Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: vOdgvZORPbGLeE/cKat4lfexHt89XnxIWkaGERi2dEs=
Subject key identifier: 0D:76:C6:C4:40:95:25:BC:4D:FA:05:BD:D3:EF:28:F3:09:C5:68:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 51C57412CB640A1EA951B268FE2C3E600828022B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17497.roa
Signing time: Thu 08 Oct 2026 02:25:45 +0000
ROA not before: Thu 08 Oct 2026 02:20:45 +0000
ROA not after: Thu 07 Oct 2027 02:25:45 +0000
asID: 17497
IP address blocks: 78.105.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c5:74:12:cb:64:0a:1e:a9:51:b2:68:fe:2c:3e:60:08:28:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 8 02:20:45 2026 GMT
Not After : Oct 7 02:25:45 2027 GMT
Subject: CN=0D76C6C4409525BC4DFA05BDD3EF28F309C56895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:e2:8e:4f:1e:80:75:16:de:f7:f8:c1:72:
68:c0:54:86:f8:2e:67:2f:e2:8b:64:95:88:e1:44:
4a:04:16:e7:a4:a4:6a:c4:56:43:41:f2:92:3d:89:
bd:3d:6d:61:3a:a2:19:9c:34:a7:1c:e3:82:53:f1:
e6:4a:14:ab:98:9f:c8:22:63:17:92:0b:bd:41:90:
6b:2b:e6:aa:f0:1d:c9:88:26:be:b1:db:a1:de:45:
d1:8c:47:63:af:2e:a3:51:d2:c4:4c:68:7d:d9:59:
7a:ce:f0:16:29:4d:0a:64:7b:22:d0:02:a5:de:dd:
92:d5:c4:5b:f0:3c:68:cd:1c:88:ad:90:ab:48:fa:
bc:e3:5e:16:25:d8:ec:98:f8:f5:35:bf:a1:9b:b9:
05:1b:41:bd:57:21:a8:c6:96:4a:88:46:c9:53:98:
42:a7:4f:0d:c3:bc:7f:62:be:25:f1:6b:fe:be:61:
74:6c:17:fe:e1:cb:ee:fd:0e:ad:a2:ed:af:8f:a5:
09:ed:50:9b:70:35:46:d9:7e:53:d9:8d:fb:65:0d:
8f:78:73:4b:83:79:0e:22:21:ae:43:3d:48:e0:bb:
6c:8f:45:a3:52:a0:19:84:2c:14:ce:6b:98:7d:cd:
99:dd:25:12:0f:b5:1b:c6:b6:a3:25:f4:8c:08:5a:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:C6:C4:40:95:25:BC:4D:FA:05:BD:D3:EF:28:F3:09:C5:68:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1b:5c:b2:60:fc:f4:9a:2a:e3:ce:48:84:ca:88:4b:52:99:
ee:d8:f1:26:f6:19:9e:16:90:9d:0a:44:74:94:16:37:93:1b:
7f:a2:a3:83:be:7c:4b:39:7a:f5:a7:0b:b1:07:60:d8:71:46:
33:4d:ca:f7:2b:27:7c:c0:c8:61:98:cd:db:27:9d:a8:1b:94:
c6:1d:31:f3:c5:61:ac:fd:f8:62:2b:4b:2f:28:a8:7b:26:6f:
47:ae:51:6d:70:71:d9:2d:ff:2f:0e:9c:87:06:9a:fc:59:9a:
09:76:14:3b:f9:9b:b9:24:36:63:5e:ed:cc:05:15:a7:86:87:
de:d7:1b:dc:b3:43:6c:ea:47:16:43:f8:0d:c5:76:e3:72:d1:
5f:1e:64:e8:3d:f4:d3:5f:30:3e:07:3e:b5:cd:42:52:4e:e9:
ca:e5:a8:22:5f:19:9c:92:6f:03:29:0b:3c:c6:bb:68:92:9c:
e4:75:27:e1:1e:8c:2b:4d:8d:85:3c:e8:01:0a:6e:08:75:a7:
0b:69:c2:21:be:cf:52:9b:70:21:93:81:f4:e0:b1:39:53:02:
43:63:54:4b:89:39:be:27:d3:27:a8:66:4a:7b:0f:4b:11:7c:
09:32:f8:0a:5e:72:3c:1c:48:88:8d:42:3b:a8:fb:06:d9:5c:
41:a7:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:45:24 2026 by rpki-client