Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: rhAzZnR0CHLdJhztR1MjcJ9bDRmhsFn+scV86F7oGXA=
Subject key identifier: D3:59:5C:66:A3:24:86:6A:4A:AD:AD:AC:D5:C1:9D:DD:07:A1:AD:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 349EC722742A61B62C5655A71B2444839393931A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
Signing time: Fri 27 Mar 2026 08:43:26 +0000
ROA not before: Fri 27 Mar 2026 08:38:26 +0000
ROA not after: Fri 26 Mar 2027 08:43:26 +0000
asID: 17497
IP address blocks: 82.41.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9e:c7:22:74:2a:61:b6:2c:56:55:a7:1b:24:44:83:93:93:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 08:38:26 2026 GMT
Not After : Mar 26 08:43:26 2027 GMT
Subject: CN=D3595C66A324866A4AADADACD5C19DDD07A1ADBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:50:37:26:e5:2f:e0:18:8e:97:41:d8:0a:
dc:93:25:84:ac:46:95:a2:3c:59:19:0f:0a:ba:7b:
51:03:af:c8:3b:9c:f0:ac:18:0d:a7:f3:77:10:a5:
9c:2e:e9:f8:88:6e:a0:3d:21:a2:8c:ab:5a:97:4a:
d4:aa:66:d6:20:83:1f:36:66:d0:27:2f:5a:c0:39:
78:14:28:15:0e:dd:d6:b7:1c:3d:89:fd:a7:7e:e3:
7f:6b:55:63:6b:f2:79:b0:ed:94:95:28:84:74:93:
6e:4d:67:98:e9:0a:06:e4:0f:8e:d3:c3:d4:1c:c6:
fa:ee:4a:83:8a:69:8e:65:01:1b:02:be:f5:04:f0:
a3:af:6c:b6:93:25:24:ce:8d:58:3a:3c:03:f9:d5:
a2:91:f0:0b:8d:df:3e:c3:3e:cc:4c:bb:71:fd:16:
0f:bf:cf:93:eb:5f:96:72:5e:10:96:d2:af:d3:c3:
94:2b:17:88:f9:46:02:be:c9:8c:a9:37:b5:4e:a0:
a6:3f:a3:17:da:e9:c4:76:21:b4:fa:41:33:83:80:
c6:aa:45:46:d5:0c:a4:85:8d:e2:be:a6:b4:3b:37:
5c:6a:03:ed:5d:1a:73:58:7c:51:2c:88:d0:85:36:
78:13:fd:d5:d6:fe:01:ea:8d:fd:1b:c7:16:de:41:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:5C:66:A3:24:86:6A:4A:AD:AD:AC:D5:C1:9D:DD:07:A1:AD:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d5:43:ed:71:15:da:f4:61:92:f9:18:6d:7e:93:f4:3e:d0:
84:4f:a2:c8:90:ae:dd:f1:eb:03:c7:36:2c:dd:23:2f:38:b6:
ce:9d:bf:d0:37:e3:e3:ac:bd:c0:00:d3:44:38:19:1b:61:2e:
04:93:a8:3e:f9:39:34:9b:6e:52:05:53:65:88:d5:63:e6:5d:
b7:96:21:5c:9e:e5:cd:0b:fa:85:17:35:ec:16:58:52:3c:9e:
1d:45:a7:4e:32:8d:ec:52:e0:b6:a6:d8:0d:28:c7:4b:31:98:
92:3d:f1:c5:90:83:ee:c1:34:34:92:8d:34:b7:e5:33:29:19:
4c:87:af:25:05:53:d5:ba:76:1c:23:59:f2:f6:cf:01:5b:8a:
5b:37:f5:69:3c:2f:51:58:a7:13:d5:56:e4:68:d5:05:f6:26:
27:15:9c:31:a9:36:d2:01:ce:7f:5b:95:5f:8d:81:51:7a:08:
fa:9e:8e:99:7d:06:34:5c:68:99:1c:ba:d4:8a:9b:48:57:82:
5f:44:fa:41:4d:27:12:a6:60:8a:81:97:d9:fa:63:57:b7:20:
f7:e6:c9:5d:af:00:ea:14:0c:ab:a9:a7:55:8f:8f:9a:2c:51:
ae:c4:27:4b:12:66:df:8d:5d:48:f9:b6:7d:a0:95:08:90:46:
de:02:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:06 2026 by rpki-client