This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51791.roa
File: AS51791.roa (raw, json)
Hash identifier: zN3cJ8jrSZ5JGE+be+hhcic31hnlikXzdwJHmLKoh/8=
Subject key identifier: C3:7D:26:89:00:35:82:AF:C9:53:EB:29:62:D2:9B:04:DD:B7:F3:BA
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 035740B74CFCAE4C0AEA4688510C5C73B6580EE9
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51791.roa
Signing time: Wed 04 Feb 2026 12:57:44 +0000
ROA not before: Wed 04 Feb 2026 12:52:44 +0000
ROA not after: Wed 03 Feb 2027 12:57:44 +0000
asID: 51791
IP address blocks: 193.17.5.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:57:40:b7:4c:fc:ae:4c:0a:ea:46:88:51:0c:5c:73:b6:58:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:44 2026 GMT
Not After : Feb 3 12:57:44 2027 GMT
Subject: CN=C37D2689003582AFC953EB2962D29B04DDB7F3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:f3:b4:41:6b:9b:51:ef:0e:4f:67:3e:45:
da:bf:79:b0:26:9d:c1:45:d2:69:70:9c:e4:48:d1:
66:47:0a:23:38:1a:33:f5:33:99:59:11:45:18:7a:
e7:7f:69:1b:ff:e3:b6:85:cb:f3:10:68:17:13:9f:
b3:49:45:5b:6e:f1:cf:02:aa:20:23:c2:46:61:ff:
36:a3:02:51:fe:df:9b:43:3a:ec:4c:36:42:bd:fa:
02:02:28:a9:3a:9e:28:a7:57:21:b3:e1:24:54:19:
88:df:04:e3:b5:ab:31:cf:ba:27:1a:9c:51:da:50:
bd:c1:8d:3c:d9:9f:3e:00:d2:84:58:b4:e2:13:bd:
44:62:c4:34:75:63:32:22:67:bb:bf:3d:29:a5:ae:
4b:ee:59:d7:8f:4b:96:dc:6c:ad:a1:01:84:8b:0f:
14:9c:12:a7:0c:0f:58:88:28:d7:f4:b2:97:89:41:
75:4b:eb:3f:6b:b0:6d:a6:33:e7:ad:48:42:3b:6f:
b9:78:0f:25:b9:f7:96:bf:3f:50:44:e1:18:b4:80:
68:56:c4:e2:98:ea:a6:e2:f9:75:86:e5:17:03:11:
28:11:e8:a5:97:07:2d:f8:d7:d1:77:00:33:4f:b5:
5f:0e:6b:bb:b1:d1:83:cb:cb:e9:92:55:91:b7:87:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:26:89:00:35:82:AF:C9:53:EB:29:62:D2:9B:04:DD:B7:F3:BA
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.5.0/24
193.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
29:01:af:30:cb:a2:5a:34:73:07:96:3d:8e:cd:a8:d8:39:1a:
55:de:c5:67:6b:3e:eb:45:4f:c7:53:31:d3:09:f1:3b:2e:70:
25:63:36:eb:22:e1:f0:21:61:81:10:fb:a4:bb:3b:ca:fb:d7:
a4:77:17:04:c3:f5:c8:71:e3:d1:4d:fd:e9:72:bf:e2:7e:f1:
03:fe:1f:a8:a1:12:f1:0e:7a:62:85:e3:ea:84:c0:01:fc:14:
b0:0d:c6:c3:22:2d:07:95:dc:d7:23:d4:93:f7:3d:17:25:7f:
1f:37:0e:44:da:14:8e:fc:bf:2d:ca:65:ff:e3:2a:00:75:85:
8d:09:8f:df:0f:39:2f:6f:e5:ce:c9:f7:bc:9a:e8:ac:a4:59:
63:ab:53:4d:70:49:15:d9:f7:77:d2:4c:80:8c:9d:f9:44:8e:
12:aa:d8:bb:b2:e3:6d:70:60:b5:4f:3f:66:cb:b7:8d:ac:56:
f0:dc:15:7e:03:73:9f:85:6a:84:a9:3a:24:3b:b6:7b:76:17:
09:77:61:75:72:32:18:63:ff:32:35:06:d1:b0:21:7e:ad:b3:
3e:f1:fe:0b:c4:bd:3e:65:ed:37:fa:3b:a1:6a:e4:7f:93:38:
20:28:a9:e7:db:c4:fc:ee:24:46:2c:a2:bc:77:db:1a:4d:79:
3f:91:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:51 2026 by rpki-client