This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51791.roa
File:                     AS51791.roa (raw, json)
Hash identifier:          zA8ZULF2uJhQ3qI1LMAdzZpgdjL+R3CSdWmlQAvsTnA=
Subject key identifier:   F2:B9:70:20:82:E2:93:F6:7A:2A:6F:2A:77:62:E7:24:A6:3B:92:91
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       433A11503CDCAF34C5EEEC7A7D6D3A7A3D630F30
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51791.roa
Signing time:             Thu 08 Jan 2026 07:21:50 +0000
ROA not before:           Thu 08 Jan 2026 07:16:50 +0000
ROA not after:            Thu 07 Jan 2027 07:21:50 +0000
asID:                     51791
IP address blocks:        193.17.5.0/24 maxlen: 24
                          193.17.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:11:50:3c:dc:af:34:c5:ee:ec:7a:7d:6d:3a:7a:3d:63:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan  8 07:16:50 2026 GMT
            Not After : Jan  7 07:21:50 2027 GMT
        Subject: CN=F2B9702082E293F67A2A6F2A7762E724A63B9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:09:04:58:b0:ce:17:b5:39:50:05:77:5a:
                    b7:23:b5:2c:aa:d1:a0:ad:54:e8:bf:9a:0f:4c:bf:
                    9b:1c:9f:a6:7a:3b:f1:c0:60:67:d3:6b:13:20:6a:
                    6a:d1:55:42:d2:44:99:5a:03:43:e2:e0:2f:e7:17:
                    c5:05:14:53:fb:e1:c9:4e:32:19:4c:5e:94:90:c8:
                    9b:69:64:d6:b8:4d:3f:3c:27:2d:3c:a3:95:a9:e0:
                    b4:6b:ee:cd:03:1d:ee:03:34:bd:78:ce:e1:bd:51:
                    14:05:82:6b:21:82:6f:71:f5:2a:2d:77:7d:5b:42:
                    7c:9c:91:04:c6:53:88:18:c3:3b:d1:ed:22:8f:07:
                    71:d6:a1:76:43:b0:e1:1a:db:48:34:d7:66:74:27:
                    03:1c:b1:cc:3d:7f:cf:42:4a:ca:13:5b:85:8f:8b:
                    d4:8a:f5:b2:9d:9c:fb:e8:cd:5c:a7:fb:c3:24:49:
                    54:be:a4:77:52:56:16:aa:78:d4:93:06:22:26:9a:
                    12:ea:0c:29:2e:61:2b:e9:e3:b2:41:b8:e6:98:80:
                    11:26:35:ba:09:d9:8b:1d:37:02:1a:b2:7a:89:30:
                    09:a4:76:6c:17:98:fe:3c:74:54:c8:48:78:6f:44:
                    49:c0:aa:92:50:47:a6:a5:93:18:80:81:38:20:00:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B9:70:20:82:E2:93:F6:7A:2A:6F:2A:77:62:E7:24:A6:3B:92:91
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS51791.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.5.0/24
                  193.17.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:dc:f1:9d:15:8e:37:c3:de:4c:d0:7e:65:48:26:90:7c:4f:
         13:02:49:94:41:39:ec:7c:c9:06:5e:36:4b:dc:23:4c:04:6d:
         fa:7f:4b:d4:25:d2:a7:5c:0e:85:e8:75:33:4c:c0:d8:c7:a5:
         31:53:d9:b9:9e:8f:e5:62:5d:7d:58:13:f6:43:39:55:87:ac:
         71:d8:cb:97:6b:8e:52:00:57:e1:31:9e:05:0c:db:4d:c7:df:
         ab:48:8a:32:01:d3:8a:7d:5f:e5:2e:36:5f:ba:01:8a:ee:63:
         3d:9b:87:42:eb:db:73:48:3a:f8:b8:e0:64:3a:de:d1:65:61:
         70:32:63:0b:29:b9:0c:b8:69:44:10:1b:18:88:9c:73:a1:16:
         53:a6:47:b9:1f:49:c8:60:ae:d2:35:73:cd:8a:da:75:f8:7f:
         42:f7:0b:82:27:b2:3d:85:9a:45:22:d0:c9:9d:d4:26:1c:49:
         85:2d:cc:47:94:14:37:23:c5:48:cf:56:77:aa:cd:51:ef:1c:
         53:00:ca:37:ab:46:8a:b1:ca:a1:3d:57:a8:ab:ee:bf:46:10:
         28:cb:b4:23:0c:0e:a7:65:ea:24:13:61:42:53:a9:86:fe:f3:
         9c:2a:d5:39:0f:67:4f:8d:c5:e0:ee:0a:c8:e6:c6:78:b2:6f:
         b8:5c:f7:bf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUQzoRUDzcrzTF7ux6fW06ej1jDzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNjAxMDgwNzE2NTBaFw0yNzAxMDcwNzIxNTBaMDMxMTAvBgNV
BAMTKEYyQjk3MDIwODJFMjkzRjY3QTJBNkYyQTc3NjJFNzI0QTYzQjkyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xQkEWLDOF7U5UAV3WrcjtSyq
0aCtVOi/mg9Mv5scn6Z6O/HAYGfTaxMgamrRVULSRJlaA0Pi4C/nF8UFFFP74clO
MhlMXpSQyJtpZNa4TT88Jy08o5Wp4LRr7s0DHe4DNL14zuG9URQFgmshgm9x9Sot
d31bQnyckQTGU4gYwzvR7SKPB3HWoXZDsOEa20g012Z0JwMcscw9f89CSsoTW4WP
i9SK9bKdnPvozVyn+8MkSVS+pHdSVhaqeNSTBiImmhLqDCkuYSvp47JBuOaYgBEm
NboJ2YsdNwIasnqJMAmkdmwXmP48dFTISHhvREnAqpJQR6alkxiAgTggALAlAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU8rlwIILik/Z6Km8qd2LnJKY7kpEwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNTE3OTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADBEQUD
BADBEQcwDQYJKoZIhvcNAQELBQADggEBAD7c8Z0VjjfD3kzQfmVIJpB8TxMCSZRB
Oex8yQZeNkvcI0wEbfp/S9Ql0qdcDoXodTNMwNjHpTFT2bmej+ViXX1YE/ZDOVWH
rHHYy5drjlIAV+ExngUM203H36tIijIB04p9X+UuNl+6AYruYz2bh0Lr23NIOvi4
4GQ63tFlYXAyYwspuQy4aUQQGxiInHOhFlOmR7kfSchgrtI1c82K2nX4f0L3C4In
sj2FmkUi0Mmd1CYcSYUtzEeUFDcjxUjPVneqzVHvHFMAyjerRoqxyqE9V6ir7r9G
ECjLtCMMDqdl6iQTYUJTqYb+85wq1TkPZ0+NxeDuCsjmxniyb7hc978=
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:57:01 2026 by rpki-client