Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: nCY0dfJdGvCyBvxKmxq47+ywxHzne//soYLt1+A9MQk=
Subject key identifier: E5:41:9F:F4:CD:16:99:37:26:E3:33:7D:CB:3E:53:A5:45:9B:31:67
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D33546112168E94A6DA2B8976097BC68CDCB8E3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
Signing time: Fri 17 Apr 2026 08:57:12 +0000
ROA not before: Fri 17 Apr 2026 08:52:12 +0000
ROA not after: Fri 16 Apr 2027 08:57:12 +0000
asID: 17497
IP address blocks: 185.158.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:33:54:61:12:16:8e:94:a6:da:2b:89:76:09:7b:c6:8c:dc:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 17 08:52:12 2026 GMT
Not After : Apr 16 08:57:12 2027 GMT
Subject: CN=E5419FF4CD16993726E3337DCB3E53A5459B3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:dc:48:ac:1f:79:a3:f6:dc:c7:f1:9c:c8:74:
cf:89:7c:a4:4f:fb:ee:a6:e0:38:0a:8c:06:2f:e7:
65:f1:79:ed:1c:a3:be:e3:f0:57:63:bf:0b:f1:62:
ab:dc:ed:aa:7e:0c:4c:9f:c0:ec:85:0c:a2:ac:9e:
1c:ab:ce:ee:45:c9:ae:3c:d9:2c:30:8c:5e:ff:93:
20:e8:fa:ba:89:f9:6d:51:22:eb:d5:16:f6:af:53:
2d:d1:9e:9e:41:a8:0d:26:3b:47:8d:db:61:6a:df:
e1:7c:21:92:d7:ff:84:76:a4:6e:a4:b6:52:32:d3:
9d:f1:02:42:7b:a7:b3:74:ed:02:84:a5:6e:66:2a:
55:cb:00:db:47:09:21:d6:ef:64:a9:c3:01:fa:bd:
38:be:7b:c3:46:e1:75:b3:af:77:2c:40:c9:ba:b6:
49:cd:c9:7e:39:f5:0b:88:0b:06:3e:6e:2a:86:f2:
de:8f:db:cb:f6:04:ad:76:9d:5f:1d:aa:17:f2:1e:
c3:21:88:d7:72:26:2d:5e:40:04:da:60:df:21:af:
46:94:01:15:de:f9:3a:0c:55:d5:13:95:a0:f0:c2:
10:31:cd:07:fb:1d:80:aa:27:c4:26:7b:73:21:2b:
87:d7:8d:8b:32:b9:eb:4f:78:25:38:15:d2:92:34:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:9F:F4:CD:16:99:37:26:E3:33:7D:CB:3E:53:A5:45:9B:31:67
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.149.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ec:8f:00:b3:da:ae:fe:76:a3:1b:3d:97:a8:17:7e:a7:66:
ff:fb:66:b1:1f:f3:bc:19:49:d8:ba:e1:d8:16:35:d2:e4:4a:
4d:86:7b:f9:69:d5:ca:68:f9:fc:ba:34:4c:83:ed:6a:7e:c5:
fd:2e:65:4c:a4:2a:40:e6:83:df:70:df:29:07:de:7c:fe:fd:
d6:be:2c:d3:3c:d3:34:62:51:04:6e:9a:51:90:21:d6:b9:fd:
ef:9a:aa:79:b2:c2:11:ac:18:13:9e:66:f9:01:3b:f2:16:4b:
3b:e8:f8:ed:11:89:cc:51:82:dc:5c:3d:eb:b9:1d:94:e6:d0:
dc:8e:86:42:95:2e:05:db:b8:47:65:e6:09:b1:76:e1:b8:46:
56:c7:d6:4e:91:ec:61:c7:40:da:f1:57:f0:b7:d9:f2:3e:7a:
84:bd:2c:4c:5d:a9:22:38:37:dc:7f:e0:8d:1c:53:a0:6c:94:
0b:20:45:ad:29:af:29:33:bf:dc:f0:05:a5:19:7c:90:06:de:
10:71:d8:d1:e6:42:ab:d3:15:78:51:fb:c2:fa:11:b6:02:96:
5b:1d:f2:3f:68:67:0b:40:a0:03:38:bf:5a:67:5e:ff:0d:36:
ac:66:fa:f7:14:1f:99:04:cd:90:0b:ae:37:f6:cd:da:74:4f:
9f:1b:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:35 2026 by rpki-client