Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: 5f8zM3jUCVtAyauuw80+0eqLmosE9OLwKKHyx/Uihyc=
Subject key identifier: 15:79:FD:6C:96:83:CF:95:49:73:1D:26:11:3A:15:8F:F6:42:B7:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4B44C3F15B7F41DAD3704CFDBFB5AAF678010B2E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
Signing time: Sun 01 Mar 2026 03:02:53 +0000
ROA not before: Sun 01 Mar 2026 02:57:53 +0000
ROA not after: Sun 28 Feb 2027 03:02:53 +0000
asID: 17497
IP address blocks: 82.41.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:44:c3:f1:5b:7f:41:da:d3:70:4c:fd:bf:b5:aa:f6:78:01:0b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 1 02:57:53 2026 GMT
Not After : Feb 28 03:02:53 2027 GMT
Subject: CN=1579FD6C9683CF9549731D26113A158FF642B7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:fd:92:4e:35:55:4c:44:7b:cb:b3:d4:72:
ca:55:9b:5f:70:83:5e:ca:ff:b4:8c:e4:ac:0e:22:
28:ac:1f:7e:3a:d5:7d:de:7c:b7:a2:14:c9:a5:55:
d7:c8:79:e0:53:39:df:c6:a4:8f:d2:c2:4a:69:fa:
c8:b3:a4:56:3f:cf:cd:81:ec:61:b3:55:b6:2e:4d:
a3:f1:58:d1:27:57:fa:5a:1a:ff:8e:75:5e:58:f5:
dc:43:35:65:09:25:97:eb:ac:29:d0:d8:8e:42:8c:
45:61:0e:89:f0:38:66:da:0b:7f:55:ba:ab:f8:0e:
fa:d8:6e:06:a5:75:67:da:27:91:56:70:cf:bd:97:
2a:29:c1:b2:4b:98:54:88:52:ec:f3:e4:51:b5:c2:
27:a6:72:d2:ca:3d:f1:d8:f6:ff:0c:4a:f7:2a:d6:
54:06:d2:01:46:38:bf:e2:86:54:36:00:c4:83:dd:
95:5a:df:15:89:cc:31:64:6a:86:7a:f1:b1:1c:07:
79:b2:b3:45:30:23:12:2c:15:a3:ba:c7:e1:1d:e8:
05:1e:1b:bd:ce:5f:76:51:06:cb:bb:86:d1:07:e4:
50:4d:a4:b5:bc:eb:74:6e:d7:4e:5a:16:c4:46:e8:
a3:0f:73:f3:af:88:01:d2:51:3b:a2:98:6f:44:46:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:FD:6C:96:83:CF:95:49:73:1D:26:11:3A:15:8F:F6:42:B7:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8a:cf:c3:31:9e:f7:19:60:74:07:21:81:eb:e2:46:95:60:
11:87:3f:13:a0:76:ef:7a:10:70:6e:74:01:02:a7:a9:55:54:
c8:41:24:bc:6a:3e:66:f3:3e:0b:41:40:6a:fd:25:44:f6:36:
f5:bf:40:e5:1d:2c:4e:bd:76:71:c4:b0:ef:11:6d:8a:41:03:
9a:d4:9e:ad:45:62:33:ec:8c:e4:34:31:7e:4a:6d:f5:40:30:
93:44:e0:d6:25:7c:c2:8c:9f:f3:8e:3b:fa:d7:9a:c0:f2:26:
46:07:2b:47:aa:bf:66:db:49:f2:e4:07:51:82:51:ad:97:86:
0b:a4:99:63:d0:f4:da:db:96:e1:9a:f5:d9:f3:fc:23:e5:91:
e6:d1:90:61:8c:40:ec:b0:3c:ab:90:80:15:32:ad:26:f8:df:
c4:52:ae:cc:ba:74:62:35:ff:a4:1d:af:24:d7:8f:92:60:79:
34:82:2a:32:8b:79:49:af:fe:b2:f8:93:3e:a0:d7:1f:0b:51:
55:e5:08:57:01:fd:ed:04:5d:22:7c:f8:ea:ab:06:2a:2a:37:
bb:e9:4f:2a:71:6f:15:f1:42:c4:7c:e1:52:95:88:09:71:70:
0b:9d:10:6d:4b:fc:7c:70:d0:7b:cb:ef:c1:9f:32:e6:44:cd:
3f:10:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:10 2026 by rpki-client