This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          yxKLqGfwUABnpHSPmy6l97gTzZ81VRZqLuMu/IieHHU=
Subject key identifier:   51:08:09:6A:55:2F:88:DD:AE:8F:37:1A:C1:EE:20:7B:DE:77:D0:45
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       6CA21B3320E034B97ED1D05C4A8EDA5B15D8D465
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51847.roa
Signing time:             Wed 04 Feb 2026 12:57:45 +0000
ROA not before:           Wed 04 Feb 2026 12:52:45 +0000
ROA not after:            Wed 03 Feb 2027 12:57:45 +0000
asID:                     51847
IP address blocks:        84.54.0.0/23 maxlen: 24
                          84.54.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a2:1b:33:20:e0:34:b9:7e:d1:d0:5c:4a:8e:da:5b:15:d8:d4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:45 2026 GMT
            Not After : Feb  3 12:57:45 2027 GMT
        Subject: CN=5108096A552F88DDAE8F371AC1EE207BDE77D045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:c4:b9:b5:01:64:23:8e:de:ae:57:4f:fb:
                    ee:4b:d8:23:cd:c9:e6:bc:e8:33:e8:7f:62:77:2d:
                    60:73:d6:fa:14:ad:1c:b8:96:b5:72:b2:bc:d0:41:
                    ae:41:5f:86:21:77:92:35:df:df:00:09:09:8a:27:
                    be:8e:e9:ac:2f:4b:73:99:6e:8b:22:b8:c4:fa:ad:
                    5b:50:53:0c:6e:18:30:93:7d:2b:fe:c5:ed:b1:5c:
                    4f:f8:ab:1a:ad:00:2e:5c:c8:87:a8:f6:09:03:66:
                    a6:fb:ca:ab:0d:f0:9a:bf:61:f8:55:e8:ce:2e:17:
                    f9:d3:0b:fa:fd:86:cf:e3:f0:18:81:e7:76:0e:a9:
                    e7:e1:d5:cf:68:18:1e:c5:38:4e:96:c5:fc:60:d3:
                    40:c3:39:ba:d7:29:99:e2:42:53:a4:f0:82:98:86:
                    43:56:dd:96:6b:59:e1:b3:0c:9d:63:c6:4f:d1:f4:
                    d7:bd:b6:d5:75:48:30:98:0b:e2:df:ba:c3:ef:0c:
                    38:a1:86:ea:ec:82:1e:79:b9:0d:29:94:19:fd:0f:
                    df:52:15:7c:36:54:1d:7e:d9:fc:11:18:56:86:83:
                    61:25:ba:19:63:b6:9e:1b:73:71:0c:e4:f3:71:fe:
                    78:6f:8a:f7:d2:84:0f:a4:ac:49:34:05:b6:d8:71:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:09:6A:55:2F:88:DD:AE:8F:37:1A:C1:EE:20:7B:DE:77:D0:45
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:6c:26:0b:8a:4c:c8:81:ca:a4:19:00:8e:46:4b:a8:b6:
         09:62:6c:b1:19:e4:d0:3c:c4:18:6f:93:2d:66:15:c9:d7:a6:
         02:a8:ee:1c:41:c2:33:04:b6:a6:b0:70:69:79:17:b7:d4:79:
         2c:79:3c:93:73:69:62:57:e2:b0:34:78:e1:a3:d7:71:77:39:
         8c:19:b8:e6:c5:74:ac:ec:5f:34:6a:44:d9:7a:71:f5:1c:b6:
         c5:1e:b6:38:9f:4b:df:2e:69:64:f5:94:fc:fe:95:78:93:4a:
         01:99:91:69:07:7d:0a:b3:12:af:df:8d:51:dc:5a:d3:9a:af:
         e3:2b:eb:cd:5c:5a:e4:90:ae:2f:20:5e:08:45:e4:18:74:2c:
         a5:7a:66:2b:07:3d:4c:d9:86:7e:70:72:8d:ee:5f:b2:fe:0d:
         f8:e2:64:75:59:f6:b1:26:87:63:0a:0a:f2:0e:0e:21:72:ce:
         de:59:e2:d7:9c:fc:6e:71:c9:6c:f5:88:50:85:f8:e3:bd:4b:
         10:77:e0:1e:55:23:c5:1d:9b:1c:e0:e0:b6:fc:f4:23:55:17:
         97:a5:df:a5:12:4c:4e:37:9b:6d:60:3c:7e:56:fa:ca:03:c4:
         3d:f4:bf:c0:be:5b:b1:fb:9e:c0:fb:5a:fe:0c:ed:8a:9f:d9:
         5a:dc:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:54:26 2026 by rpki-client