Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ipNOGO-HZGeaSbGj4A_3vWbejCk.roa
File: ipNOGO-HZGeaSbGj4A_3vWbejCk.roa (raw, json)
Hash identifier: iX9jrw9KV78oXpLW2rMU6Z1RbiiCKzsCJE3wPvWfMKQ=
Subject key identifier: 8A:93:4E:18:EF:87:64:67:9A:49:B1:A3:E0:0F:F7:BD:66:DE:8C:29
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A0679EB84142F01E59AF16B5F017C5AFD7
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ipNOGO-HZGeaSbGj4A_3vWbejCk.roa
Signing time: Thu 03 Sep 2026 14:14:10 +0000
ROA not before: Thu 03 Sep 2026 14:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 201.24.60.0/22 maxlen: 32
201.34.156.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:9e:b8:41:42:f0:1e:59:af:16:b5:f0:17:c5:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Sep 3 14:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a934e18ef8764679a49b1a3e00ff7bd66de8c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:b2:c1:17:58:d8:f4:ab:a6:05:1b:ae:c8:
ed:69:34:3a:a8:25:6e:33:25:09:45:6e:14:33:95:
55:f7:1d:13:6d:24:1a:31:d0:75:3f:b1:46:09:ef:
fe:86:64:f2:04:96:4a:51:84:45:0d:57:e0:3a:ac:
33:1d:f4:96:ac:89:9b:a9:14:c2:7f:c8:ee:91:90:
d7:cc:c6:d9:76:af:49:43:ab:9a:81:a5:c6:09:8e:
58:74:09:17:88:ac:ac:d6:d7:76:77:be:cf:26:62:
1e:33:5b:99:27:fd:e1:0d:8f:25:f0:57:80:13:a2:
b8:e4:07:63:ad:d3:6b:f6:e7:79:89:b2:e7:4d:ff:
88:1f:cb:08:15:34:fb:cf:96:f5:15:df:27:ff:20:
13:8a:59:69:95:b3:94:fe:5d:63:4c:d0:4a:34:1a:
63:f7:8b:0b:cd:b8:96:1f:25:fb:c8:7e:75:46:e7:
1e:51:5f:84:63:6e:b9:20:96:bb:7c:c6:10:55:1b:
30:63:ee:7e:3b:00:04:2d:2d:07:6b:12:dd:9f:1c:
96:fc:ae:a8:68:26:5b:d2:46:ee:ef:4f:3d:5d:c0:
c8:f2:84:99:5a:f1:80:d6:f0:87:b9:2f:42:f1:2f:
ca:2c:74:93:23:2a:2d:41:88:28:43:39:31:b7:fe:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:4E:18:EF:87:64:67:9A:49:B1:A3:E0:0F:F7:BD:66:DE:8C:29
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/ipNOGO-HZGeaSbGj4A_3vWbejCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.24.60.0/22
201.34.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:40:c6:3e:d3:2f:06:51:fc:61:99:77:39:63:85:b2:0e:02:
1b:35:80:1d:28:17:c0:59:fa:5c:4a:c0:dd:dc:ff:d1:af:30:
db:07:38:a9:19:19:17:96:8e:81:98:21:a2:91:6f:76:ca:86:
16:07:14:ee:29:60:4d:c0:83:90:4e:13:0e:e3:f1:7a:b1:b6:
cd:f1:2b:ba:1c:31:d0:80:cd:e5:95:2b:19:19:a7:8f:73:a6:
36:b3:9e:90:36:e7:bb:2f:3b:6c:7b:de:dc:96:dd:f3:2d:e2:
c0:7d:ec:c5:f2:cd:dd:c3:4b:83:82:b2:d2:96:49:74:a6:96:
ec:34:f1:ad:3a:85:72:a3:f3:8e:91:90:c5:37:17:3c:54:0e:
ba:c4:f9:7e:64:27:0b:e0:e7:38:35:63:ce:6a:0e:ed:bc:be:
98:75:79:22:8e:fa:71:33:22:47:c5:30:55:77:b8:05:a2:36:
a4:d9:bc:74:4d:c1:77:82:71:c6:71:12:4a:99:77:d6:00:79:
c7:6a:4f:35:32:0f:44:f9:84:d4:f4:2c:1e:88:36:75:65:1e:
20:fc:23:0f:c5:c9:9c:4a:53:8c:cc:a7:25:eb:5e:2e:1e:e2:
46:58:be:1a:33:a5:5a:0b:c2:1c:1a:7a:8a:ea:c9:f7:e6:54:
7f:bc:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:15:37 2026 by rpki-client