Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
File: AS17404.roa (raw, json)
Hash identifier: CEHsu9fQYnG8YnVP3WVnXcUwt3A2o5epsYGg+qeYmyk=
Subject key identifier: A9:A1:12:26:BE:7D:01:69:3A:63:98:E6:EC:8E:4B:DB:E1:AC:76:89
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 21F8A1EE189169BE4AEFEC9EEA4E5D866311759B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
Signing time: Mon 18 May 2026 12:14:18 +0000
ROA not before: Mon 18 May 2026 12:09:18 +0000
ROA not after: Mon 17 May 2027 12:14:18 +0000
asID: 17404
IP address blocks: 51.241.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f8:a1:ee:18:91:69:be:4a:ef:ec:9e:ea:4e:5d:86:63:11:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 18 12:09:18 2026 GMT
Not After : May 17 12:14:18 2027 GMT
Subject: CN=A9A11226BE7D01693A6398E6EC8E4BDBE1AC7689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:c9:d5:28:05:24:de:9a:ef:8b:9a:15:be:
07:29:c3:1b:28:e8:a3:ec:8a:34:2c:cf:1b:87:e8:
15:19:15:b6:e5:60:31:1f:d2:51:27:78:7b:ee:21:
0a:1d:50:8c:98:92:b0:79:57:0f:ed:79:e4:75:5b:
5f:91:99:7d:13:7d:3c:6d:42:33:b3:ec:06:c3:a1:
4e:09:d6:a8:69:91:9c:68:37:91:5f:5a:c0:9d:e0:
c8:fa:bb:0a:09:a1:1d:8c:42:c2:c9:6e:eb:df:8a:
90:2c:2e:d3:d9:b9:37:c7:35:66:77:8a:bd:42:0c:
33:95:15:66:08:f1:a6:67:bb:f2:4a:ae:f6:8a:8e:
d7:69:58:78:57:c0:72:60:9c:35:58:81:3b:ce:a7:
27:e2:42:14:75:06:0d:c3:7e:19:48:8b:b9:1d:f3:
a4:8c:a5:b9:8f:d0:51:22:8e:a2:f2:91:55:12:93:
88:a3:11:83:02:3c:4c:85:4f:08:c4:6e:0b:9f:4c:
12:e1:e7:08:b0:eb:03:49:d9:8f:cf:90:13:f3:a8:
2a:22:ef:0d:24:9f:64:9c:18:a5:7f:78:e0:af:b2:
ed:13:77:c6:41:e7:af:6e:09:9e:8e:5b:bc:da:7c:
ea:a3:38:f0:f6:1b:62:b0:4a:30:73:b0:50:f8:9a:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:12:26:BE:7D:01:69:3A:63:98:E6:EC:8E:4B:DB:E1:AC:76:89
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:f4:08:93:f0:4a:b9:1a:cc:0b:23:d7:60:60:0d:be:67:0a:
7b:f6:0b:8a:24:51:c3:48:02:50:c8:c7:c1:8c:38:8a:28:25:
59:18:9e:dd:19:25:51:e5:49:ca:56:1e:61:65:39:4b:f3:d4:
1e:b7:c6:c6:46:b7:9c:3a:69:1b:99:04:1d:be:12:85:7a:f3:
ba:ee:01:4f:b0:72:a3:dd:c9:aa:a1:67:81:5d:27:c2:da:52:
84:71:88:2e:1a:b4:8a:cd:2f:34:62:30:bb:0f:3e:da:af:b3:
78:21:8d:86:1b:85:82:a7:3a:c1:d1:9b:15:46:cb:48:8f:12:
57:49:b5:b9:54:3a:c8:42:bc:d9:15:c4:07:59:ce:fb:43:c2:
a5:8d:1a:48:b9:e2:cf:7e:bb:22:2e:89:ef:9a:4f:e9:06:e3:
10:54:36:03:6f:45:3c:65:c0:2e:a0:23:ee:d7:19:81:92:e9:
4b:ce:8a:f6:bc:e3:f4:cf:79:9a:52:74:5e:f8:79:f3:e0:ac:
70:20:14:4a:a8:d0:d7:da:11:7f:ed:61:a5:63:83:2f:73:98:
91:a5:b8:af:2a:99:1c:c0:79:d4:c2:10:fc:da:c7:ef:a2:f0:
d3:3d:40:70:7f:5a:51:14:11:8b:4f:4a:77:38:70:94:97:5e:
2d:99:a1:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUIfih7hiRab5K7+ye6k5dhmMRdZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MTgxMjA5MThaFw0yNzA1MTcxMjE0MThaMDMxMTAvBgNV
BAMTKEE5QTExMjI2QkU3RDAxNjkzQTYzOThFNkVDOEU0QkRCRTFBQzc2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gcnVKAUk3prvi5oVvgcpwxso
6KPsijQszxuH6BUZFbblYDEf0lEneHvuIQodUIyYkrB5Vw/teeR1W1+RmX0TfTxt
QjOz7AbDoU4J1qhpkZxoN5FfWsCd4Mj6uwoJoR2MQsLJbuvfipAsLtPZuTfHNWZ3
ir1CDDOVFWYI8aZnu/JKrvaKjtdpWHhXwHJgnDVYgTvOpyfiQhR1Bg3DfhlIi7kd
86SMpbmP0FEijqLykVUSk4ijEYMCPEyFTwjEbgufTBLh5wiw6wNJ2Y/PkBPzqCoi
7w0kn2ScGKV/eOCvsu0Td8ZB569uCZ6OW7zafOqjOPD2G2KwSjBzsFD4mucxAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUqaESJr59AWk6Y5jm7I5L2+GsdokwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTc0MDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMz8fAw
DQYJKoZIhvcNAQELBQADggEBABr0CJPwSrkazAsj12BgDb5nCnv2C4okUcNIAlDI
x8GMOIooJVkYnt0ZJVHlScpWHmFlOUvz1B63xsZGt5w6aRuZBB2+EoV687ruAU+w
cqPdyaqhZ4FdJ8LaUoRxiC4atIrNLzRiMLsPPtqvs3ghjYYbhYKnOsHRmxVGy0iP
EldJtblUOshCvNkVxAdZzvtDwqWNGki54s9+uyIuie+aT+kG4xBUNgNvRTxlwC6g
I+7XGYGS6UvOiva84/TPeZpSdF74efPgrHAgFEqo0NfaEX/tYaVjgy9zmJGluK8q
mRzAedTCEPzax++i8NM9QHB/WlEUEYtPSnc4cJSXXi2Zoa0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:08 2026 by rpki-client