This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51852.roa
File:                     AS51852.roa (raw, json)
Hash identifier:          xSPUgc9TM1lDvtup/xS8AoyH8faReNGh4TAerfH/V6g=
Subject key identifier:   68:7B:E3:56:98:93:27:5E:42:F3:5F:60:2F:64:D3:1E:F3:3E:21:E9
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       49C5DF270AAA7DEA085E54B90AD99AC9234527FA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51852.roa
Signing time:             Thu 13 Nov 2025 00:28:24 +0000
ROA not before:           Thu 13 Nov 2025 00:23:24 +0000
ROA not after:            Thu 12 Nov 2026 00:28:24 +0000
asID:                     51852
IP address blocks:        92.113.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Nov 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:df:27:0a:aa:7d:ea:08:5e:54:b9:0a:d9:9a:c9:23:45:27:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 13 00:23:24 2025 GMT
            Not After : Nov 12 00:28:24 2026 GMT
        Subject: CN=687BE3569893275E42F35F602F64D31EF33E21E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:9b:ee:c7:9d:04:27:56:01:8e:ed:e5:a9:
                    e9:8f:0b:12:7e:21:22:2f:2b:ff:75:df:c0:e1:f0:
                    2b:ca:4f:9e:7b:d1:4f:22:a3:3c:27:42:ff:cd:75:
                    ea:47:62:95:a4:3b:73:09:57:5e:04:89:47:49:3e:
                    04:c8:a5:fe:21:86:38:61:51:5d:29:7e:66:99:04:
                    35:4d:b5:88:3a:54:2f:a6:e4:36:60:78:3a:92:09:
                    e8:85:07:9d:87:d9:64:bf:17:58:31:1b:1d:7b:53:
                    78:42:ea:60:b5:d6:39:d3:72:1e:c8:a9:ae:20:3a:
                    79:5b:fc:52:c9:73:14:15:24:bb:1c:5d:e2:98:08:
                    4c:73:13:4f:16:93:9f:f6:76:ad:46:56:22:e0:96:
                    96:03:bc:ee:7d:74:a0:2a:e4:1f:ca:63:d7:8a:1a:
                    93:81:f9:21:d8:93:a7:66:fd:11:30:09:ff:bd:c5:
                    04:ba:48:d8:0e:8b:d4:cd:80:d7:22:3f:18:9e:b5:
                    8f:c0:ce:a0:82:88:2d:08:93:50:64:4d:89:4a:9d:
                    00:52:89:a1:a2:96:d0:ab:11:45:f8:27:35:4a:41:
                    aa:3a:05:32:cc:68:57:45:84:cf:0e:be:d8:89:fb:
                    ac:86:85:dd:7c:54:2a:31:e6:00:32:66:a1:24:1b:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:E3:56:98:93:27:5E:42:F3:5F:60:2F:64:D3:1E:F3:3E:21:E9
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:bd:eb:38:26:2f:19:bf:5c:dc:db:56:3a:a2:f7:ba:37:
         0f:eb:7d:3a:c5:c3:8a:23:95:d8:bb:16:2d:4c:dd:81:93:3c:
         20:66:13:0f:16:e7:9b:13:e9:da:5b:fb:d1:2e:15:59:24:b5:
         46:a6:25:94:fa:2d:c7:a4:ec:1b:63:26:8c:aa:d6:94:7d:70:
         3e:1b:48:65:96:c0:ab:11:ed:17:b1:56:f8:0e:ba:12:47:88:
         fb:07:05:18:ce:39:b2:9a:9c:37:1b:78:ac:4a:43:d0:05:f7:
         d2:82:cc:e6:ed:c3:fe:a7:0a:9c:f6:b8:15:5f:86:d7:06:44:
         61:79:af:ca:55:8c:10:4f:26:1f:01:ee:d5:75:2b:95:2c:83:
         e3:a7:81:99:1c:b9:1a:5e:ae:cd:b0:dd:3d:ce:4c:c9:67:fd:
         14:19:d0:c2:a4:12:d5:51:2e:83:c3:14:73:92:68:51:69:44:
         03:b8:fd:65:7c:8e:71:6f:d1:51:fc:36:5a:37:3c:46:46:bd:
         a1:e3:a1:a0:1e:45:bb:fd:1e:5a:46:db:bb:9e:2a:95:39:9e:
         a4:ba:da:ab:5c:cf:f5:77:a7:d5:c4:7f:6d:6f:c0:ad:25:8d:
         80:fe:cd:bd:13:ff:57:49:f7:1a:bf:00:de:1f:c9:36:4b:a1:
         12:ad:81:6f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUScXfJwqqfeoIXlS5CtmaySNFJ/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTExMTMwMDIzMjRaFw0yNjExMTIwMDI4MjRaMDMxMTAvBgNV
BAMTKDY4N0JFMzU2OTg5MzI3NUU0MkYzNUY2MDJGNjREMzFFRjMzRTIxRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUZvux50EJ1YBju3lqemPCxJ+
ISIvK/9138Dh8CvKT5570U8iozwnQv/NdepHYpWkO3MJV14EiUdJPgTIpf4hhjhh
UV0pfmaZBDVNtYg6VC+m5DZgeDqSCeiFB52H2WS/F1gxGx17U3hC6mC11jnTch7I
qa4gOnlb/FLJcxQVJLscXeKYCExzE08Wk5/2dq1GViLglpYDvO59dKAq5B/KY9eK
GpOB+SHYk6dm/REwCf+9xQS6SNgOi9TNgNciPxietY/AzqCCiC0Ik1BkTYlKnQBS
iaGiltCrEUX4JzVKQao6BTLMaFdFhM8OvtiJ+6yGhd18VCox5gAyZqEkGx7pAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUaHvjVpiTJ15C819gL2TTHvM+IekwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTE4NTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABcceMw
DQYJKoZIhvcNAQELBQADggEBAGjFves4Ji8Zv1zc21Y6ove6Nw/rfTrFw4ojldi7
Fi1M3YGTPCBmEw8W55sT6dpb+9EuFVkktUamJZT6Lcek7BtjJoyq1pR9cD4bSGWW
wKsR7RexVvgOuhJHiPsHBRjOObKanDcbeKxKQ9AF99KCzObtw/6nCpz2uBVfhtcG
RGF5r8pVjBBPJh8B7tV1K5Usg+OngZkcuRpers2w3T3OTMln/RQZ0MKkEtVRLoPD
FHOSaFFpRAO4/WV8jnFv0VH8Nlo3PEZGvaHjoaAeRbv9HlpG27ueKpU5nqS62qtc
z/V3p9XEf21vwK0ljYD+zb0T/1dJ9xq/AN4fyTZLoRKtgW8=
-----END CERTIFICATE-----
Generated at Tue Nov 18 16:38:41 2025 by rpki-client