69:80:a0:1a:d1:8a:21:88:a6:0a:0b:ae:a4:a1:2d:
61:03:cd:63:19:cd:42:0d:6e:32:89:ed:16:ae:13:
3d:c0:cc:84:31:a3:a1:9a:c5:4b:02:52:55:e1:ed:
08:8d:70:fa:88:4d:c6:1f:cd:cb:cf:a4:2c:fc:76:
84:df:7a:01:63:70:44:f4:69:ed:90:17:53:d5:39:
32:aa:ac:e1:a8:d0:02:c9:01:55:0b:43:85:ca:ab:
f2:f0:3a:1c:cc:ee:2c:2c:f1:f0:a7:70:f3:9b:a4:
6f:eb:6f:05:1a:d6:88:9f:24:da:cd:1f:25:7e:8d:
7e:0f:0c:21:11:07:62:bc:64:fe:e1:84:48:e9:11:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:6F:37:7B:B1:43:FA:23:FD:A7:D5:13:1D:AF:58:C4:34:4E:39
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oCdvN3uxQ_oj_afVEx2vWMQ0Tjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0-31.56.32.255
31.56.35.0/24
31.56.43.0-31.56.44.255
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.77.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0-31.57.202.255
31.57.205.0/24
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
33:09:5e:b4:ac:10:00:63:94:4f:f8:bb:d1:a1:59:43:d1:54:
e7:9f:89:3f:8c:47:1f:f9:ff:fb:12:f7:eb:25:1d:fb:f2:9e:
9d:63:b3:9c:d4:74:3a:bf:54:d2:9a:13:a9:96:0f:3a:11:21:
29:11:b4:31:a7:b3:6a:08:39:6f:88:33:52:96:79:a8:43:d2:
f0:99:2a:9a:31:77:3a:35:9c:67:3b:6b:1e:73:4c:a1:8d:65:
d9:19:6d:df:09:a9:cd:e6:e0:06:93:a5:83:2c:8f:f4:58:59:
3b:63:73:2f:6a:77:b9:78:67:50:a3:e7:15:54:07:16:38:70:
4a:05:0b:8b:1f:d6:0f:77:c7:b0:b0:93:83:40:60:69:e6:5e:
d5:81:9e:c5:0e:2a:06:23:cc:12:b1:0c:05:62:37:16:77:f9:
67:0a:3a:a8:ba:4c:16:8c:97:1a:27:ab:9a:40:ce:6a:3c:e8:
e6:b0:0a:47:c1:3d:96:a7:da:ad:8e:98:68:ad:56:96:18:b6:
fe:db:f3:16:bd:55:04:10:09:0c:79:ba:fc:6e:7c:73:fb:ff:
ff:af:2f:b4:aa:41:f8:e8:f2:05:92:ef:39:da:2a:1b:4b:5a:
f7:3c:37:2c:f2:68:c4:1d:8b:2b:13:97:9e:b7:89:95:13:65:
c9:e4:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:08 2025 by rpki-client