Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UB2-bamjwnDWIlYqRMYaeGTpO1g.roa
File: UB2-bamjwnDWIlYqRMYaeGTpO1g.roa (raw, json)
Hash identifier: DwOjW/72RY61FX75trD6p6ZXwDivC1fpbj4H8R+WPg4=
Subject key identifier: 50:1D:BE:6D:A9:A3:C2:70:D6:22:56:2A:44:C6:1A:78:64:E9:3B:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D57DC22E48471FD41D4A699C473E1578
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UB2-bamjwnDWIlYqRMYaeGTpO1g.roa
Signing time: Sat 23 Aug 2025 05:54:05 +0000
ROA not before: Sat 23 Aug 2025 05:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.28.0/22 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.90.0/23 maxlen: 23
31.56.90.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.191.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.220.0/23 maxlen: 23
31.56.224.0/23 maxlen: 23
31.56.224.0/24 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.183.0/24 maxlen: 24
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.248.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7d:c2:2e:48:47:1f:d4:1d:4a:69:9c:47:3e:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 05:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=501dbe6da9a3c270d622562a44c61a7864e93b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:39:26:5e:72:6a:8b:b9:25:31:51:3d:b1:
85:7f:e4:64:6a:5e:0e:2d:7b:3e:8c:6f:8f:a7:7c:
ae:64:c7:f9:18:bc:64:cb:b3:44:5e:81:7e:7f:59:
ea:88:46:90:5a:49:cb:ea:96:a3:c6:74:84:de:ea:
cf:f6:02:91:9d:48:5e:52:df:a1:e5:ba:41:93:0f:
8e:3c:c6:79:d9:fb:64:48:d4:ac:c2:64:a2:62:9a:
71:13:c5:1b:62:42:e2:c7:da:20:37:e6:6c:46:f7:
d3:ee:5a:aa:9c:1e:79:3e:e2:4b:e5:22:0b:ba:d6:
f6:f4:59:67:ef:c9:28:0f:d5:11:7c:af:08:14:16:
49:2e:6d:88:5c:43:4c:a9:d0:de:2d:3c:4d:48:2e:
f7:e4:2e:69:b9:19:49:44:be:8c:30:0d:2b:60:16:
98:b6:b3:07:f6:ee:13:fe:d3:9c:84:de:de:af:0d:
2f:44:6a:f6:31:c1:bd:ff:14:32:d6:62:af:8a:9a:
1d:b0:05:92:7e:15:52:25:ec:e8:4c:c6:1f:8d:69:
81:08:e4:cd:6b:35:33:49:5b:10:a0:fa:10:68:25:
5e:d8:ce:02:e5:9d:e4:c3:c4:67:ba:ec:8d:30:fa:
ff:8e:0a:cd:c0:8b:52:c4:c6:44:60:74:ea:c9:41:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:BE:6D:A9:A3:C2:70:D6:22:56:2A:44:C6:1A:78:64:E9:3B:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UB2-bamjwnDWIlYqRMYaeGTpO1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.28.0/22
31.56.57.0/24
31.56.71.0/24
31.56.90.0/23
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0-31.56.221.255
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.248.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0/23
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.220.0-31.58.227.255
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0-31.59.169.255
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:43:10:73:31:65:28:62:56:47:3f:b8:f4:6b:43:e2:64:97:
0a:8d:d3:73:68:50:8c:f3:fe:67:94:31:d1:20:0c:99:97:ff:
5e:1b:4d:c8:35:42:df:28:e6:c3:55:ea:c4:0d:bc:0c:00:0b:
40:ec:64:b9:c5:ff:e3:dd:f1:9e:75:f5:d4:84:99:36:5b:87:
97:be:2d:c0:83:1f:4d:35:00:a4:31:29:23:09:e5:e1:e4:ed:
de:fc:3a:bc:7e:d1:8d:97:ae:30:b1:0e:04:c1:93:2e:8c:89:
32:5c:13:13:2c:72:e1:55:d7:b1:2f:3b:84:26:6c:0b:5f:5d:
82:4f:c9:a5:e1:91:41:2e:f3:f9:37:d8:6b:d2:13:2d:30:d3:
36:37:9f:56:a1:87:15:10:7a:09:05:fd:54:8c:51:c8:8d:1f:
73:74:8c:59:1e:46:5c:9a:31:5a:30:84:5e:4e:1a:48:bd:e3:
a8:e6:fd:88:ca:4b:d0:a6:bd:15:b1:7b:9a:3f:f7:75:7f:d7:
b7:04:27:54:06:ae:3b:45:01:57:d3:16:ad:e6:cf:87:55:57:
4c:f1:81:e9:78:b0:69:88:46:62:ce:96:6b:25:20:46:cb:82:
a4:1a:bf:4b:46:75:8e:80:8b:5f:1b:90:7d:63:0b:26:3f:a3:
fe:fa:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:55 2025 by rpki-client