Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
File: AS17053.roa (raw, json)
Hash identifier: OLdsNee7Q9EuiwU904qmflAAtvammkxo6cEAgJxpamc=
Subject key identifier: AC:AD:CB:CC:1A:F7:92:FE:A4:E1:A1:11:17:19:23:89:0F:DA:F1:66
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2B703BD07A917911F6646C26816F0FAF39DB90C6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
Signing time: Thu 10 Sep 2026 21:49:34 +0000
ROA not before: Thu 10 Sep 2026 21:44:34 +0000
ROA not after: Thu 09 Sep 2027 21:49:34 +0000
asID: 17053
IP address blocks: 162.141.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:70:3b:d0:7a:91:79:11:f6:64:6c:26:81:6f:0f:af:39:db:90:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 10 21:44:34 2026 GMT
Not After : Sep 9 21:49:34 2027 GMT
Subject: CN=ACADCBCC1AF792FEA4E1A111171923890FDAF166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:6d:41:25:9f:7e:50:51:bd:98:fa:58:fc:
a7:95:76:fb:cd:9a:e6:d0:97:63:b7:2a:35:32:ea:
5b:6c:1e:fc:36:45:e1:5d:9e:bc:2d:1e:db:4d:78:
78:2c:4e:80:b2:9c:32:d8:06:98:e4:5f:eb:f1:b8:
70:93:2a:a8:f9:b8:76:ef:24:3b:fa:99:54:05:d7:
c9:4d:04:73:fe:bc:1d:29:b0:ce:29:5b:5b:6d:6f:
c8:ec:d7:93:2e:8b:d6:b4:b7:f6:b0:be:98:11:54:
fe:74:d1:32:03:f2:1d:2a:b6:e7:5f:46:72:98:9e:
6f:de:4e:b3:90:bb:c5:a1:96:15:d6:61:38:4e:35:
88:98:2e:77:40:42:fe:61:15:ed:e5:4b:1f:45:5d:
83:94:3b:54:27:90:89:82:f5:dc:ab:f0:32:18:6d:
aa:59:89:ce:02:53:df:2b:05:12:8a:31:01:91:50:
4e:ca:23:c6:39:f0:8a:b6:f6:2e:4a:43:52:e4:a2:
48:bb:53:a2:a1:8b:60:a6:d4:e7:10:ab:80:9e:3b:
ed:01:93:ee:de:7a:11:59:d8:fd:14:ca:ff:80:a0:
9e:d2:81:85:8a:43:57:34:4e:2c:da:5e:34:41:f1:
c8:5c:14:10:53:8a:c9:63:22:dd:7f:f3:c1:c3:6c:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:CB:CC:1A:F7:92:FE:A4:E1:A1:11:17:19:23:89:0F:DA:F1:66
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS17053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.112.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1e:21:0a:59:0a:5d:c5:ae:40:67:4b:16:b7:e5:49:80:ae:
ae:5a:a2:c8:6f:89:f5:b0:a2:86:bb:69:d8:c5:1d:4a:4e:37:
95:ce:64:dd:31:e1:19:a6:4f:89:87:e2:2b:56:b1:e7:94:62:
44:48:3a:90:89:3c:77:c0:c1:b6:4e:36:3a:e9:fa:23:fb:06:
5d:c7:97:d4:06:59:23:57:71:a0:eb:7e:e2:03:eb:01:71:28:
d4:de:8c:f1:ab:7e:d5:a3:42:7a:c5:5b:47:1d:db:e2:cc:81:
ab:66:93:b8:b8:a3:18:a2:4c:75:73:3e:e3:0b:3e:d3:de:ef:
ba:4d:f7:7a:b8:ab:56:57:d5:e2:ad:a6:a3:f4:6d:64:5b:54:
2a:f7:67:00:fc:d3:e8:76:68:71:ec:bd:1c:3d:75:ce:09:9c:
06:d3:4f:56:c8:f9:bd:03:f9:8f:bb:88:e0:2a:f6:9f:38:a2:
6e:37:01:2d:d4:52:64:3c:b0:d6:8e:25:d3:db:3d:5e:0b:7a:
12:34:6c:21:af:a5:6f:99:57:ba:32:15:16:4a:90:3d:7d:95:
26:11:70:61:8e:75:65:e0:9a:ca:70:98:57:b2:5f:c0:9a:1c:
da:77:8d:c0:ae:48:f9:aa:22:36:12:9f:ff:6e:7e:27:9a:58:
03:35:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:01:25 2026 by rpki-client