This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202051.roa
File:                     AS202051.roa (raw, json)
Hash identifier:          HD5hN9bEdzZbjTjsZVJ8rsa6/qOsD4+5J4wMaerFudY=
Subject key identifier:   49:C8:DD:78:70:84:89:FC:35:8D:17:82:A2:36:99:63:EF:A1:D8:B0
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       57CF9347D35C3343213A83AC42388D1728A7F145
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202051.roa
Signing time:             Fri 23 Jan 2026 17:35:13 +0000
ROA not before:           Fri 23 Jan 2026 17:30:13 +0000
ROA not after:            Fri 22 Jan 2027 17:35:13 +0000
asID:                     202051
IP address blocks:        167.148.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 23:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cf:93:47:d3:5c:33:43:21:3a:83:ac:42:38:8d:17:28:a7:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan 23 17:30:13 2026 GMT
            Not After : Jan 22 17:35:13 2027 GMT
        Subject: CN=49C8DD78708489FC358D1782A2369963EFA1D8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c2:c0:4d:29:ac:7a:c4:b3:fb:ba:69:ef:81:
                    75:67:df:a6:85:a1:34:76:dd:4e:34:a9:d3:91:d7:
                    50:6b:44:20:14:4b:b4:b3:0a:26:e5:68:c0:72:3d:
                    66:25:78:39:ed:ca:6c:b1:03:1c:11:d7:cf:2e:d4:
                    ef:06:be:da:73:b6:8b:96:b4:24:6f:87:64:b3:dc:
                    6a:f8:71:b0:6c:2c:97:fe:87:f2:53:48:5b:23:4b:
                    6f:3b:b7:51:69:28:f3:22:a6:45:17:c4:5e:84:77:
                    3c:ac:8b:2b:8f:a1:8a:e7:21:b3:92:25:30:84:e8:
                    80:09:ad:b9:2c:5e:ea:70:4e:6e:c6:91:65:39:43:
                    1c:99:93:b2:4b:7a:15:32:65:c6:f0:33:15:e9:83:
                    b9:9d:fb:95:35:6e:af:48:a5:d9:cb:02:84:86:09:
                    d5:44:5b:dc:89:2c:72:41:75:e3:10:45:f4:b9:a5:
                    8b:b7:2b:58:fb:77:f1:55:16:d7:71:12:f8:1a:16:
                    7a:92:87:0d:8b:ea:3c:28:1a:91:f3:c6:ac:2e:a6:
                    ce:01:8b:c9:cc:61:25:a7:08:95:ad:41:05:94:6e:
                    dc:2c:47:d0:4c:b0:ae:12:e3:61:45:e8:ae:e9:74:
                    1c:60:d1:49:eb:22:1b:3a:48:b1:9c:02:6b:f7:b5:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C8:DD:78:70:84:89:FC:35:8D:17:82:A2:36:99:63:EF:A1:D8:B0
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202051.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.148.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:a6:8a:c2:5e:e4:8f:ad:e1:1a:cf:75:38:cb:34:b0:b4:
         37:5d:db:2c:f3:18:60:46:c8:04:af:f3:c4:8d:67:ff:1d:f5:
         cd:78:e4:60:64:67:91:02:98:45:8d:31:7e:23:b5:69:35:92:
         37:5f:fe:de:74:de:eb:5a:96:56:57:3e:7a:bd:77:46:58:c0:
         e1:87:82:73:16:bd:e1:a1:95:ac:ce:2f:81:2a:24:54:65:2b:
         a7:a7:4e:aa:b2:cd:00:69:c3:a5:9e:55:67:9e:92:23:b9:c5:
         72:a7:d7:cf:72:60:51:7c:09:bc:6e:4f:60:29:6c:3d:00:d0:
         61:ba:35:b8:88:02:97:78:71:64:a7:ad:ec:4f:30:4e:d5:48:
         a8:1c:72:0d:4f:a4:52:4b:d9:b6:8a:2a:1f:7e:c0:61:4b:16:
         10:f9:5f:c9:fb:e2:6d:fd:54:2a:3d:33:c7:53:ae:17:7a:e6:
         7c:31:48:f4:5f:95:e0:bc:e2:cf:5b:9f:80:d3:d4:5f:2f:fe:
         0e:26:2e:66:ad:ba:e7:14:25:d8:5f:9e:5c:93:c3:79:8e:c4:
         30:f8:49:13:5c:ce:1d:e5:f7:78:d3:86:f4:af:f1:24:3b:87:
         85:25:7a:c0:ee:68:f6:e9:ee:fa:18:31:6c:bf:c2:6a:0a:4a:
         b3:e6:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 07:07:58 2026 by rpki-client