Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/NOGA0CjkDnET03-2XNCrDJ4eMKk.roa
File: NOGA0CjkDnET03-2XNCrDJ4eMKk.roa (raw, json)
Hash identifier: pcupg8qezDQzVSVv6X2qJzowxTMngs8AYSobXls8P4A=
Subject key identifier: 34:E1:80:D0:28:E4:0E:71:13:D3:7F:B6:5C:D0:AB:0C:9E:1E:30:A9
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 019A258FA93C45D28A57D4F781FE2D34B7E6
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/NOGA0CjkDnET03-2XNCrDJ4eMKk.roa
Signing time: Mon 27 Oct 2025 12:06:03 +0000
ROA not before: Mon 27 Oct 2025 12:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206862
IP address blocks: 185.173.168.0/22 maxlen: 22
185.173.168.0/24 maxlen: 24
185.173.169.0/24 maxlen: 24
185.173.170.0/24 maxlen: 24
185.173.171.0/24 maxlen: 24
194.53.118.0/23 maxlen: 23
194.53.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8f:a9:3c:45:d2:8a:57:d4:f7:81:fe:2d:34:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Oct 27 12:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e180d028e40e7113d37fb65cd0ab0c9e1e30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:2c:ce:d6:9a:7a:3c:67:da:22:25:0f:18:
c8:ac:f9:c0:55:3e:bf:51:33:cd:66:da:75:29:19:
ca:52:1f:a5:37:31:0b:dd:98:eb:f8:bc:c0:2a:51:
e4:16:fd:b6:a1:fa:b5:53:77:6e:ac:a2:fc:3b:f7:
dc:93:eb:d1:0e:66:4b:c3:e7:bb:f9:d7:72:ff:54:
3b:48:7a:42:76:7c:ea:ef:d3:06:7e:8e:bb:be:71:
7d:c1:db:4e:c5:ff:09:e7:77:10:23:a3:6c:3b:fd:
62:cc:9e:0e:0d:ea:73:b9:6c:5c:4e:10:9d:6e:27:
8b:e6:69:c7:a6:97:d9:84:46:a1:fb:c1:98:0c:cb:
7b:f8:9c:34:b8:27:51:de:ac:9f:c6:93:de:36:0c:
40:ad:99:e4:44:70:95:a2:ed:39:2c:cc:5b:db:26:
1e:cf:d3:18:fb:bc:b2:e3:38:b1:28:c4:fd:17:fc:
c4:4b:89:71:d1:b4:8a:c8:1f:0f:1c:7a:df:dc:7c:
86:8e:b3:01:9c:b7:06:5b:37:d1:7e:8f:5d:50:a4:
ba:3e:f7:a3:46:e4:44:ee:f2:49:61:f1:11:9a:a2:
76:34:0d:97:c8:37:85:6d:91:01:57:b7:70:e2:9f:
33:dc:8d:91:95:5b:7a:9e:ef:95:19:7f:64:79:a4:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E1:80:D0:28:E4:0E:71:13:D3:7F:B6:5C:D0:AB:0C:9E:1E:30:A9
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/NOGA0CjkDnET03-2XNCrDJ4eMKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.168.0/22
194.53.118.0/23
194.53.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:eb:54:13:d7:76:40:90:58:7e:63:35:71:ef:a7:d9:f0:67:
31:cf:ea:ec:74:9d:71:5e:f2:b2:4f:d4:cd:07:bf:c1:91:e7:
99:e7:51:95:c8:4c:8a:1f:79:5e:0a:d4:22:e0:00:b7:b3:b2:
11:b9:15:ac:4e:15:a6:4a:83:a0:25:74:d3:29:8c:cd:b8:82:
f2:48:d5:74:73:88:a5:7c:2f:dd:59:64:53:52:32:61:25:91:
e4:0c:53:cf:d7:0c:23:00:77:c9:3a:98:7c:3d:c7:3c:72:65:
cf:df:a2:58:2b:33:e3:32:2a:1a:4f:98:87:46:de:91:52:78:
08:c8:75:a5:52:07:5a:3e:30:c7:cb:65:37:1b:1c:d5:9b:b9:
62:38:b7:80:4e:72:0a:d0:89:dc:0a:b5:cd:3d:25:ae:f1:b9:
53:62:e6:5e:bd:37:95:1f:85:38:2d:ba:3a:fa:5d:4f:52:06:
05:84:19:5d:4b:99:30:46:e3:67:b2:7f:c1:d6:7d:99:fd:86:
cc:b2:c5:dc:c3:4a:75:90:ce:f3:c3:cd:7b:ed:30:98:30:5a:
44:f7:c8:d9:4d:d4:94:1c:72:47:69:8d:59:49:c9:c3:a6:06:
2d:e9:cc:8a:99:8a:b9:59:f5:43:8f:3d:be:81:00:ef:c1:e5:
cd:b5:67:fa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZolj6k8RdKKV9T3gf4tNLfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy
MjEwZTYwHhcNMjUxMDI3MTIwNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGUxODBkMDI4ZTQwZTcxMTNkMzdmYjY1Y2QwYWIwYzllMWUzMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqMsztaaejxn2iIlDxjIrPnAVT6/
UTPNZtp1KRnKUh+lNzEL3Zjr+LzAKlHkFv22ofq1U3durKL8O/fck+vRDmZLw+e7
+ddy/1Q7SHpCdnzq79MGfo67vnF9wdtOxf8J53cQI6NsO/1izJ4ODepzuWxcThCd
bieL5mnHppfZhEah+8GYDMt7+Jw0uCdR3qyfxpPeNgxArZnkRHCVou05LMxb2yYe
z9MY+7yy4zixKMT9F/zES4lx0bSKyB8PHHrf3HyGjrMBnLcGWzfRfo9dUKS6Pvej
RuRE7vJJYfERmqJ2NA2XyDeFbZEBV7dw4p8z3I2RlVt6nu+VGX9keaSABQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDThgNAo5A5xE9N/tlzQqwyeHjCpMB8GA1UdIwQY
MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt
ZmMxYzBjY2JjMGI3LzEvTk9HQTBDamtEbkVUMDMtMlhOQ3JESjRlTUtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3
LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCua2oAwQB
wjV2AwQBwjV6MA0GCSqGSIb3DQEBCwUAA4IBAQBr61QT13ZAkFh+YzVx76fZ8Gcx
z+rsdJ1xXvKyT9TNB7/BkeeZ51GVyEyKH3leCtQi4AC3s7IRuRWsThWmSoOgJXTT
KYzNuILySNV0c4ilfC/dWWRTUjJhJZHkDFPP1wwjAHfJOph8Pcc8cmXP36JYKzPj
MioaT5iHRt6RUngIyHWlUgdaPjDHy2U3GxzVm7liOLeATnIK0IncCrXNPSWu8blT
YuZevTeVH4U4Lbo6+l1PUgYFhBldS5kwRuNnsn/B1n2Z/YbMssXcw0p1kM7zw817
7TCYMFpE98jZTdSUHHJHaY1ZScnDpgYt6cyKmYq5WfVDjz2+gQDvweXNtWf6
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:30:53 2025 by rpki-client