Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BJoDQOtLbNS40oPcNbEylWLMTQA.roa
File: BJoDQOtLbNS40oPcNbEylWLMTQA.roa (raw, json)
Hash identifier: BM2l8Zr7ffjmpU+bFMWRRo+V6/llsXEiLrlwxxpjJF4=
Subject key identifier: 04:9A:03:40:EB:4B:6C:D4:B8:D2:83:DC:35:B1:32:95:62:CC:4D:00
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E1B828024497CD6257177C323C55DBDE1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BJoDQOtLbNS40oPcNbEylWLMTQA.roa
Signing time: Tue 12 May 2026 09:26:37 +0000
ROA not before: Tue 12 May 2026 09:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.196.0/24 maxlen: 24
31.56.197.0/24 maxlen: 24
31.56.204.0/24 maxlen: 24
31.56.205.0/24 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.56.228.0/24 maxlen: 24
31.56.229.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 24
31.57.27.0/24 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/24 maxlen: 24
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 24
31.57.93.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.79.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.38.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.168.0/24 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.159.0/24 maxlen: 24
94.183.177.0/24 maxlen: 24
94.183.178.0/24 maxlen: 24
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 24
94.183.190.0/24 maxlen: 24
94.183.191.0/24 maxlen: 24
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 24
94.183.235.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.98.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:82:80:24:49:7c:d6:25:71:77:c3:23:c5:5d:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 09:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049a0340eb4b6cd4b8d283dc35b1329562cc4d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:b2:0d:2c:4e:24:b1:41:fb:b8:f8:91:2d:
95:14:ae:7d:37:38:18:c1:65:fe:ab:fd:04:bd:06:
25:c5:c8:b6:53:26:64:8c:36:76:a1:3b:cc:41:46:
92:25:01:5a:6d:8e:59:f2:f6:a9:cb:ab:b6:f0:5b:
57:dd:28:63:aa:a7:08:1a:a5:a9:92:6a:55:11:90:
59:42:69:3d:d8:2c:09:87:21:21:0c:3a:dc:ba:b1:
87:4b:94:8b:48:61:f5:2c:7e:89:d9:6c:cc:bb:18:
7a:fd:20:1f:53:b8:57:63:53:59:e8:0f:55:b8:0a:
26:91:bf:13:df:fc:c4:75:a6:aa:08:89:c1:9f:98:
4c:fb:ab:4c:75:24:2e:05:1a:f7:89:9d:bb:04:27:
26:9f:b9:60:0f:c6:bc:3d:f4:db:4e:77:79:db:74:
6d:0b:dd:65:16:90:b1:94:2d:15:cf:3d:6c:08:ba:
27:d4:94:6e:26:3e:d3:db:bc:6d:70:b2:bf:73:09:
5f:10:38:1b:05:14:7e:18:e4:b1:5a:94:86:59:d9:
21:2e:48:c6:ae:f1:4b:0c:24:10:81:10:3c:9d:e7:
12:4d:eb:50:a7:c0:1c:c7:c9:61:7e:ea:6e:65:c2:
5e:61:cb:ee:29:53:03:7b:c7:31:9f:67:fd:c0:af:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:03:40:EB:4B:6C:D4:B8:D2:83:DC:35:B1:32:95:62:CC:4D:00
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BJoDQOtLbNS40oPcNbEylWLMTQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.176.0/22
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0-31.56.229.255
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.57.250.0/24
31.58.50.0/24
31.58.76.0/22
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.38.0/24
31.59.40.0/23
31.59.102.0-31.59.106.255
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.168.0/24
31.59.170.0/24
31.59.174.0/23
94.183.151.0/24
94.183.159.0/24
94.183.177.0-94.183.178.255
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.26.0/24
217.60.36.0/22
217.60.60.0/22
217.60.98.0/24
217.60.186.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6b:c0:aa:5a:68:d8:45:5a:e0:22:09:67:51:67:d6:91:53:
d2:79:f3:5a:6e:f0:85:f0:d6:58:81:31:15:f3:e2:46:d7:3e:
53:78:bc:78:1f:a8:a1:4f:c6:d2:ed:c4:ea:6c:f6:0a:e5:cf:
5f:00:c2:46:2d:da:9b:27:dc:f5:03:57:1a:07:f4:10:65:13:
c1:1b:03:12:fa:30:ab:3d:24:8e:99:2e:2f:1e:79:c6:41:72:
de:88:89:8b:0f:c0:94:13:4f:9f:72:28:a4:92:79:15:75:11:
b9:aa:4a:4c:ab:38:78:d0:d5:5a:57:5a:e6:b0:8e:2b:7c:b5:
5a:7a:b5:94:d2:a9:b8:8d:41:50:20:e1:2b:9f:a0:3d:8a:43:
34:80:16:ec:9b:26:36:e2:93:a9:f0:76:59:e6:3f:5d:53:39:
77:fb:9c:eb:09:42:48:54:4e:fe:f4:99:a9:0e:1e:2e:4b:6e:
e1:e4:f9:b2:23:44:b5:fe:71:5a:f8:80:52:a7:ce:07:3b:06:
a8:da:ce:57:41:7c:5a:07:e6:2b:72:82:bb:b3:c2:b2:9d:92:
ca:cb:0b:b1:9b:1e:61:41:51:d2:76:d7:95:b4:5d:53:84:ab:
bd:db:a9:04:87:ce:32:1a:22:69:75:94:eb:54:ae:1b:c0:e7:
85:a6:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:35 2026 by rpki-client