Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xs2r_sf70RywFmB24b9N01_BFJ4.roa
File: xs2r_sf70RywFmB24b9N01_BFJ4.roa (raw, json)
Hash identifier: fHfmQI5Sl6kYaTtOgVZewGW5ldlrLN3ybQdhzJYSzAk=
Subject key identifier: C6:CD:AB:FE:C7:FB:D1:1C:B0:16:60:76:E1:BF:4D:D3:5F:C1:14:9E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FEDCBE8B4503122EC670B21BAB6B80519
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xs2r_sf70RywFmB24b9N01_BFJ4.roa
Signing time: Mon 10 Aug 2026 22:29:51 +0000
ROA not before: Mon 10 Aug 2026 22:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 2.57.148.0/24 maxlen: 24
5.133.110.0/24 maxlen: 24
45.88.82.0/24 maxlen: 24
45.88.83.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
45.132.207.0/24 maxlen: 24
45.136.248.0/24 maxlen: 24
45.138.145.0/24 maxlen: 24
45.142.214.0/24 maxlen: 24
45.143.140.0/24 maxlen: 24
45.147.244.0/24 maxlen: 24
45.147.245.0/24 maxlen: 24
45.147.247.0/24 maxlen: 24
80.242.62.0/24 maxlen: 24
87.247.143.0/24 maxlen: 24
103.145.21.0/24 maxlen: 24
109.94.216.0/24 maxlen: 24
109.94.217.0/24 maxlen: 24
109.94.218.0/24 maxlen: 24
109.94.219.0/24 maxlen: 24
192.144.16.0/24 maxlen: 24
194.59.12.0/24 maxlen: 24
194.156.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:cb:e8:b4:50:31:22:ec:67:0b:21:ba:b6:b8:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 10 22:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6cdabfec7fbd11cb0166076e1bf4dd35fc1149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:65:0d:66:c8:05:1b:25:2d:fb:18:cf:fc:
b4:ce:37:7a:a9:c2:61:d7:5f:d5:ae:e4:35:89:cb:
b7:83:03:14:b0:97:c5:71:9f:af:17:23:00:bc:b5:
f7:cd:fd:5c:67:ce:e7:25:79:89:13:9e:83:ef:28:
ca:0d:78:9d:49:74:86:65:97:97:00:01:e0:ef:8b:
ad:6f:e8:c1:b9:f6:79:15:da:01:98:3c:41:b2:f1:
fb:00:f9:e1:bd:a9:85:2d:b6:b3:9c:83:97:e8:0e:
ba:dd:10:e7:6d:ca:c9:40:4d:84:ce:a2:36:68:fe:
09:13:f7:8a:ff:9f:fc:7a:02:6c:6b:c8:8d:b9:97:
ab:f6:51:ed:6a:ce:51:25:7e:52:e9:be:2c:61:05:
93:db:88:40:f6:c6:fa:53:20:a4:70:79:8b:7a:4b:
0f:dc:90:54:4e:7d:ba:05:03:d6:b2:da:bc:63:3f:
a5:1a:ff:47:d3:18:19:bb:1d:ca:e6:b5:52:b0:9f:
06:14:43:44:7f:d9:87:ea:1d:e9:8e:5e:52:91:79:
ae:6f:98:c5:5a:60:36:6a:9d:54:f2:3f:4d:7d:e4:
b0:75:20:c8:8d:e2:20:e6:a2:ea:fc:27:0e:98:d0:
9e:32:e3:10:0e:56:5f:6d:17:c2:7b:9d:da:a7:ae:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:AB:FE:C7:FB:D1:1C:B0:16:60:76:E1:BF:4D:D3:5F:C1:14:9E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xs2r_sf70RywFmB24b9N01_BFJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.148.0/24
5.133.110.0/24
45.88.82.0/23
45.91.161.0/24
45.132.207.0/24
45.136.248.0/24
45.138.145.0/24
45.142.214.0/24
45.143.140.0/24
45.147.244.0/23
45.147.247.0/24
80.242.62.0/24
87.247.143.0/24
103.145.21.0/24
109.94.216.0/22
192.144.16.0/24
194.59.12.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0e:7a:23:27:e0:15:ed:c3:96:b2:f9:d0:d2:20:41:d5:2a:
ed:f9:64:f4:f8:54:83:ed:fe:12:a7:98:de:98:c4:4a:31:23:
15:05:e6:c4:d0:63:b5:7c:fc:15:40:1e:eb:4e:98:dc:e0:e9:
3b:c2:43:e5:00:39:c6:74:15:46:00:48:fc:3b:c0:a5:10:af:
3b:bc:3e:d5:72:82:a9:9e:11:75:fa:db:86:d0:50:e4:8b:75:
df:91:3a:82:80:b8:1f:6f:9c:33:23:90:e0:85:d9:65:90:b7:
21:f3:22:a2:65:19:9d:ef:4a:9f:e0:56:e3:a1:c3:38:58:1c:
e0:0f:07:eb:93:49:3c:1a:b3:bc:83:97:de:70:b5:be:20:b4:
2a:5c:c7:f2:37:7e:41:0b:d9:ef:31:f1:6d:28:c4:f2:5b:fd:
88:77:fa:61:d9:2b:f1:f5:a0:f5:12:97:ff:38:49:69:4d:34:
c1:b1:13:64:5a:2c:98:92:1f:9a:fc:5c:53:b7:0e:05:1e:46:
4a:e3:d8:bf:0b:13:19:e4:ff:ee:41:14:0d:b1:32:ff:09:64:
26:a1:4c:66:bb:20:63:20:8a:ba:07:5b:56:b1:63:e9:b3:59:
61:fd:20:9b:8a:be:98:2e:7a:a0:f0:9f:b8:00:46:ca:04:0c:
13:2b:b2:02
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZ/ty+i0UDEi7GcLIbq2uAUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwODEwMjIyOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmNkYWJmZWM3ZmJkMTFjYjAxNjYwNzZlMWJmNGRkMzVmYzExNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03xlDWbIBRslLfsYz/y0zjd6qcJh
11/VruQ1icu3gwMUsJfFcZ+vFyMAvLX3zf1cZ87nJXmJE56D7yjKDXidSXSGZZeX
AAHg74utb+jBufZ5FdoBmDxBsvH7APnhvamFLbaznIOX6A663RDnbcrJQE2EzqI2
aP4JE/eK/5/8egJsa8iNuZer9lHtas5RJX5S6b4sYQWT24hA9sb6UyCkcHmLeksP
3JBUTn26BQPWstq8Yz+lGv9H0xgZux3K5rVSsJ8GFENEf9mH6h3pjl5SkXmub5jF
WmA2ap1U8j9NfeSwdSDIjeIg5qLq/CcOmNCeMuMQDlZfbRfCe53ap64+3wIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFMbNq/7H+9EcsBZgduG/TdNfwRSeMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEveHMycl9zZjcwUnl3Rm1CMjRiOU4wMV9CRko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAAI5lAME
AAWFbgMEAS1YUgMEAC1boQMEAC2EzwMEAC2I+AMEAC2KkQMEAC2O1gMEAC2PjAME
AS2T9AMEAC2T9wMEAFDyPgMEAFf3jwMEAGeRFQMEAm1e2AMEAMCQEAMEAMI7DAME
AMKcATANBgkqhkiG9w0BAQsFAAOCAQEAcw56IyfgFe3DlrL50NIgQdUq7flk9PhU
g+3+EqeY3pjESjEjFQXmxNBjtXz8FUAe606Y3ODpO8JD5QA5xnQVRgBI/DvApRCv
O7w+1XKCqZ4RdfrbhtBQ5It135E6goC4H2+cMyOQ4IXZZZC3IfMiomUZne9Kn+BW
46HDOFgc4A8H65NJPBqzvIOX3nC1viC0KlzH8jd+QQvZ7zHxbSjE8lv9iHf6Ydkr
8fWg9RKX/zhJaU00wbETZFosmJIfmvxcU7cOBR5GSuPYvwsTGeT/7kEUDbEy/wlk
JqFMZrsgYyCKugdbVrFj6bNZYf0gm4q+mC56oPCfuABGygQMEyuyAg==
-----END CERTIFICATE-----
Generated at Wed Aug 12 14:10:20 2026 by rpki-client