Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/GUrIimYEyF55L9rNINzXrQhO8Lk.roa
File: GUrIimYEyF55L9rNINzXrQhO8Lk.roa (raw, json)
Hash identifier: T1/816rQiRZXhuHMHpc5Ba7Qjhjq8yUz/zmVALJcTn8=
Subject key identifier: 19:4A:C8:8A:66:04:C8:5E:79:2F:DA:CD:20:DC:D7:AD:08:4E:F0:B9
Certificate issuer: /CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Certificate serial: 019F2368F5982DAD4E4C6BA7D0BCF455F18D
Authority key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/GUrIimYEyF55L9rNINzXrQhO8Lk.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41075
IP address blocks: 5.56.32.0/24 maxlen: 24
5.56.39.0/24 maxlen: 24
2a01:47c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:98:2d:ad:4e:4c:6b:a7:d0:bc:f4:55:f1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194ac88a6604c85e792fdacd20dcd7ad084ef0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:14:97:cf:51:ed:fd:eb:a9:3f:18:c7:b9:
ff:00:ea:6e:0b:33:7c:0a:3a:d5:ef:7a:dc:2e:8f:
32:8e:d1:ad:12:22:e9:2b:bf:0b:80:66:c5:a0:d8:
d0:23:a2:ba:20:6b:a3:4a:c0:45:61:23:97:b5:c2:
be:4f:fa:29:37:35:bb:36:4e:3b:70:e9:67:9e:ad:
a3:e1:46:9c:87:a0:48:fd:27:c9:f6:7e:b8:06:dc:
85:48:d2:15:f3:2a:df:8c:0c:41:6a:d1:16:9c:1d:
51:43:c9:a9:05:51:57:a9:55:a5:d6:8d:05:79:91:
a0:e0:ea:93:ff:74:4b:2c:8f:75:9b:5e:34:39:c3:
28:e2:cc:a9:a7:3c:fe:e5:39:61:04:0a:42:4c:97:
56:4c:c1:c5:f3:0c:c8:9a:61:9e:57:71:93:6e:b3:
de:71:97:53:6f:d8:9b:4a:b7:ed:6a:fa:55:a2:18:
cf:ee:29:18:09:b9:c1:4b:bf:fa:43:43:1a:74:16:
29:5f:8a:40:a1:e9:34:ac:9f:f8:6b:a8:43:d6:aa:
20:b2:c5:12:80:29:3c:16:8b:bd:2c:78:d7:99:f5:
03:4c:27:d1:f9:16:96:e7:14:96:ca:b4:d0:08:17:
2d:ce:85:6f:f7:8e:d4:94:3a:01:55:61:83:60:10:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:C8:8A:66:04:C8:5E:79:2F:DA:CD:20:DC:D7:AD:08:4E:F0:B9
X509v3 Authority Key Identifier:
keyid:0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/GUrIimYEyF55L9rNINzXrQhO8Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.32.0/24
5.56.39.0/24
IPv6:
2a01:47c1::/32
Signature Algorithm: sha256WithRSAEncryption
97:2f:11:1c:b8:22:9e:1a:9a:d2:57:ad:6e:f8:1a:b7:c5:c5:
f4:63:34:d4:35:9a:38:17:63:d4:ae:2d:cf:e0:12:70:06:6f:
5b:cc:dd:e9:77:50:41:45:97:71:1f:c4:a9:0d:b6:63:09:09:
8d:7d:0f:37:4e:68:e2:7e:88:27:39:91:9a:5f:ea:08:04:03:
3c:2d:e4:1c:c3:0e:fb:fd:2d:03:5f:bc:83:73:1e:b7:7d:30:
b2:4c:73:de:a8:9c:90:2a:5a:85:0d:6f:31:e5:78:97:82:ad:
e0:9d:ba:5b:08:ed:1b:cb:27:d4:77:6d:4f:56:5d:18:40:84:
9a:41:9e:02:36:f9:da:1c:bb:1e:ec:1e:9e:1b:3b:c2:45:d4:
e9:9c:58:a7:a1:23:54:5c:c8:c5:6a:ae:2f:e2:c7:84:80:8b:
98:04:03:28:0e:39:bf:9f:5b:2c:c1:a6:5a:fe:ea:3c:8d:77:
09:c6:06:eb:35:be:77:6a:98:1d:98:5d:39:a0:74:07:63:62:
09:e5:6a:ec:4a:13:aa:d7:4b:46:af:85:c7:25:ec:c1:3b:31:
c4:13:41:64:35:41:12:cd:4b:ee:63:bf:5a:fd:38:e8:b3:52:
b0:15:bd:cf:84:f2:d5:95:18:37:52:a2:2f:5d:c6:66:c9:63:
fa:f5:27:fc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaPWYLa1OTGun0Lz0VfGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGIwZjg3NzMwYTU1MDQ0Zjg4Mjc2YmViMDY0ZTNjN2Jh
ZGQxYzQwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTRhYzg4YTY2MDRjODVlNzkyZmRhY2QyMGRjZDdhZDA4NGVmMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UUUl89R7f3rqT8Yx7n/AOpuCzN8
CjrV73rcLo8yjtGtEiLpK78LgGbFoNjQI6K6IGujSsBFYSOXtcK+T/opNzW7Nk47
cOlnnq2j4Uach6BI/SfJ9n64BtyFSNIV8yrfjAxBatEWnB1RQ8mpBVFXqVWl1o0F
eZGg4OqT/3RLLI91m140OcMo4syppzz+5TlhBApCTJdWTMHF8wzImmGeV3GTbrPe
cZdTb9ibSrftavpVohjP7ikYCbnBS7/6Q0MadBYpX4pAoek0rJ/4a6hD1qogssUS
gCk8Fou9LHjXmfUDTCfR+RaW5xSWyrTQCBctzoVv947UlDoBVWGDYBCpCQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBlKyIpmBMheeS/azSDc160ITvC5MB8GA1UdIwQY
MBaAFA1LD4dzClUET4gna+sGTjx7rdHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVzUGgzTUtWUVJQaUNkcjZ3Wk9QSHV0MGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt
ZGU2NDBkMDEyMDY1LzEvR1VySWltWUV5RjU1TDlyTklOelhyUWhPOExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1
LzEvRFVzUGgzTUtWUVJQaUNkcjZ3Wk9QSHV0MGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABTggAwQA
BTgnMA0EAgACMAcDBQAqAUfBMA0GCSqGSIb3DQEBCwUAA4IBAQCXLxEcuCKeGprS
V61u+Bq3xcX0YzTUNZo4F2PUri3P4BJwBm9bzN3pd1BBRZdxH8SpDbZjCQmNfQ83
TmjifognOZGaX+oIBAM8LeQcww77/S0DX7yDcx63fTCyTHPeqJyQKlqFDW8x5XiX
gq3gnbpbCO0byyfUd21PVl0YQISaQZ4CNvnaHLse7B6eGzvCRdTpnFinoSNUXMjF
aq4v4seEgIuYBAMoDjm/n1sswaZa/uo8jXcJxgbrNb53apgdmF05oHQHY2IJ5Wrs
ShOq10tGr4XHJezBOzHEE0FkNUESzUvuY79a/Tjos1KwFb3PhPLVlRg3UqIvXcZm
yWP69Sf8
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:02 2026 by rpki-client