Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XwxRtbNdcTONWR9KuJPDjxVWu4.roa
File: 2XwxRtbNdcTONWR9KuJPDjxVWu4.roa (raw, json)
Hash identifier: ohekLAWkMvIgMMLxj5QmN1OXdNmDovUwFUKE6eq4bPY=
Subject key identifier: D9:7C:31:46:D6:CD:75:C4:CE:35:64:7D:2A:E2:4F:0E:3C:55:5A:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DE32CFA329D65817A83F15E479F83D7E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XwxRtbNdcTONWR9KuJPDjxVWu4.roa
Signing time: Sun 15 Nov 2026 07:53:54 +0000
ROA not before: Sun 15 Nov 2026 07:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.4.0/23 maxlen: 23
31.56.8.0/21 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.82.0/23 maxlen: 23
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.152.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.164.0/24 maxlen: 24
31.56.165.0/24 maxlen: 24
31.56.166.0/24 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.193.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.217.0/24 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.237.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.12.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.66.0/24 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.112.0/24 maxlen: 24
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.131.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.137.0/24 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.159.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.177.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.191.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.212.0/23 maxlen: 24
31.57.212.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.242.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.60.0/22 maxlen: 24
31.58.60.0/24 maxlen: 24
31.58.61.0/24 maxlen: 24
31.58.62.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.98.0/24 maxlen: 24
31.58.116.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.222.0/23 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.72.0/22 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.96.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.117.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:32:cf:a3:29:d6:58:17:a8:3f:15:e4:79:f8:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 07:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d97c3146d6cd75c4ce35647d2ae24f0e3c555aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:49:ea:42:58:10:ab:4f:42:e1:03:df:f1:
63:2a:0e:29:68:95:11:00:fb:5a:40:c3:46:f2:ae:
34:89:6f:89:0d:f0:9a:4f:a4:fe:00:c4:e6:5a:ad:
55:77:c0:ef:60:df:67:a5:b0:f9:7b:5f:1f:38:d3:
a2:68:c2:a7:b0:24:34:55:16:ae:5a:37:87:d1:81:
88:a9:af:01:c4:b1:51:0f:24:01:ef:47:31:8c:46:
3b:59:06:7c:38:26:7f:9a:c0:ad:f7:c8:eb:fd:40:
21:8e:fd:15:f5:75:2e:d1:34:be:3d:6c:e8:b7:65:
75:6c:25:cb:35:1e:ac:6b:b2:6c:c6:4c:6c:e3:44:
63:13:cf:69:b3:05:20:47:6b:98:32:91:8e:94:3a:
9d:07:5f:f4:18:ee:d1:57:9e:ca:f1:16:29:3c:7f:
ef:54:1e:9c:99:f1:78:6e:27:50:81:dc:07:1c:1b:
24:15:78:6e:f7:3e:32:af:34:8d:aa:37:27:a5:b8:
66:b7:1c:9e:eb:6f:8b:38:30:39:d0:c6:69:e6:6d:
1d:db:81:f1:5f:2f:1f:fc:c8:de:7c:9c:47:50:65:
0f:ff:0d:69:d6:d7:4e:f5:b8:ea:0d:44:a5:5d:be:
65:d5:c6:df:e6:1b:d7:34:05:dd:5e:de:fc:8e:04:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:31:46:D6:CD:75:C4:CE:35:64:7D:2A:E2:4F:0E:3C:55:5A:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2XwxRtbNdcTONWR9KuJPDjxVWu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.4.0/23
31.56.8.0/21
31.56.28.0/22
31.56.46.0/24
31.56.73.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.142.0/23
31.56.148.0-31.56.153.255
31.56.160.0/21
31.56.180.0/23
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.217.0-31.56.218.255
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.6.0/24
31.57.8.0/24
31.57.11.0-31.57.15.255
31.57.24.0/21
31.57.38.0/23
31.57.52.0-31.57.63.255
31.57.66.0/24
31.57.94.0/23
31.57.112.0/24
31.57.120.0/21
31.57.131.0-31.57.133.255
31.57.136.0/21
31.57.146.0/23
31.57.155.0/24
31.57.159.0/24
31.57.167.0-31.57.171.255
31.57.176.0-31.57.187.255
31.57.191.0-31.57.195.255
31.57.197.0/24
31.57.200.0/23
31.57.207.0-31.57.227.255
31.57.232.0/22
31.57.242.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.50.0-31.58.55.255
31.58.60.0-31.58.65.255
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.116.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.58.231.0/24
31.59.52.0/22
31.59.57.0/24
31.59.72.0/21
31.59.96.0/22
31.59.109.0-31.59.110.255
31.59.112.0/21
31.59.136.0/21
31.59.172.0/24
31.59.196.0-31.59.203.255
31.59.215.0/24
31.59.224.0/22
31.59.230.0/24
31.59.232.0/22
31.59.254.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e8:83:67:10:8c:3d:43:4c:82:7e:dd:e6:61:e6:68:bc:ad:
40:19:cd:e1:83:72:54:3a:5f:14:12:a5:3b:e1:23:f4:1f:58:
0a:f3:83:5e:f6:bf:a1:89:ef:22:8e:e7:7e:7d:f3:d1:3c:fb:
ed:40:eb:7c:46:bf:80:1c:18:1b:71:d0:5d:01:da:ea:2b:c5:
56:11:b7:cc:61:4c:1f:7d:56:0f:b6:16:ba:a9:cd:ba:d2:1e:
94:89:08:2d:21:26:0e:8b:3d:03:f6:78:7c:e2:09:91:a3:b9:
e9:a3:29:3c:80:a9:fb:e6:d5:7e:a3:28:e0:2a:e1:9e:ac:18:
f3:cf:42:01:cf:28:8d:6c:5d:ea:b6:7b:7e:b6:a9:a7:9a:3f:
40:51:bd:87:0b:6f:f7:4e:77:d5:f9:d9:c4:98:f3:e3:8e:16:
7d:61:28:59:4d:6a:1d:8f:80:59:40:0b:bf:78:92:32:6e:fd:
94:f1:7d:4c:4a:e2:3f:d2:aa:1d:8e:98:62:27:10:4b:61:70:
ea:81:6f:7c:e7:63:c3:71:9d:a8:d7:82:15:df:52:20:57:22:
f9:e7:3e:ae:6e:82:70:ea:5e:cf:de:db:48:61:a5:ec:10:9e:
60:59:88:6e:8b:3d:78:60:6d:32:b2:12:0b:cd:3e:7a:ac:b9:
5e:f0:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:44 2026 by rpki-client