Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: x4Kb+7OAhBi2yarXlkol+YGcnMusr6C/lCuDhB5EwxE=
Subject key identifier: 34:F4:21:C5:F2:85:5F:FE:79:0D:C5:43:AC:01:67:0B:F8:70:52:4B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2392701341FF7643710713C597BCB6AF4DA59E4C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
Signing time: Tue 17 Mar 2026 09:01:08 +0000
ROA not before: Tue 17 Mar 2026 08:56:08 +0000
ROA not after: Tue 16 Mar 2027 09:01:08 +0000
asID: 17497
IP address blocks: 181.214.0.0/24 maxlen: 24
181.215.12.0/24 maxlen: 24
185.142.25.0/24 maxlen: 24
185.158.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:92:70:13:41:ff:76:43:71:07:13:c5:97:bc:b6:af:4d:a5:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 17 08:56:08 2026 GMT
Not After : Mar 16 09:01:08 2027 GMT
Subject: CN=34F421C5F2855FFE790DC543AC01670BF870524B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:61:07:53:03:f2:10:2d:6f:4a:ba:e4:5d:
2b:31:8a:14:4a:5f:a3:e4:3a:93:b7:48:73:cd:e9:
a9:8e:3c:dc:95:3b:27:7f:b0:6d:4a:67:7d:c7:4d:
15:d9:2f:b2:08:26:62:98:8b:f9:87:72:24:df:d9:
f3:51:9d:98:ca:e9:25:74:ac:5d:ab:74:a0:29:45:
e2:25:58:f1:37:b7:8e:f0:21:d3:d8:66:a1:0a:65:
b3:16:24:63:fd:8f:29:88:c3:dc:d7:13:ac:bc:76:
0d:1c:05:78:bf:23:10:68:e5:8b:55:c5:57:be:2d:
f9:06:44:0c:79:23:5d:76:8a:7e:10:71:c9:23:e2:
da:4a:a9:3a:f7:ae:3e:42:d5:17:31:da:76:f1:f8:
34:81:20:fe:f9:39:6c:84:d0:ea:57:bb:76:27:d7:
b1:6d:2b:63:a1:99:2b:0c:4a:1a:ea:b0:a9:6b:a9:
43:69:68:3c:0b:d3:ed:32:03:41:b5:6f:f4:60:42:
2e:f3:fa:b8:bb:11:79:db:02:aa:75:17:fd:76:a2:
ea:05:19:02:18:45:98:1f:b3:53:a1:8a:6c:92:24:
8b:e0:57:d5:bb:f4:3a:e6:68:b3:53:64:ef:aa:db:
01:24:3d:35:ca:41:04:07:de:c3:32:a5:f6:2a:2c:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:21:C5:F2:85:5F:FE:79:0D:C5:43:AC:01:67:0B:F8:70:52:4B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.0.0/24
181.215.12.0/24
185.142.25.0/24
185.158.149.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5d:48:03:42:c2:f0:18:b8:1f:bc:3d:a5:2b:b2:16:50:a0:
d9:04:30:84:9a:b5:87:8a:e7:e2:13:0d:ad:5d:a8:ee:3c:18:
28:23:b1:60:ea:cb:3a:c1:e5:75:86:e3:e0:d5:92:27:b6:db:
5d:d1:2d:6b:1a:16:44:04:4f:73:6c:5a:c2:f6:2e:75:52:e6:
4b:d5:51:d9:7f:b2:fa:cf:2d:99:dc:6e:79:85:fd:73:c1:a9:
10:06:f8:88:11:13:87:f7:10:52:a2:15:11:a6:e8:9a:60:d0:
d5:f3:d5:4c:c1:ef:87:1c:ba:80:98:c6:df:c1:d7:ba:53:8d:
0e:51:17:81:d0:76:8b:72:a3:5e:8b:e7:7a:89:04:76:e1:8b:
c5:f4:db:c4:ef:49:af:9e:48:8f:2f:dc:b6:61:52:aa:b3:70:
d2:94:43:cf:7a:37:7c:31:4b:ca:a8:b4:a2:5e:35:6e:d6:06:
74:9d:9f:ba:46:93:5f:8b:03:c4:1d:0e:5c:41:af:39:0c:38:
49:d8:b2:b1:83:00:9d:77:52:e6:da:71:9b:d9:d0:35:48:38:
70:06:0b:83:fb:16:14:21:bf:3c:10:0d:fe:dd:ee:73:91:93:
b8:f3:7a:7c:d8:92:e6:5a:6d:40:de:88:e0:66:fb:24:1c:63:
f4:71:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:28 2026 by rpki-client