
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa
File: ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa (raw, json)
Hash identifier: F4l4iQ9gHYrgVhQRSCKaVhvf30ybHsTVavJTeT+JfP4=
Subject key identifier: 6D:AF:64:66:97:D5:61:FE:16:12:62:99:76:0C:C3:6E:46:85:3C:0C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199F897C284CDFA0D221A011BE079838E25
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa
Signing time: Sat 18 Oct 2025 18:31:59 +0000
ROA not before: Sat 18 Oct 2025 18:31:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.25.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.29.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.47.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.181.0/24 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.192.0/22 maxlen: 22
31.56.192.0/24 maxlen: 24
31.56.193.0/24 maxlen: 24
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.57.12.0/23 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.216.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.239.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.57.251.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.59.0/24 maxlen: 24
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.224.0/22 maxlen: 24
31.59.59.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.160.0/21 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:97:c2:84:cd:fa:0d:22:1a:01:1b:e0:79:83:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 18 18:31:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6daf646697d561fe16126299760cc36e46853c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:85:24:6a:b5:7c:48:42:9c:1f:63:a2:0e:
81:b9:67:01:1c:f6:d2:f6:0e:55:8d:ed:9b:21:29:
09:87:44:75:97:83:5c:12:5a:55:b3:e9:49:e3:9e:
73:6e:35:83:2e:96:a7:5b:37:d8:52:e9:27:84:04:
5e:c7:c1:46:49:2f:2e:72:b1:8e:1a:c1:55:ab:c4:
f3:b3:c3:d4:30:31:61:ac:0d:c1:e1:cf:b9:1b:f1:
4f:3a:af:4a:c9:0d:78:df:b9:d1:94:49:19:25:ca:
18:3a:2e:c9:74:ee:39:53:8f:88:3a:de:52:d5:03:
86:4f:26:0e:60:5d:52:b6:aa:c6:16:79:98:61:35:
64:1c:42:b4:39:dc:26:0d:56:6c:30:7b:d4:f2:1d:
eb:73:60:08:f2:65:6b:5a:e8:17:10:50:51:71:ac:
03:67:73:6e:56:72:28:a3:a9:14:51:5c:0b:ec:99:
c4:9b:61:3b:a0:59:cf:b7:85:20:10:db:01:e2:3d:
40:c3:3b:12:a3:bb:05:4f:71:02:ee:86:7c:85:1e:
1c:ba:06:61:97:f5:d8:05:ca:fa:b4:63:de:ac:36:
a1:fc:9b:49:a5:04:57:02:cd:7d:85:87:f8:75:85:
ee:fc:79:df:f7:eb:12:77:05:2e:2e:50:50:fb:96:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AF:64:66:97:D5:61:FE:16:12:62:99:76:0C:C3:6E:46:85:3C:0C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ba9kZpfVYf4WEmKZdgzDbkaFPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.25.0/24
31.56.28.0/22
31.56.35.0/24
31.56.43.0/24
31.56.47.0/24
31.56.57.0/24
31.56.71.0/24
31.56.80.0/22
31.56.90.0/23
31.56.96.0/20
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.180.0/22
31.56.188.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.12.0/22
31.57.24.0/21
31.57.36.0/22
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.200.0/23
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.239.0/24
31.57.250.0-31.57.255.255
31.58.34.0/23
31.58.50.0-31.58.55.255
31.58.59.0/24
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.227.255
31.59.59.0/24
31.59.76.0/22
31.59.96.0/22
31.59.112.0/22
31.59.136.0-31.59.151.255
31.59.160.0/21
31.59.224.0/22
31.59.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:35:a8:e1:31:9d:0f:04:de:af:e3:53:aa:9a:7e:ec:86:50:
74:bb:87:e4:90:78:24:04:eb:f4:0a:00:a9:dc:ef:0b:4d:4d:
5c:0d:7d:60:bf:8a:a8:82:e9:2c:2d:d0:56:2f:fa:1b:57:72:
fb:ae:04:0d:98:be:fb:9e:be:1e:60:0d:04:65:80:92:29:af:
65:77:98:68:3b:1b:09:e7:ec:df:e4:3c:b8:1b:ac:eb:b0:95:
2d:5a:4c:62:69:02:85:c9:12:cc:45:65:9f:26:ca:b3:45:ef:
bb:ab:ca:c9:21:46:1b:cc:69:18:28:ff:98:88:d7:51:a4:7d:
2d:86:93:f6:63:68:4e:10:69:4f:63:e8:6d:15:4e:29:2c:08:
3e:5d:55:83:1b:62:a7:00:7c:67:a2:ce:82:77:cc:d1:75:4a:
4e:7c:cb:e3:d3:e8:81:82:20:1a:bd:6c:bc:45:df:62:d7:15:
58:d2:97:2a:88:d5:49:4c:da:00:df:40:9e:5b:67:73:99:23:
90:8f:3e:0c:fd:29:1d:e8:97:5f:06:79:83:e1:ec:6a:bd:78:
f7:54:94:f0:0c:c2:be:2d:25:c8:91:7c:57:82:14:e8:e4:2e:
3e:7e:d0:02:a6:a0:18:a7:ed:11:52:02:f9:de:b8:59:34:a1:
e3:66:dc:58
-----BEGIN CERTIFICATE-----
MIIGmDCCBYCgAwIBAgISAZn4l8KEzfoNIhoBG+B5g44lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDE4MTgzMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGFmNjQ2Njk3ZDU2MWZlMTYxMjYyOTk3NjBjYzM2ZTQ2ODUzYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3qFJGq1fEhCnB9jog6BuWcBHPbS
9g5Vje2bISkJh0R1l4NcElpVs+lJ455zbjWDLpanWzfYUuknhARex8FGSS8ucrGO
GsFVq8Tzs8PUMDFhrA3B4c+5G/FPOq9KyQ1437nRlEkZJcoYOi7JdO45U4+IOt5S
1QOGTyYOYF1StqrGFnmYYTVkHEK0OdwmDVZsMHvU8h3rc2AI8mVrWugXEFBRcawD
Z3NuVnIoo6kUUVwL7JnEm2E7oFnPt4UgENsB4j1AwzsSo7sFT3EC7oZ8hR4cugZh
l/XYBcr6tGPerDah/JtJpQRXAs19hYf4dYXu/Hnf9+sSdwUuLlBQ+5Y+TQIDAQAB
o4IDpDCCA6AwHQYDVR0OBBYEFG2vZGaX1WH+FhJimXYMw25GhTwMMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYmE5a1pwZlZZZjRXRW1LWmRnekRia2FGUEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBuAYIKwYBBQUHAQcBAf8EggGnMIIBozCCAZ8EAgABMIIB
lwMEAR84BAMEAB84GQMEAh84HAMEAB84IwMEAB84KwMEAB84LwMEAB84OQMEAB84
RwMEAh84UAMEAR84WgMEBB84YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQCHzi0MAwD
BAIfOLwDBAIfOMADBAIfOMgDBAMfONADBAEfONwDBAEfOOADBAIfOOQDBAIfOOwD
BAIfOQwDBAMfORgDBAIfOSQwDAMEAh85NAMEBh85AAMEAR85XgMEAx85eAMEAR85
hAMEAx85iAMEAR85kgMEAh85qDAMAwQEHzmwAwQCHzm4AwQCHznAAwQBHznIMAwD
BAQfOdADBAIfOeADBAIfOegDBAAfOe8wCwMEAR85+gMDAR84AwQBHzoiMAwDBAEf
OjIDBAMfOjADBAAfOjsDBAEfOkADBAIfOkQDBAIfOlQDBAIfOpgDBAIfOqwDBAIf
OtQwDAMEAh863AMEAh864AMEAB87OwMEAh87TAMEAh87YAMEAh87cDAMAwQDHzuI
AwQDHzuQAwQDHzugAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IBAQCoNajh
MZ0PBN6v41Oqmn7shlB0u4fkkHgkBOv0CgCp3O8LTU1cDX1gv4qoguksLdBWL/ob
V3L7rgQNmL77nr4eYA0EZYCSKa9ld5hoOxsJ5+zf5Dy4G6zrsJUtWkxiaQKFyRLM
RWWfJsqzRe+7q8rJIUYbzGkYKP+YiNdRpH0thpP2Y2hOEGlPY+htFU4pLAg+XVWD
G2KnAHxnos6Cd8zRdUpOfMvj0+iBgiAavWy8Rd9i1xVY0pcqiNVJTNoA30CeW2dz
mSOQjz4M/Skd6JdfBnmD4exqvXj3VJTwDMK+LSXIkXxXghTo5C4+ftACpqAYp+0R
UgL53rhZNKHjZtxY
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:46 2025 by rpki-client