Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
File: AS17404.roa (raw, json)
Hash identifier: RJuxbkqd6ZNNqnNiy9uyLGofm8xPta4W6BaB8x+gVWE=
Subject key identifier: C0:9F:08:69:CE:AA:55:E0:46:0E:E4:42:DB:BE:61:1D:99:A6:2B:7D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6F780D04F9FD98303019F928420F439B1677F5B7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
Signing time: Wed 19 Aug 2026 18:52:40 +0000
ROA not before: Wed 19 Aug 2026 18:47:40 +0000
ROA not after: Wed 18 Aug 2027 18:52:40 +0000
asID: 17404
IP address blocks: 87.81.128.0/20 maxlen: 24
87.81.144.0/20 maxlen: 24
87.81.160.0/20 maxlen: 24
87.81.176.0/20 maxlen: 24
94.194.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:78:0d:04:f9:fd:98:30:30:19:f9:28:42:0f:43:9b:16:77:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 19 18:47:40 2026 GMT
Not After : Aug 18 18:52:40 2027 GMT
Subject: CN=C09F0869CEAA55E0460EE442DBBE611D99A62B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:69:97:cf:48:dd:31:f3:db:59:20:71:d5:
7b:83:13:5f:ff:48:c5:94:50:31:46:9a:9a:98:91:
2b:85:76:b9:18:27:62:1f:8e:c0:fe:1d:15:8d:7b:
a1:f4:c8:99:c4:53:cf:17:19:2e:c0:bf:93:2c:51:
86:bd:65:d0:d8:f0:1c:41:58:43:28:86:fe:79:f0:
5c:e3:e8:d0:ca:09:9e:41:db:bb:35:02:07:c0:b3:
ec:fe:72:34:5f:79:41:1e:aa:9b:3c:01:3e:ae:be:
1d:5f:05:90:ad:55:13:44:ad:aa:f8:72:51:50:6e:
cb:0c:33:3e:d6:e5:53:cd:c9:ce:41:77:19:fd:5e:
95:25:c1:3b:7d:99:0b:3f:fb:48:19:ee:17:cf:f1:
a2:94:31:35:c7:94:a6:37:fb:19:4c:44:d1:0c:88:
66:d6:fb:f2:d7:ad:c1:69:63:6f:f7:84:72:0d:ab:
53:41:5f:05:b3:8a:d9:f5:b8:3c:dc:b4:cd:d3:7d:
25:2e:30:41:8a:a1:1e:e0:32:8c:51:05:46:da:82:
76:db:e0:eb:8f:6b:fb:68:70:4d:85:2e:68:a4:1d:
b6:e0:0d:61:af:40:ad:f5:a2:6f:ff:5a:04:09:1d:
45:49:81:6c:40:17:9c:42:ad:2c:c0:fa:be:22:3f:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:08:69:CE:AA:55:E0:46:0E:E4:42:DB:BE:61:1D:99:A6:2B:7D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS17404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.128.0/18
94.194.48.0/20
Signature Algorithm: sha256WithRSAEncryption
51:ed:29:66:a8:01:e2:8c:29:79:45:68:37:e3:79:66:bc:07:
a6:69:3c:a4:4c:fa:da:bb:a0:fa:81:ea:5f:ed:29:cb:f0:42:
6c:30:f3:a1:bc:a0:75:4a:04:46:aa:72:73:19:ae:fa:b5:7b:
b8:9d:1f:db:60:6f:36:38:7e:bd:3f:0c:7b:93:2d:36:1e:fe:
70:95:a7:a8:0d:34:20:c4:5c:89:5e:0f:7b:89:39:e1:e0:23:
35:fa:78:58:27:30:1e:1c:38:b3:77:ca:97:87:47:d3:e9:2f:
71:4c:7c:5d:1f:87:64:a6:ef:ff:45:be:b2:66:6a:a0:40:36:
cb:7e:c0:1e:43:3d:fb:88:35:c1:b2:fc:64:82:62:2c:de:ae:
bb:e3:c2:20:bc:cc:99:f3:08:08:bb:c5:1b:ec:dd:62:2c:ab:
38:1e:1f:99:0e:46:0c:27:81:23:b2:b8:cd:4c:2c:3f:41:ff:
4b:e0:0f:23:75:a5:35:ae:10:1d:ec:0a:13:fc:2f:71:75:53:
56:df:0a:9e:17:0a:f5:d9:bf:36:a7:a3:25:0e:04:f8:a5:22:
68:02:4f:ae:2f:dd:2d:84:69:ca:61:6a:9b:07:65:5a:c4:f1:
52:24:36:14:d5:1b:b2:ff:7a:49:a8:04:d6:96:bf:60:79:c1:
7e:e1:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:10 2026 by rpki-client