Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/ILvL_afGBYqG8JBvyBOjNle1meU.roa
File: ILvL_afGBYqG8JBvyBOjNle1meU.roa (raw, json)
Hash identifier: FpoDCBUDymC1x5/mCiLH7CBZidOwMMBt/UJmW1vuU7I=
Subject key identifier: 20:BB:CB:FD:A7:C6:05:8A:86:F0:90:6F:C8:13:A3:36:57:B5:99:E5
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019CECE7F26CF1EC15C318E9B879C75031D9
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/ILvL_afGBYqG8JBvyBOjNle1meU.roa
Signing time: Sat 14 Mar 2026 15:12:29 +0000
ROA not before: Sat 14 Mar 2026 15:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:e7:f2:6c:f1:ec:15:c3:18:e9:b8:79:c7:50:31:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Mar 14 15:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20bbcbfda7c6058a86f0906fc813a33657b599e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:09:7d:4c:d2:da:3c:fe:89:01:74:bc:50:
7d:30:8f:5b:2e:4d:0b:57:45:3d:17:7b:c1:27:d7:
33:d9:94:0a:1b:10:8f:e1:4f:0a:cc:19:3c:ab:23:
27:26:44:4f:08:d9:9f:c2:3d:6e:6f:2d:50:8a:c1:
65:93:fc:fa:11:9a:54:aa:06:0d:04:71:36:da:96:
c4:20:59:12:3d:44:42:7b:05:c5:b4:64:89:57:2a:
94:e8:02:ad:20:84:1d:95:36:41:bf:8a:23:65:c7:
92:3f:c5:41:74:04:67:b1:3d:6b:7b:f6:c2:f1:ed:
da:c3:07:55:3c:92:9a:ad:68:19:92:fb:f3:59:78:
83:6a:90:98:01:7d:3c:47:70:71:01:81:00:55:e5:
ca:51:20:14:21:55:cd:44:ea:5e:8c:f2:05:56:0a:
61:cf:f4:27:a2:06:8f:da:a3:27:b3:d9:ae:2f:18:
56:ff:5e:50:01:ea:fa:b1:b5:68:df:85:21:e7:29:
1c:2f:8a:5f:46:7e:87:97:fc:5c:4b:0c:e7:3e:d2:
39:06:3f:b3:c0:21:53:e2:93:e9:02:37:ac:ac:8c:
78:11:79:4f:0c:67:ac:6a:a4:40:f1:b2:4c:40:8d:
4f:5e:57:ca:bb:82:85:53:13:62:44:f8:b9:a3:26:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:CB:FD:A7:C6:05:8A:86:F0:90:6F:C8:13:A3:36:57:B5:99:E5
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/ILvL_afGBYqG8JBvyBOjNle1meU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:34:b7:e7:59:6a:7e:23:5f:0b:49:af:3c:60:fb:b3:de:10:
3c:d2:48:70:42:66:bd:49:28:ed:77:ef:a2:f2:ed:f2:b2:82:
47:52:40:26:32:9e:94:ed:aa:b2:f0:e9:64:a9:e5:fc:50:a7:
d8:b5:e2:b4:2f:71:52:b0:bb:b0:00:c6:65:d6:7d:22:e2:36:
63:99:aa:35:7d:ad:31:f9:b7:e3:3e:79:7f:a5:b3:29:f1:f1:
40:b9:2a:25:8d:0d:78:31:f9:fb:ba:e8:18:6f:e2:27:4c:fe:
79:7e:01:0d:83:4f:d0:65:d2:f4:58:08:58:5e:e9:93:bb:ab:
5b:a8:c4:75:fe:ba:ce:39:61:b1:80:79:b1:c8:a5:9c:46:76:
5f:09:c5:76:21:2e:1d:c6:bc:08:5d:8e:6a:fb:ae:9f:53:f8:
e8:a6:56:0c:ec:40:78:94:87:d9:69:70:22:18:17:90:d3:2c:
eb:5a:94:c1:d3:58:c7:85:95:23:b9:11:4d:7b:03:76:fe:4e:
ff:85:46:1b:8f:82:38:56:ad:09:43:0c:6c:b1:47:e7:92:b1:
a0:81:0a:39:fe:96:5c:7d:7e:41:e9:f0:e3:c9:a4:af:41:ef:
ee:5c:b5:df:71:b3:1e:ee:ef:e5:e3:06:0b:3c:90:9c:ac:60:
20:8f:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:09 2026 by rpki-client