Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/Wla3v2HAl7YCNyUXL50o6i7nRog.roa
File: Wla3v2HAl7YCNyUXL50o6i7nRog.roa (raw, json)
Hash identifier: meyhssm1okIyg5CgskQZwTUohcxxkQ3loQU928lQacE=
Subject key identifier: 5A:56:B7:BF:61:C0:97:B6:02:37:25:17:2F:9D:28:EA:2E:E7:46:88
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019F36644E7B4948B2FD84BEF61DA49F5456
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/Wla3v2HAl7YCNyUXL50o6i7nRog.roa
Signing time: Mon 06 Jul 2026 07:46:11 +0000
ROA not before: Mon 06 Jul 2026 07:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 188.227.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:64:4e:7b:49:48:b2:fd:84:be:f6:1d:a4:9f:54:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jul 6 07:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a56b7bf61c097b6023725172f9d28ea2ee74688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:e3:7d:7a:83:cf:1f:9c:1a:48:f1:57:01:
2e:04:5f:6a:f5:21:f3:d6:84:cb:90:27:26:51:f0:
2a:dc:0a:b3:42:ad:bb:e5:1b:c5:d3:93:76:4b:f9:
30:0a:b6:bf:6c:0a:f5:57:4e:4d:34:17:6c:cd:bf:
7b:13:ff:68:eb:34:55:cf:28:90:8c:ed:eb:3b:a0:
a9:f7:f2:60:da:49:6c:98:26:ae:91:99:c3:eb:9e:
98:a9:31:4e:ea:f9:f6:72:e3:b6:4d:d8:56:49:e4:
43:f9:db:2e:4f:85:74:b8:63:c9:0f:8f:48:d8:66:
05:0c:ce:81:49:5f:02:4d:1d:3c:06:cb:33:68:c7:
b6:b6:c8:4a:23:71:73:2b:db:da:bc:2c:74:c7:dc:
8e:33:9e:1e:e6:16:42:19:c2:89:5a:1d:fb:57:78:
96:11:ab:5b:02:e8:04:a4:66:75:af:0b:9e:b7:e4:
c0:85:18:e6:34:28:87:dc:c7:fc:38:8c:a8:6c:cc:
74:5c:46:8e:1e:3b:03:73:92:d4:36:27:20:7d:54:
70:5b:44:20:27:c8:5b:fb:23:46:e9:a3:e4:ad:cc:
ed:da:e5:49:17:6c:2f:8a:84:77:e4:89:95:d5:3a:
5e:e9:78:98:f3:95:f5:24:6c:4b:87:dc:a2:ae:92:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:B7:BF:61:C0:97:B6:02:37:25:17:2F:9D:28:EA:2E:E7:46:88
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/Wla3v2HAl7YCNyUXL50o6i7nRog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.198.0/23
Signature Algorithm: sha256WithRSAEncryption
45:15:b4:ea:c4:ed:22:9c:0a:6a:0c:51:3d:f3:66:8b:d3:de:
2c:e4:a7:d2:3e:da:4d:c1:25:34:88:19:b6:0d:1e:65:9b:a8:
01:9d:78:0a:c9:1c:13:2b:75:38:49:57:ef:76:d9:df:79:9a:
b0:af:ff:be:bb:70:ba:af:52:3b:0d:9d:55:16:29:5e:c8:b0:
e9:2c:0d:e1:48:2d:d5:62:a1:21:39:2a:9d:89:d0:80:e4:ad:
db:76:da:c5:e6:08:c4:73:c4:97:06:0d:04:c0:fc:06:3f:95:
85:44:c7:3c:1c:35:b0:e0:42:87:a2:85:c2:b1:16:3f:8d:2a:
18:5e:51:25:31:0c:30:c7:fa:5e:83:58:25:cf:1d:1c:a7:5d:
98:82:13:37:4e:1e:da:35:cc:67:bf:54:d1:ca:ea:88:d2:ef:
60:3d:26:48:7f:d6:1b:72:60:20:33:a8:a8:87:bf:20:97:22:
bb:80:5d:9a:27:99:94:ed:7e:85:b4:d6:a9:5a:e6:88:09:3b:
3f:f5:4f:d2:b0:c6:72:9e:03:6f:41:37:14:55:25:fc:c0:cd:
a8:2b:cc:ce:48:53:63:ba:de:68:e9:07:5a:3f:65:08:e9:28:
6b:d5:c3:b8:12:5d:d2:22:1e:e6:70:4b:c2:c4:f9:a4:eb:b6:
d6:4b:51:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ82ZE57SUiy/YS+9h2kn1RWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjYwNzA2MDc0NjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU2YjdiZjYxYzA5N2I2MDIzNzI1MTcyZjlkMjhlYTJlZTc0Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5LjfXqDzx+cGkjxVwEuBF9q9SHz
1oTLkCcmUfAq3AqzQq275RvF05N2S/kwCra/bAr1V05NNBdszb97E/9o6zRVzyiQ
jO3rO6Cp9/Jg2klsmCaukZnD656YqTFO6vn2cuO2TdhWSeRD+dsuT4V0uGPJD49I
2GYFDM6BSV8CTR08BsszaMe2tshKI3FzK9vavCx0x9yOM54e5hZCGcKJWh37V3iW
EatbAugEpGZ1rwuet+TAhRjmNCiH3Mf8OIyobMx0XEaOHjsDc5LUNicgfVRwW0Qg
J8hb+yNG6aPkrczt2uVJF2wvioR35ImV1Tpe6XiY85X1JGxLh9yirpJinQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpWt79hwJe2AjclFy+dKOou50aIMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvV2xhM3YySEFsN1lDTnlVWEw1MG82aTduUm9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvOPGMA0G
CSqGSIb3DQEBCwUAA4IBAQBFFbTqxO0inApqDFE982aL094s5KfSPtpNwSU0iBm2
DR5lm6gBnXgKyRwTK3U4SVfvdtnfeZqwr/++u3C6r1I7DZ1VFileyLDpLA3hSC3V
YqEhOSqdidCA5K3bdtrF5gjEc8SXBg0EwPwGP5WFRMc8HDWw4EKHooXCsRY/jSoY
XlElMQwwx/peg1glzx0cp12YghM3Th7aNcxnv1TRyuqI0u9gPSZIf9YbcmAgM6io
h78glyK7gF2aJ5mU7X6FtNapWuaICTs/9U/SsMZyngNvQTcUVSX8wM2oK8zOSFNj
ut5o6QdaP2UI6Shr1cO4El3SIh7mcEvCxPmk67bWS1ER
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client