This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
File:                     AS44547.roa (raw, json)
Hash identifier:          VE/iaKY3KKQW1wdnbRUuHh8onM0opc34tMGjZb+xzh0=
Subject key identifier:   DC:FC:15:82:D4:D9:53:6E:7D:51:15:7C:E0:44:F4:97:B7:69:BA:01
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       47492897B3C523A0A9E52B089E347BFE6AE2263B
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
Signing time:             Wed 04 Feb 2026 12:57:35 +0000
ROA not before:           Wed 04 Feb 2026 12:52:35 +0000
ROA not after:            Wed 03 Feb 2027 12:57:35 +0000
asID:                     44547
IP address blocks:        37.221.76.0/24 maxlen: 24
                          37.221.77.0/24 maxlen: 24
                          92.249.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:28:97:b3:c5:23:a0:a9:e5:2b:08:9e:34:7b:fe:6a:e2:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:35 2026 GMT
            Not After : Feb  3 12:57:35 2027 GMT
        Subject: CN=DCFC1582D4D9536E7D51157CE044F497B769BA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:ba:11:05:7c:b4:87:06:e2:ca:d3:71:dc:
                    da:fa:a3:fb:32:c8:43:36:a0:a5:17:b3:1f:2a:25:
                    56:ec:a7:f1:f5:28:0a:de:5c:7e:7d:1e:bb:00:34:
                    61:85:9e:a3:f5:92:b3:6e:98:8c:56:6d:08:cc:c9:
                    67:24:11:49:ad:e6:3e:bd:a6:b7:6e:92:00:54:32:
                    51:a3:0f:36:db:f6:e8:99:5b:6f:5e:d2:2e:cb:07:
                    f7:99:9d:66:7c:16:7c:51:b4:14:d5:47:ba:bc:90:
                    52:77:3d:1e:16:4c:de:50:5d:bf:35:05:9d:db:0e:
                    b9:18:16:08:be:e4:7d:b2:df:4c:51:c4:e2:4d:17:
                    30:25:eb:f6:01:1a:8e:12:79:1a:b2:73:be:7e:f9:
                    d7:47:79:95:2c:73:5c:e3:2a:6a:d6:19:51:f5:ce:
                    07:c2:79:40:9d:0e:dc:4b:cb:40:fd:9c:e1:4f:26:
                    6c:ba:75:2a:7b:5a:77:af:66:a1:e2:42:87:ef:3e:
                    47:9e:bd:83:a8:b5:2a:04:3d:c1:ae:68:5b:25:79:
                    c6:18:29:03:9b:33:b5:4f:7e:dd:fa:1c:1d:85:f9:
                    27:eb:25:f5:02:33:ff:bf:6f:cb:7e:7d:b4:fb:0b:
                    51:be:7e:a4:f1:50:af:d8:76:58:24:5c:de:ca:83:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:15:82:D4:D9:53:6E:7D:51:15:7C:E0:44:F4:97:B7:69:BA:01
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.76.0/23
                  92.249.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:45:1f:6e:fe:c8:24:50:95:dc:1b:68:0b:18:6f:bd:0b:
         ed:99:c9:70:01:34:ff:e3:be:36:23:13:ad:c1:0d:b8:17:bf:
         aa:fb:be:3f:b2:0d:74:a4:3a:ac:d6:1e:5d:6d:d8:81:59:9e:
         fa:63:9a:13:0e:8e:06:77:6d:f7:48:d1:46:59:60:6f:e3:68:
         f2:fc:06:95:4c:f3:0a:18:8c:8e:64:ea:95:be:97:a4:6b:a4:
         43:21:61:9c:6e:3e:57:34:81:7a:f3:27:31:76:dd:8f:7b:1b:
         3f:e8:de:54:0a:2c:44:52:ec:4f:6a:4b:bb:65:cd:09:59:37:
         ca:20:63:66:38:d5:e9:1f:cf:b0:67:15:21:1c:0c:46:ea:cc:
         ae:16:4f:7d:de:5a:ed:2f:d6:6d:06:01:ae:81:ed:8a:b9:3b:
         80:20:ee:74:9a:60:33:33:4b:69:e0:45:bf:1d:83:aa:d1:f5:
         68:98:45:3f:ab:20:b1:29:fa:5e:b9:a8:13:63:0c:21:bc:56:
         f2:93:c5:96:05:af:00:1d:9b:ab:d3:9a:76:bc:e1:c8:5f:ce:
         56:b2:17:03:41:45:8d:8e:d8:a4:8b:fb:58:ee:3d:ad:bf:6f:
         1f:ad:b5:6d:06:ac:41:56:d7:b7:63:ef:9b:f2:76:55:fc:43:
         81:fa:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:20 2026 by rpki-client