Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/59eYrLYTpubQ7ziIIdqHTcUgjtA.roa
File: 59eYrLYTpubQ7ziIIdqHTcUgjtA.roa (raw, json)
Hash identifier: PzWY9bzVIX+7Zn/yBvHJ738H8uZ2zoJS+QYerblWszM=
Subject key identifier: E7:D7:98:AC:B6:13:A6:E6:D0:EF:38:88:21:DA:87:4D:C5:20:8E:D0
Certificate issuer: /CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1
Certificate serial: 019B7DCB430D781987BBCDD7C387242990B3
Authority key identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/59eYrLYTpubQ7ziIIdqHTcUgjtA.roa
Signing time: Fri 02 Jan 2026 08:20:31 +0000
ROA not before: Fri 02 Jan 2026 08:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12754
IP address blocks: 188.225.128.0/17 maxlen: 17
188.225.128.0/23 maxlen: 23
188.225.130.0/24 maxlen: 24
188.225.131.0/24 maxlen: 24
188.225.132.0/24 maxlen: 24
188.225.133.0/24 maxlen: 24
188.225.134.0/23 maxlen: 23
188.225.134.0/24 maxlen: 24
188.225.135.0/24 maxlen: 24
188.225.137.0/24 maxlen: 24
188.225.138.0/24 maxlen: 24
188.225.139.0/24 maxlen: 24
188.225.140.0/23 maxlen: 23
188.225.140.0/24 maxlen: 24
188.225.141.0/24 maxlen: 24
188.225.142.0/24 maxlen: 24
188.225.143.0/24 maxlen: 24
188.225.144.0/24 maxlen: 24
188.225.145.0/24 maxlen: 24
188.225.146.0/24 maxlen: 24
188.225.148.0/23 maxlen: 23
188.225.148.0/24 maxlen: 24
188.225.149.0/24 maxlen: 24
188.225.150.0/24 maxlen: 24
188.225.151.0/24 maxlen: 24
188.225.152.0/24 maxlen: 24
188.225.153.0/24 maxlen: 24
188.225.154.0/24 maxlen: 24
188.225.156.0/23 maxlen: 23
188.225.156.0/24 maxlen: 24
188.225.157.0/24 maxlen: 24
188.225.158.0/24 maxlen: 24
188.225.159.0/24 maxlen: 24
188.225.164.0/23 maxlen: 23
188.225.164.0/24 maxlen: 24
188.225.166.0/23 maxlen: 23
188.225.168.0/23 maxlen: 23
188.225.170.0/23 maxlen: 23
188.225.170.0/24 maxlen: 24
188.225.171.0/24 maxlen: 24
188.225.172.0/24 maxlen: 24
188.225.173.0/24 maxlen: 24
188.225.174.0/23 maxlen: 23
188.225.174.0/24 maxlen: 24
188.225.175.0/24 maxlen: 24
188.225.176.0/23 maxlen: 23
188.225.176.0/24 maxlen: 24
188.225.177.0/24 maxlen: 24
188.225.178.0/23 maxlen: 23
188.225.178.0/24 maxlen: 24
188.225.179.0/24 maxlen: 24
188.225.180.0/23 maxlen: 23
188.225.180.0/24 maxlen: 24
188.225.181.0/24 maxlen: 24
188.225.182.0/23 maxlen: 23
188.225.182.0/24 maxlen: 24
188.225.183.0/24 maxlen: 24
188.225.184.0/23 maxlen: 23
188.225.184.0/24 maxlen: 24
188.225.185.0/24 maxlen: 24
188.225.186.0/23 maxlen: 23
188.225.186.0/24 maxlen: 24
188.225.190.0/24 maxlen: 24
188.225.191.0/24 maxlen: 24
188.225.192.0/23 maxlen: 23
188.225.192.0/24 maxlen: 24
188.225.193.0/24 maxlen: 24
188.225.198.0/23 maxlen: 23
188.225.202.0/24 maxlen: 24
188.225.203.0/24 maxlen: 24
188.225.204.0/24 maxlen: 24
188.225.205.0/24 maxlen: 24
188.225.210.0/24 maxlen: 24
188.225.211.0/24 maxlen: 24
188.225.212.0/24 maxlen: 24
188.225.213.0/24 maxlen: 24
188.225.214.0/24 maxlen: 24
188.225.215.0/24 maxlen: 24
188.225.216.0/24 maxlen: 24
188.225.217.0/24 maxlen: 24
188.225.218.0/24 maxlen: 24
188.225.219.0/24 maxlen: 24
188.225.220.0/24 maxlen: 24
188.225.221.0/24 maxlen: 24
188.225.222.0/24 maxlen: 24
188.225.224.0/23 maxlen: 23
188.225.224.0/24 maxlen: 24
188.225.225.0/24 maxlen: 24
188.225.226.0/24 maxlen: 24
188.225.227.0/24 maxlen: 24
188.225.228.0/24 maxlen: 24
188.225.229.0/24 maxlen: 24
188.225.230.0/24 maxlen: 24
188.225.231.0/24 maxlen: 24
188.225.232.0/24 maxlen: 24
188.225.233.0/24 maxlen: 24
188.225.234.0/24 maxlen: 24
188.225.235.0/24 maxlen: 24
188.225.236.0/24 maxlen: 24
188.225.237.0/24 maxlen: 24
2a00:4e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:43:0d:78:19:87:bb:cd:d7:c3:87:24:29:90:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1
Validity
Not Before: Jan 2 08:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7d798acb613a6e6d0ef388821da874dc5208ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:1f:ee:2f:90:b3:f7:f3:81:eb:c8:aa:8e:
d1:e5:9b:c8:90:b0:4a:ca:50:7b:04:d9:b1:fd:71:
39:ef:44:72:9b:ac:af:8b:00:51:98:cf:a2:3e:d5:
2b:1d:b8:c8:f1:01:4c:1d:33:6d:3c:4a:64:4b:eb:
89:ea:42:f1:46:1e:8d:b6:48:47:33:57:1c:30:85:
72:0d:44:e7:62:cc:68:ae:54:77:65:fc:35:cd:77:
41:22:7c:b4:24:5f:3a:79:25:8f:d2:b2:1c:0b:c3:
d9:93:3d:af:dc:c2:2e:6c:79:ce:35:00:4d:e2:9d:
0d:ee:68:ea:77:6f:58:6a:48:ae:e2:11:63:a5:6e:
e5:57:e6:9f:10:e7:0b:07:6b:53:6a:2f:5f:a5:81:
3c:6c:67:56:7d:05:89:0a:1a:1c:cb:db:93:99:0e:
b7:de:a9:8a:11:2c:56:f9:db:8b:63:d2:1a:74:cb:
84:e5:47:bc:85:13:ce:20:17:df:14:08:8e:3d:77:
d7:3c:01:45:03:1a:48:61:c8:88:0e:dc:6b:db:c3:
f4:aa:e9:5c:8e:de:36:a2:df:ff:8c:cd:ed:86:d0:
f4:44:63:e4:d3:5e:17:5d:dd:45:e3:e1:fc:0d:eb:
8d:ff:c6:0f:32:79:57:82:d4:13:36:da:54:ff:92:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:98:AC:B6:13:A6:E6:D0:EF:38:88:21:DA:87:4D:C5:20:8E:D0
X509v3 Authority Key Identifier:
keyid:2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/59eYrLYTpubQ7ziIIdqHTcUgjtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.225.128.0/17
IPv6:
2a00:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
48:89:4e:33:a1:80:a3:c5:5c:69:2a:95:39:4f:42:3e:55:6f:
e0:b1:47:c7:4b:5b:76:bd:69:50:56:48:20:a0:7e:f0:e9:c6:
c5:6f:9a:e4:d3:60:05:d8:d4:ed:bb:e0:03:ce:c6:1e:ef:d6:
22:ed:f2:3a:1e:00:b9:34:d1:48:29:a3:cd:89:7a:e8:31:08:
a1:fc:d1:c3:62:fc:9e:d7:6f:19:7f:8a:8b:bc:ea:e8:41:5e:
d2:7d:fc:2f:de:4b:e5:ed:b5:f1:c1:b4:69:46:16:a4:06:13:
73:44:9d:25:55:a4:ac:19:7e:61:3b:19:c2:10:84:6e:1f:6c:
b6:d5:15:fe:52:fb:25:a9:54:cb:62:f7:85:be:d8:25:a2:e5:
58:00:70:6a:6c:7a:59:63:59:6a:27:15:cd:88:0d:0f:59:f6:
f8:41:e1:da:49:92:d4:b3:3a:65:d2:60:8f:e5:98:f9:81:36:
06:87:02:14:ae:b2:17:cc:86:fd:ab:43:b7:e1:a6:a4:15:5e:
02:f2:bc:ff:e7:49:1a:c1:7b:16:6d:57:a6:3e:6b:6b:9f:9e:
7e:9e:8e:9d:f7:6d:33:42:6f:43:d1:ba:a6:be:11:26:6c:b5:
9d:e1:90:32:cb:70:5b:96:3f:bc:12:a2:82:6b:83:70:71:92:
05:68:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:23 2026 by rpki-client