Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jfRmztYyLmbZShUgy28kWz0VsTY.roa
File: jfRmztYyLmbZShUgy28kWz0VsTY.roa (raw, json)
Hash identifier: 7DtIsz2b57S6hPfYXkfJB1W2Pblex8tzqUQXpiCWLZg=
Subject key identifier: 8D:F4:66:CE:D6:32:2E:66:D9:4A:15:20:CB:6F:24:5B:3D:15:B1:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E1B661F44C2D5DD8964BA73456A962AA5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jfRmztYyLmbZShUgy28kWz0VsTY.roa
Signing time: Tue 12 May 2026 08:55:37 +0000
ROA not before: Tue 12 May 2026 08:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.4.0/24 maxlen: 24
31.56.6.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.46.0/24 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.59.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.64.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.77.0/24 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.80.0/24 maxlen: 24
31.56.82.0/23 maxlen: 23
31.56.90.0/23 maxlen: 23
31.56.96.0/22 maxlen: 22
31.56.96.0/24 maxlen: 24
31.56.98.0/23 maxlen: 23
31.56.100.0/22 maxlen: 22
31.56.100.0/23 maxlen: 23
31.56.100.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.111.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.141.0/24 maxlen: 24
31.56.152.0/23 maxlen: 24
31.56.152.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.56.160.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.180.0/23 maxlen: 23
31.56.180.0/24 maxlen: 24
31.56.190.0/23 maxlen: 23
31.56.190.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.200.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.220.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.56.224.0/23 maxlen: 23
31.56.228.0/22 maxlen: 24
31.56.230.0/23 maxlen: 23
31.56.230.0/24 maxlen: 24
31.56.231.0/24 maxlen: 24
31.56.236.0/22 maxlen: 24
31.56.236.0/23 maxlen: 23
31.56.237.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.12.0/23 maxlen: 24
31.57.12.0/24 maxlen: 24
31.57.13.0/24 maxlen: 24
31.57.14.0/23 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.38.0/23 maxlen: 23
31.57.39.0/24 maxlen: 24
31.57.44.0/24 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.94.0/23 maxlen: 23
31.57.120.0/22 maxlen: 24
31.57.120.0/23 maxlen: 23
31.57.124.0/22 maxlen: 24
31.57.126.0/23 maxlen: 23
31.57.132.0/23 maxlen: 23
31.57.136.0/21 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.146.0/23 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.168.0/22 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.176.0/21 maxlen: 21
31.57.184.0/22 maxlen: 24
31.57.186.0/23 maxlen: 23
31.57.192.0/22 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.222.0/23 maxlen: 24
31.57.224.0/22 maxlen: 22
31.57.232.0/22 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.252.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.50.0/23 maxlen: 24
31.58.52.0/22 maxlen: 22
31.58.64.0/23 maxlen: 24
31.58.68.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.103.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.138.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.58.172.0/22 maxlen: 24
31.58.212.0/22 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.220.0/22 maxlen: 22
31.58.221.0/24 maxlen: 24
31.58.224.0/22 maxlen: 24
31.58.228.0/24 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.52.0/24 maxlen: 24
31.59.54.0/24 maxlen: 24
31.59.76.0/22 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.98.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.112.0/22 maxlen: 22
31.59.116.0/22 maxlen: 24
31.59.119.0/24 maxlen: 24
31.59.136.0/21 maxlen: 24
31.59.144.0/21 maxlen: 24
31.59.172.0/24 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.198.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.200.0/24 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.202.0/24 maxlen: 24
31.59.203.0/24 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
31.59.220.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
31.59.224.0/22 maxlen: 22
31.59.230.0/24 maxlen: 24
31.59.232.0/22 maxlen: 22
31.59.232.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:66:1f:44:c2:d5:dd:89:64:ba:73:45:6a:96:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 08:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8df466ced6322e66d94a1520cb6f245b3d15b136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:46:7e:dc:c3:92:24:66:58:62:43:9d:b0:
af:ab:6f:08:5b:fa:40:50:6d:4a:2b:b6:c7:7d:c7:
7b:e3:ca:75:86:b7:bb:c3:41:a0:95:0f:48:92:77:
71:fe:f7:ee:cd:7a:8d:4e:cd:83:49:34:a9:b5:f9:
b9:61:65:4c:c2:43:27:9c:65:5a:41:b6:18:58:db:
74:fb:cf:a3:5d:bb:c5:d6:54:60:ee:89:0e:da:0a:
ac:fa:4d:ad:de:80:b0:0e:bd:83:75:26:89:38:76:
cb:26:99:6f:93:54:69:d9:10:70:97:58:69:47:12:
99:71:47:8b:fb:af:1b:4f:5a:42:00:82:12:46:6f:
d8:c2:a8:01:1e:6e:bc:45:f2:c7:f5:dc:59:1a:e1:
2e:b7:67:30:68:c9:d2:4f:aa:0c:b5:c7:56:fe:fd:
d6:22:f8:05:d5:5a:aa:1d:61:33:2b:c7:16:43:cd:
4f:cb:19:15:b4:6c:f1:58:db:5e:75:f3:48:88:f1:
19:2c:bf:d6:26:f2:cc:0e:52:d2:a2:54:7f:ec:85:
a2:4b:2d:65:46:aa:a5:16:b9:a4:62:0e:d4:47:73:
ea:45:9f:3d:e1:90:59:c9:32:1d:08:49:26:90:46:
ed:20:85:fe:06:bf:80:6b:cf:80:64:d4:bf:09:5f:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:66:CE:D6:32:2E:66:D9:4A:15:20:CB:6F:24:5B:3D:15:B1:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jfRmztYyLmbZShUgy28kWz0VsTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0-31.56.6.255
31.56.28.0/22
31.56.34.0/23
31.56.46.0/24
31.56.57.0/24
31.56.59.0/24
31.56.61.0/24
31.56.64.0/24
31.56.68.0/23
31.56.75.0/24
31.56.77.0/24
31.56.79.0-31.56.83.255
31.56.90.0/23
31.56.96.0-31.56.112.255
31.56.114.0/23
31.56.118.0-31.56.123.255
31.56.141.0/24
31.56.152.0/23
31.56.160.0/21
31.56.180.0/22
31.56.190.0-31.56.195.255
31.56.200.0/22
31.56.208.0/21
31.56.220.0/23
31.56.224.0/23
31.56.228.0/22
31.56.236.0/22
31.57.11.0-31.57.15.255
31.57.24.0/21
31.57.38.0/23
31.57.44.0/24
31.57.52.0-31.57.63.255
31.57.94.0/23
31.57.120.0/21
31.57.132.0/23
31.57.136.0/21
31.57.146.0/23
31.57.152.0/24
31.57.168.0/22
31.57.176.0-31.57.187.255
31.57.192.0/22
31.57.197.0/24
31.57.200.0-31.57.202.255
31.57.208.0-31.57.227.255
31.57.232.0/22
31.57.238.0/24
31.57.252.0/22
31.58.34.0-31.58.39.255
31.58.44.0/23
31.58.50.0-31.58.55.255
31.58.64.0/23
31.58.68.0/22
31.58.84.0/22
31.58.96.0/22
31.58.103.0/24
31.58.130.0/23
31.58.138.0/23
31.58.152.0/22
31.58.172.0/22
31.58.212.0/22
31.58.220.0-31.58.228.255
31.58.231.0/24
31.59.52.0/22
31.59.76.0/22
31.59.96.0/22
31.59.109.0-31.59.110.255
31.59.112.0/21
31.59.136.0-31.59.151.255
31.59.172.0/24
31.59.196.0-31.59.211.255
31.59.215.0/24
31.59.220.0-31.59.227.255
31.59.230.0/24
31.59.232.0/22
31.59.254.0/23
Signature Algorithm: sha256WithRSAEncryption
69:dc:a3:8b:8c:0a:27:42:19:b8:62:26:2e:da:3d:c5:e7:34:
95:11:58:3a:4d:a4:04:c5:06:8f:d1:40:4f:d0:44:3e:65:5a:
02:fc:80:e5:ce:66:8a:c7:2d:2e:7b:17:66:72:22:0f:74:c9:
35:16:cc:3d:fc:91:66:89:d5:ab:53:9b:7f:3f:f1:9a:37:8b:
34:67:7e:39:22:64:21:48:17:25:83:57:0e:94:56:4a:59:9f:
7c:99:14:2f:1a:76:b9:d4:e7:03:d5:11:f6:74:98:4e:1f:d2:
ab:56:c0:4d:d8:4d:ac:f0:1c:6d:66:27:b6:4a:73:0f:c9:f1:
1a:eb:b4:9e:30:2e:e2:45:71:a5:f3:cd:94:fb:6a:c8:82:04:
7f:ca:f5:4e:96:7a:36:f8:fe:5c:e0:d4:74:a5:2e:72:c7:5a:
e0:c1:d8:0d:49:24:9d:df:ff:93:a3:51:d9:fc:d5:d0:a2:c1:
88:c6:28:ef:27:fc:ef:47:e2:b3:4d:43:f1:a4:4c:c7:dc:80:
07:07:f1:fc:72:0d:f4:ff:ef:70:f1:c2:a4:30:2f:e6:6f:3b:
59:1c:6a:fc:48:65:d9:00:ae:78:a9:66:b2:45:97:67:15:dd:
a0:b3:98:65:89:69:7f:9a:9a:5c:ec:4f:88:ff:14:ec:56:a8:
b5:70:62:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:33:23 2026 by rpki-client