Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/X0L_WIFrHSaQewTifeIRhTrccl4.roa
File: X0L_WIFrHSaQewTifeIRhTrccl4.roa (raw, json)
Hash identifier: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=
Subject key identifier: 5F:42:FF:58:81:6B:1D:26:90:7B:04:E2:7D:E2:11:85:3A:DC:72:5E
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019C5254C481FB075DFFD39DF481D66F31F2
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/X0L_WIFrHSaQewTifeIRhTrccl4.roa
Signing time: Thu 12 Feb 2026 14:50:12 +0000
ROA not before: Thu 12 Feb 2026 14:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215760
IP address blocks: 150.40.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:54:c4:81:fb:07:5d:ff:d3:9d:f4:81:d6:6f:31:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Feb 12 14:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f42ff58816b1d26907b04e27de211853adc725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:c1:e6:b9:41:4c:eb:07:a8:9e:e8:33:af:
73:11:b4:1d:37:77:49:6d:67:3a:a9:eb:b8:bb:1d:
91:ea:d4:70:10:1d:6e:33:a9:a7:33:f8:71:29:e5:
f8:51:0e:e3:60:38:60:99:b5:df:2b:c7:04:a7:9f:
da:e3:70:86:39:a0:eb:cb:6e:bd:07:05:67:80:5b:
93:19:78:2a:85:4c:34:32:e3:06:ae:c8:27:01:43:
ad:c5:7a:01:2f:b2:6e:6d:1c:89:67:34:94:c6:5b:
c4:89:b3:4c:1a:d1:74:42:4d:38:0b:3a:a7:f8:8b:
08:71:16:b3:29:a1:aa:8f:6f:5e:2b:25:8b:67:ee:
3d:fb:a2:76:00:65:e2:e5:00:dd:72:ef:b1:5c:53:
9e:5a:91:a9:8c:7c:ab:f8:9e:76:1d:f8:2b:18:70:
c3:3e:71:a1:41:9b:b7:ee:c6:f2:7f:5a:e2:ac:a3:
99:2b:7a:c5:01:0b:63:7a:e1:0c:44:fc:06:b6:19:
f1:ef:40:3d:8a:5e:3f:95:c4:fd:3b:0d:82:27:96:
19:c4:46:22:05:4e:cc:35:f9:ba:fe:7f:6f:11:58:
64:07:f7:46:20:7a:94:33:e9:e6:be:ac:3e:51:83:
f5:56:11:c2:48:9c:eb:fd:76:55:10:b5:7e:59:b2:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:FF:58:81:6B:1D:26:90:7B:04:E2:7D:E2:11:85:3A:DC:72:5E
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/X0L_WIFrHSaQewTifeIRhTrccl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1f:1b:50:c0:59:7b:9f:31:d1:54:56:d6:66:d7:02:be:f0:
fe:1e:c0:14:29:93:8f:7e:94:14:31:5c:75:f9:74:8d:bc:2a:
0c:f9:c7:8b:a8:77:be:e8:74:bf:10:62:86:8b:78:06:84:02:
d9:ab:1f:3a:e7:1f:7c:69:9e:66:09:83:5d:6c:f7:14:41:7e:
a0:57:95:4b:07:cf:a3:f6:67:10:ed:06:6e:b9:0f:d3:73:c1:
13:83:07:02:4c:28:15:27:0a:1f:22:c3:ee:dd:a9:2c:db:18:
98:ad:3d:c4:f7:20:2e:cf:6a:be:74:2f:84:67:58:d0:c2:d2:
f5:50:d5:f7:de:c5:a8:0e:88:a8:fc:69:36:86:d2:6d:51:64:
b8:1d:57:8f:57:cf:6e:0f:c0:96:5f:13:15:fa:25:b1:f1:0e:
03:7f:f5:fc:c3:ac:b1:29:7f:8c:de:2a:ab:04:28:a9:87:14:
08:4d:0f:8f:bd:72:42:98:58:82:70:f4:d1:e4:66:d6:d8:ab:
50:39:fd:77:2e:b0:99:ef:39:42:c1:f2:fd:58:a6:f0:0e:37:
63:d4:58:f6:e0:d6:37:17:18:b4:fe:51:23:c9:0f:ad:b3:83:
4c:1e:49:f7:df:34:83:d4:22:0b:b3:2f:96:47:f9:27:5a:9c:
bd:d0:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:47:47 2026 by rpki-client