Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/FLOFSwxmlp__IY_MNe6ozZnVxEU.roa
File: FLOFSwxmlp__IY_MNe6ozZnVxEU.roa (raw, json)
Hash identifier: iZ4J+KbrNX8I3OGQG4f62bLwcfaq5tzaPM0gjPVnnaw=
Subject key identifier: 14:B3:85:4B:0C:66:96:9F:FF:21:8F:CC:35:EE:A8:CD:99:D5:C4:45
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A131B04861E23F6BA85F2BA32C6D0061BE
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/FLOFSwxmlp__IY_MNe6ozZnVxEU.roa
Signing time: Mon 12 Oct 2026 19:56:38 +0000
ROA not before: Mon 12 Oct 2026 19:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44051
IP address blocks: 2.58.64.0/24 maxlen: 24
2.58.65.0/24 maxlen: 24
2.58.66.0/24 maxlen: 24
2.58.67.0/24 maxlen: 24
5.187.0.0/24 maxlen: 24
5.187.1.0/24 maxlen: 24
5.187.2.0/24 maxlen: 24
5.187.3.0/24 maxlen: 24
5.187.4.0/24 maxlen: 24
5.187.5.0/24 maxlen: 24
5.187.6.0/24 maxlen: 24
5.187.7.0/24 maxlen: 24
31.172.68.0/24 maxlen: 24
31.172.70.0/24 maxlen: 24
31.172.71.0/24 maxlen: 24
31.172.72.0/24 maxlen: 24
31.172.73.0/24 maxlen: 24
31.172.75.0/24 maxlen: 24
31.172.77.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.138.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
79.132.142.0/24 maxlen: 24
79.132.143.0/24 maxlen: 24
89.127.192.0/24 maxlen: 24
89.127.194.0/24 maxlen: 24
89.127.198.0/24 maxlen: 24
89.127.200.0/24 maxlen: 24
89.127.203.0/24 maxlen: 24
89.127.208.0/24 maxlen: 24
89.127.210.0/24 maxlen: 24
89.127.213.0/24 maxlen: 24
89.127.215.0/24 maxlen: 24
89.127.218.0/24 maxlen: 24
89.127.220.0/24 maxlen: 24
91.228.152.0/22 maxlen: 22
91.228.152.0/24 maxlen: 24
91.228.153.0/24 maxlen: 24
91.228.154.0/24 maxlen: 24
91.228.155.0/24 maxlen: 24
103.75.124.0/24 maxlen: 24
103.75.127.0/24 maxlen: 24
103.228.168.0/24 maxlen: 24
103.228.169.0/24 maxlen: 24
103.228.170.0/24 maxlen: 24
103.228.171.0/24 maxlen: 24
130.17.0.0/24 maxlen: 24
130.17.4.0/24 maxlen: 24
130.17.6.0/24 maxlen: 24
130.17.10.0/24 maxlen: 24
130.17.12.0/24 maxlen: 24
130.17.13.0/24 maxlen: 24
130.17.15.0/24 maxlen: 24
130.17.17.0/24 maxlen: 24
130.17.20.0/24 maxlen: 24
130.17.21.0/24 maxlen: 24
130.17.22.0/24 maxlen: 24
130.17.24.0/24 maxlen: 24
130.17.25.0/24 maxlen: 24
130.17.27.0/24 maxlen: 24
130.17.30.0/24 maxlen: 24
130.17.31.0/24 maxlen: 24
162.248.160.0/24 maxlen: 24
162.248.164.0/24 maxlen: 24
162.248.165.0/24 maxlen: 24
162.248.166.0/24 maxlen: 24
162.248.167.0/24 maxlen: 24
185.21.8.0/24 maxlen: 24
185.44.206.0/24 maxlen: 24
185.44.207.0/24 maxlen: 24
185.134.200.0/24 maxlen: 24
185.134.203.0/24 maxlen: 24
194.154.24.0/24 maxlen: 24
194.154.30.0/24 maxlen: 24
195.26.237.0/24 maxlen: 24
199.195.193.0/24 maxlen: 24
212.2.234.0/24 maxlen: 24
212.2.235.0/24 maxlen: 24
213.193.196.0/24 maxlen: 24
213.239.156.0/24 maxlen: 24
217.177.10.0/24 maxlen: 24
217.177.72.0/24 maxlen: 24
2a02:6b40::/32 maxlen: 32
2a02:6b40::/48 maxlen: 48
2a02:6b40:1::/48 maxlen: 48
2a02:6b40:1000::/48 maxlen: 48
2a02:6b40:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b0:48:61:e2:3f:6b:a8:5f:2b:a3:2c:6d:00:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 12 19:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14b3854b0c66969fff218fcc35eea8cd99d5c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:8d:9c:ee:14:47:01:a6:64:06:55:bb:08:
27:58:da:bd:29:bc:56:f8:4f:86:a6:c8:52:fa:b6:
1e:9e:43:d8:3f:8d:21:41:ec:5a:03:f0:1b:7c:be:
78:b4:7e:db:ed:f5:d7:df:2a:98:7b:85:61:08:39:
f0:86:af:82:aa:26:5b:0e:91:7b:5f:da:5f:f3:2f:
3a:0e:f7:f2:b0:85:13:32:75:e3:de:45:9c:cf:4c:
cd:03:76:07:45:d2:4f:f0:ec:2f:eb:6b:6e:8c:88:
0e:34:5e:9d:68:f8:fd:72:af:6b:1b:c4:9c:e7:13:
33:76:ff:ec:36:ce:08:b2:38:fb:c2:4d:d0:65:4c:
6c:04:49:df:52:36:58:69:99:1c:67:e8:67:a7:88:
28:b9:aa:50:b8:16:8e:09:27:77:b5:f4:b9:4f:77:
0a:7a:4c:b5:6b:81:8d:1b:c3:b1:5a:45:1a:c1:7c:
46:a7:97:9b:14:ce:8c:35:33:5c:fe:db:f3:ea:e6:
02:b5:59:88:79:39:d5:8a:54:61:e1:1c:9d:b1:21:
a7:73:37:31:40:e4:b4:8d:29:59:ca:12:a8:1e:60:
e8:8c:d4:7e:86:bf:36:6c:34:25:3c:4a:4a:4e:3e:
f8:52:bc:2b:82:b2:6c:bd:bf:ac:0c:1a:50:c5:fb:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:85:4B:0C:66:96:9F:FF:21:8F:CC:35:EE:A8:CD:99:D5:C4:45
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/FLOFSwxmlp__IY_MNe6ozZnVxEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
5.187.0.0/21
31.172.68.0/24
31.172.70.0-31.172.73.255
31.172.75.0/24
31.172.77.0/24
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
89.127.192.0/24
89.127.194.0/24
89.127.198.0/24
89.127.200.0/24
89.127.203.0/24
89.127.208.0/24
89.127.210.0/24
89.127.213.0/24
89.127.215.0/24
89.127.218.0/24
89.127.220.0/24
91.228.152.0/22
103.75.124.0/24
103.75.127.0/24
103.228.168.0/22
130.17.0.0/24
130.17.4.0/24
130.17.6.0/24
130.17.10.0/24
130.17.12.0/23
130.17.15.0/24
130.17.17.0/24
130.17.20.0-130.17.22.255
130.17.24.0/23
130.17.27.0/24
130.17.30.0/23
162.248.160.0/24
162.248.164.0/22
185.21.8.0/24
185.44.206.0/23
185.134.200.0/24
185.134.203.0/24
194.154.24.0/24
194.154.30.0/24
195.26.237.0/24
199.195.193.0/24
212.2.234.0/23
213.193.196.0/24
213.239.156.0/24
217.177.10.0/24
217.177.72.0/24
IPv6:
2a02:6b40::/32
Signature Algorithm: sha256WithRSAEncryption
47:77:6a:e9:40:57:7e:71:4c:9a:49:d0:98:df:c0:41:8c:51:
b7:21:b5:fd:4f:6d:58:48:12:c0:ed:85:52:2d:62:48:d6:35:
02:8d:ab:71:48:6f:ab:14:44:79:ab:7d:63:b6:6f:b4:5e:8f:
37:06:f3:3b:db:dd:a6:02:1d:a0:8f:aa:13:15:f5:ce:73:a5:
34:4a:60:27:84:40:6b:9f:3f:e5:8c:44:d7:38:a0:b2:2a:e9:
fc:89:ba:39:66:29:b4:e7:09:02:c1:cd:45:40:ae:14:ca:62:
50:0c:3b:37:61:d2:f7:73:23:1c:76:fa:0a:9e:03:0a:29:bc:
b1:2f:6c:a2:1c:ee:89:76:82:32:f1:f6:66:19:98:de:d6:dc:
e2:b6:42:e7:21:91:39:f3:5e:bd:81:e4:6d:27:2a:2b:0c:66:
f2:a4:8c:98:cb:ca:51:6c:46:7f:51:24:70:49:6a:ac:e9:74:
ef:f3:0a:55:b8:af:e1:03:97:29:00:77:1c:f3:cb:04:00:c7:
7c:00:8f:41:1b:75:f5:55:09:e7:58:4b:c2:cf:c6:b8:81:8e:
92:eb:22:ce:c8:bd:df:54:2d:3e:82:21:50:5f:29:82:de:00:
c2:a6:4d:4c:de:54:cb:de:63:36:1c:e9:89:55:69:8e:49:f2:
26:49:e2:b6
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISAaExsEhh4j9rqF8royxtAGG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYxMDEyMTk1NjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGIzODU0YjBjNjY5NjlmZmYyMThmY2MzNWVlYThjZDk5ZDVjNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5yNnO4URwGmZAZVuwgnWNq9KbxW
+E+GpshS+rYenkPYP40hQexaA/AbfL54tH7b7fXX3yqYe4VhCDnwhq+CqiZbDpF7
X9pf8y86DvfysIUTMnXj3kWcz0zNA3YHRdJP8Owv62tujIgONF6daPj9cq9rG8Sc
5xMzdv/sNs4Isjj7wk3QZUxsBEnfUjZYaZkcZ+hnp4gouapQuBaOCSd3tfS5T3cK
eky1a4GNG8OxWkUawXxGp5ebFM6MNTNc/tvz6uYCtVmIeTnVilRh4RydsSGnczcx
QOS0jSlZyhKoHmDojNR+hr82bDQlPEpKTj74UrwrgrJsvb+sDBpQxfuMQwIDAQAB
o4IDXjCCA1owHQYDVR0OBBYEFBSzhUsMZpaf/yGPzDXuqM2Z1cRFMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvRkxPRlN3eG1scF9fSVlfTU5lNm96Wm5WeEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBcgYIKwYBBQUHAQcBAf8EggFhMIIBXTCCAUoEAgABMIIB
QgMEAgI6QAMEAwW7AAMEAB+sRDAMAwQBH6xGAwQBH6xIAwQAH6xLAwQAH6xNAwQA
T4SIAwQAT4SKAwQAT4SMAwQBT4SOAwQAWX/AAwQAWX/CAwQAWX/GAwQAWX/IAwQA
WX/LAwQAWX/QAwQAWX/SAwQAWX/VAwQAWX/XAwQAWX/aAwQAWX/cAwQCW+SYAwQA
Z0t8AwQAZ0t/AwQCZ+SoAwQAghEAAwQAghEEAwQAghEGAwQAghEKAwQBghEMAwQA
ghEPAwQAghERMAwDBAKCERQDBACCERYDBAGCERgDBACCERsDBAGCER4DBACi+KAD
BAKi+KQDBAC5FQgDBAG5LM4DBAC5hsgDBAC5hssDBADCmhgDBADCmh4DBADDGu0D
BADHw8EDBAHUAuoDBADVwcQDBADV75wDBADZsQoDBADZsUgwDQQCAAIwBwMFACoC
a0AwDQYJKoZIhvcNAQELBQADggEBAEd3aulAV35xTJpJ0JjfwEGMUbchtf1PbVhI
EsDthVItYkjWNQKNq3FIb6sURHmrfWO2b7RejzcG8zvb3aYCHaCPqhMV9c5zpTRK
YCeEQGufP+WMRNc4oLIq6fyJujlmKbTnCQLBzUVArhTKYlAMOzdh0vdzIxx2+gqe
AwopvLEvbKIc7ol2gjLx9mYZmN7W3OK2QuchkTnzXr2B5G0nKisMZvKkjJjLylFs
Rn9RJHBJaqzpdO/zClW4r+EDlykAdxzzywQAx3wAj0EbdfVVCedYS8LPxriBjpLr
Is7Ivd9ULT6CIVBfKYLeAMKmTUzeVMveYzYc6YlVaY5J8iZJ4rY=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:03:20 2026 by rpki-client