Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
File: AS17053.roa (raw, json)
Hash identifier: B658t9NCe7SH/Iu4ChlGEZ+DoNXOC/bGP8UpBEfWH6I=
Subject key identifier: 70:B3:C1:07:10:F0:4E:D7:3E:3A:AE:23:C2:FA:BF:0B:78:AE:69:E9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E8A4DAC91BC7F6DC12989AB9AE8963712B9B1AB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
Signing time: Thu 09 Oct 2025 21:22:26 +0000
ROA not before: Thu 09 Oct 2025 21:17:26 +0000
ROA not after: Thu 08 Oct 2026 21:22:26 +0000
asID: 17053
IP address blocks: 162.141.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8a:4d:ac:91:bc:7f:6d:c1:29:89:ab:9a:e8:96:37:12:b9:b1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 9 21:17:26 2025 GMT
Not After : Oct 8 21:22:26 2026 GMT
Subject: CN=70B3C10710F04ED73E3AAE23C2FABF0B78AE69E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:93:bd:4c:59:e2:eb:f3:a6:4b:fd:ae:65:
3d:61:8d:29:7f:f8:20:0d:05:5d:cb:a0:fc:94:a0:
32:bf:35:b4:e5:5c:7c:b9:03:5c:7f:0d:b9:ed:a5:
e8:21:1d:07:70:3a:eb:8f:ff:27:2b:06:2d:7d:33:
fe:06:83:8d:a3:bd:80:44:58:31:8e:e4:7d:e8:eb:
97:35:3a:fd:2f:8e:93:66:2e:cb:88:ea:7f:4d:af:
1f:ac:d9:9e:44:23:dc:82:60:b3:ac:69:85:ef:d2:
f9:47:a5:55:ed:b7:e4:dc:d9:42:17:99:b1:90:57:
9a:3e:7a:7c:d0:84:7d:5e:44:1f:d5:64:d6:32:97:
f7:98:6b:16:7b:0d:c2:e4:b4:14:ac:24:b0:4b:f4:
0a:56:ee:12:77:e3:f8:35:90:cf:66:73:39:8b:be:
46:a5:c4:7f:2e:64:55:bb:c2:91:42:d2:eb:d9:2c:
24:06:f6:81:a6:56:3b:0e:e4:4d:ae:e7:2c:d7:73:
cf:cd:95:40:58:89:6c:bd:9f:9f:53:9f:60:b7:db:
81:f9:7b:79:73:5b:63:5a:6f:8d:56:2c:1a:c9:23:
e1:c5:bc:e3:49:54:7e:69:f2:ae:b0:b8:af:9f:53:
70:b1:3a:35:93:b9:fa:e5:d7:fd:ff:c8:f1:7b:c9:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:C1:07:10:F0:4E:D7:3E:3A:AE:23:C2:FA:BF:0B:78:AE:69:E9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.112.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bb:af:d8:d2:21:58:99:56:f3:63:cc:bf:bf:65:7e:70:a2:
f7:33:21:5c:be:9a:b6:31:44:25:2e:b4:64:93:76:a6:68:46:
6e:16:71:92:de:87:01:b8:64:4e:59:ed:01:20:bc:d3:27:7a:
60:e4:ac:55:84:a4:ca:df:68:b0:a0:f2:94:e5:ac:34:35:06:
13:f0:22:66:f6:3a:80:e7:9e:8d:17:b1:21:58:b0:c0:10:78:
8d:25:58:ad:c4:fa:1b:0d:1f:8a:a7:0f:59:26:78:e3:9a:ab:
b4:13:4a:98:73:93:25:16:14:f7:40:c4:a0:70:d8:6f:41:da:
5f:60:9c:df:aa:3a:c5:8f:0d:c5:3d:3d:f0:25:7f:38:e5:bf:
c9:30:70:e5:4e:4b:b0:76:d0:e1:42:fb:b5:20:69:8c:cf:8d:
79:9a:61:29:d6:ac:3a:fb:cd:9d:f9:33:d0:0d:93:9b:7b:69:
b7:02:c7:02:a9:66:9a:09:9a:83:12:95:7e:9b:9b:b3:69:fc:
16:e4:37:50:11:37:02:4d:9b:14:89:8f:dd:49:3c:88:8b:5b:
ed:a2:bb:97:a4:6b:7f:f5:e5:8b:43:2c:ed:27:c1:4c:72:92:
a3:73:dc:8e:f3:72:df:d8:10:83:eb:92:28:66:03:54:4b:f9:
5d:53:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:43:58 2025 by rpki-client