Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: BKlalF5qtoser/PgXqehicdhA/hkjkBvss6+UzM0CXE=
Subject key identifier: C6:33:D3:16:94:53:0A:6B:AE:47:89:4B:D0:8C:70:99:7F:D5:0E:0D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 50B277333D63423E9643CEF67DCF3264C38A2BAE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
Signing time: Fri 06 Mar 2026 10:06:33 +0000
ROA not before: Fri 06 Mar 2026 10:01:33 +0000
ROA not after: Fri 05 Mar 2027 10:06:33 +0000
asID: 17497
IP address blocks: 185.158.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b2:77:33:3d:63:42:3e:96:43:ce:f6:7d:cf:32:64:c3:8a:2b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 6 10:01:33 2026 GMT
Not After : Mar 5 10:06:33 2027 GMT
Subject: CN=C633D31694530A6BAE47894BD08C70997FD50E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:e8:c7:21:15:2f:b2:86:e7:e0:f4:ae:5f:
0d:a5:ab:31:82:ba:f2:8f:f5:dc:ca:0b:35:6c:7d:
e2:de:c5:8a:63:35:0d:7b:a0:48:a1:fe:0d:d2:f5:
8f:97:4f:d0:e0:7a:36:2f:79:29:ea:86:05:f0:02:
0b:72:9a:eb:a7:19:9f:1a:87:89:03:b6:cc:ba:ca:
db:24:19:3d:01:c5:9c:a8:fe:da:03:e8:2e:c3:62:
96:48:cc:04:41:03:9c:ce:3b:f9:d0:fc:9f:92:7a:
bf:c5:6f:ec:b5:66:84:cb:9c:cd:f0:b2:be:d7:e8:
b7:2a:43:86:fe:9e:05:8a:e9:2b:29:10:01:e8:97:
2a:44:ba:55:c4:c0:0f:f6:3f:49:6e:3a:41:b1:0d:
4a:5c:f9:bf:95:93:6d:a5:a8:bc:78:be:bb:9e:4b:
82:44:68:7d:e1:49:a3:39:48:df:cf:38:46:ed:ff:
7b:b9:f5:c0:0c:3f:94:68:29:9d:0a:98:7e:95:a0:
98:02:e4:65:26:31:c5:14:9e:8c:cf:1b:8b:81:13:
a0:3b:02:e1:dd:81:97:12:a4:6b:48:85:ca:35:ff:
fd:08:48:bd:eb:8e:10:b9:92:a8:10:fd:0e:2c:3c:
08:bf:3e:bd:b7:ec:a2:43:8d:6f:61:3f:3e:75:7d:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:D3:16:94:53:0A:6B:AE:47:89:4B:D0:8C:70:99:7F:D5:0E:0D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:97:6b:17:e0:60:d8:0f:23:97:6f:8a:1a:15:bb:1b:40:d2:
54:62:6d:4d:14:98:67:a2:dd:a5:e1:ec:78:47:f4:35:6f:69:
74:62:fd:29:84:28:9f:34:6b:20:d9:32:0f:59:fa:b5:81:5f:
64:6a:c9:ad:d3:a7:dd:07:ef:a0:29:46:a5:2a:1f:4b:ae:9c:
37:30:9d:6d:20:fc:47:62:1d:cf:fb:94:b1:fe:a7:0e:f8:4f:
c9:25:7a:03:ac:ca:76:30:85:0d:f9:68:bb:10:70:32:61:16:
e5:7b:e1:49:d2:dd:01:94:0e:78:56:43:dc:5f:63:18:f8:0f:
ad:fe:d2:9b:58:50:f7:e1:e6:d6:9f:7f:1b:3c:e9:e0:14:7c:
8b:e1:5b:5f:2e:36:38:21:0c:f9:5a:5c:e8:97:1a:de:bc:8b:
58:71:9e:68:5c:8a:75:06:ce:dc:f6:3a:dd:c9:04:64:25:10:
85:9b:36:28:d4:49:a4:e2:c4:1d:71:e9:e0:c3:d9:61:84:14:
f2:10:0e:20:eb:c4:f6:a2:f3:d5:13:52:6a:c6:d5:fb:99:b4:
3d:dd:24:4b:ff:35:fd:f6:b9:4d:d3:5c:61:86:8d:f4:ab:19:
62:8b:be:58:fa:fd:03:10:56:40:a7:13:0f:bd:b1:7e:4d:9d:
26:00:9e:6a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUULJ3Mz1jQj6WQ872fc8yZMOKK64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAzMDYxMDAxMzNaFw0yNzAzMDUxMDA2MzNaMDMxMTAvBgNV
BAMTKEM2MzNEMzE2OTQ1MzBBNkJBRTQ3ODk0QkQwOEM3MDk5N0ZENTBFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClOjHIRUvsobn4PSuXw2lqzGC
uvKP9dzKCzVsfeLexYpjNQ17oEih/g3S9Y+XT9DgejYveSnqhgXwAgtymuunGZ8a
h4kDtsy6ytskGT0BxZyo/toD6C7DYpZIzARBA5zOO/nQ/J+Ser/Fb+y1ZoTLnM3w
sr7X6LcqQ4b+ngWK6SspEAHolypEulXEwA/2P0luOkGxDUpc+b+Vk22lqLx4vrue
S4JEaH3hSaM5SN/POEbt/3u59cAMP5RoKZ0KmH6VoJgC5GUmMcUUnozPG4uBE6A7
AuHdgZcSpGtIhco1//0ISL3rjhC5kqgQ/Q4sPAi/Pr237KJDjW9hPz51fdJ3AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUxjPTFpRTCmuuR4lL0IxwmX/VDg0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTc0OTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5npUw
DQYJKoZIhvcNAQELBQADggEBAIqXaxfgYNgPI5dvihoVuxtA0lRibU0UmGei3aXh
7HhH9DVvaXRi/SmEKJ80ayDZMg9Z+rWBX2Rqya3Tp90H76ApRqUqH0uunDcwnW0g
/EdiHc/7lLH+pw74T8klegOsynYwhQ35aLsQcDJhFuV74UnS3QGUDnhWQ9xfYxj4
D63+0ptYUPfh5taffxs86eAUfIvhW18uNjghDPlaXOiXGt68i1hxnmhcinUGztz2
Ot3JBGQlEIWbNijUSaTixB1x6eDD2WGEFPIQDiDrxPai89UTUmrG1fuZtD3dJEv/
Nf32uU3TXGGGjfSrGWKLvlj6/QMQVkCnEw+9sX5NnSYAnmo=
-----END CERTIFICATE-----
Generated at Thu Mar 12 09:27:56 2026 by rpki-client