This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
File:                     AS44547.roa (raw, json)
Hash identifier:          qJFycBjGAL7FwSpfejjEAjlsgw2EUUDxaRqHDKbD/FI=
Subject key identifier:   40:D0:4A:F1:FB:2D:38:32:ED:4B:5F:6E:CC:00:3B:46:31:5F:B0:A3
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       7670D0DFBC8B80B598FCC82A674C9BF25CA1F767
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
Signing time:             Fri 07 Nov 2025 10:33:28 +0000
ROA not before:           Fri 07 Nov 2025 10:28:28 +0000
ROA not after:            Fri 06 Nov 2026 10:33:28 +0000
asID:                     44547
IP address blocks:        37.221.76.0/24 maxlen: 24
                          37.221.77.0/24 maxlen: 24
                          92.249.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:d0:df:bc:8b:80:b5:98:fc:c8:2a:67:4c:9b:f2:5c:a1:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Nov  7 10:28:28 2025 GMT
            Not After : Nov  6 10:33:28 2026 GMT
        Subject: CN=40D04AF1FB2D3832ED4B5F6ECC003B46315FB0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:33:f7:66:4e:b5:ce:c1:fd:26:40:53:e7:
                    ba:eb:74:33:ca:89:50:f2:c8:00:d5:a5:78:40:78:
                    98:97:17:45:aa:4a:72:4d:70:8b:c6:c7:3b:b1:1f:
                    2c:bb:d5:cc:55:27:03:a4:aa:12:47:8f:7c:fd:8d:
                    ce:f0:c2:90:7b:19:66:5f:5b:d9:f0:ed:84:49:58:
                    df:99:1a:a5:50:dc:32:3b:51:cb:c8:e8:a6:c5:2d:
                    14:ac:3d:34:4d:3f:b3:4a:1a:a2:99:17:a8:91:ab:
                    45:0f:85:4e:0f:fe:96:d2:2f:a0:de:a3:5c:80:0c:
                    8e:2b:6f:d7:46:b2:66:94:55:52:a8:d6:49:48:c8:
                    14:fa:96:e4:c0:30:73:4d:f1:e1:d4:df:b3:f7:ca:
                    fc:7b:9c:d7:63:88:f1:15:f1:24:bb:55:73:ab:68:
                    20:ba:0b:53:55:07:94:d0:67:8c:39:87:7a:ee:92:
                    fe:07:ec:fe:d5:82:f7:17:00:2e:37:7c:24:9e:b0:
                    b8:f5:a4:ea:e4:3f:82:4c:0e:e5:39:42:e5:ea:96:
                    48:c7:43:52:1b:f5:2d:e4:8f:9b:05:10:c5:c4:f2:
                    ee:e6:08:66:b9:58:40:de:de:9a:ee:ea:33:78:21:
                    c7:35:24:7a:c4:e1:94:71:66:b8:b2:fd:df:2f:ad:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D0:4A:F1:FB:2D:38:32:ED:4B:5F:6E:CC:00:3B:46:31:5F:B0:A3
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.76.0/23
                  92.249.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:91:7e:d0:bf:6c:a8:35:af:a2:0b:95:ba:2f:b7:57:85:31:
         fd:da:f0:b1:ba:65:e9:ce:cf:cb:70:ba:28:4d:d5:d7:e6:a9:
         46:62:87:ba:a1:2f:93:25:b9:64:16:72:ef:de:0c:8e:b8:0a:
         a3:bd:b9:f2:8e:2c:f9:20:5e:19:5c:ef:e3:f5:aa:22:2f:30:
         92:5d:e7:61:b0:3d:0f:45:8e:7c:93:69:b1:61:97:14:8b:e5:
         e8:c9:58:c1:7a:c6:c8:f2:47:62:c0:f3:eb:cd:2f:bb:7e:6a:
         ed:41:6d:bd:54:b3:4b:b8:73:9b:71:92:b9:cd:31:65:79:13:
         a8:61:81:87:73:e1:c6:6f:68:b6:bd:6a:32:ca:b9:18:26:a8:
         4f:ad:55:ca:f4:7f:ce:85:2a:1f:9c:fa:c6:6d:63:4b:44:fb:
         b4:08:42:34:27:b0:89:cb:06:20:5d:7d:15:a3:32:33:59:d7:
         ce:d2:a3:5f:3d:87:f1:4e:60:58:bb:1e:e8:ea:2d:e6:c5:4a:
         4c:8e:0b:5f:71:2e:31:3d:e9:ea:23:da:35:0b:fe:3d:04:b5:
         05:75:9e:cb:2a:41:59:01:01:c7:6a:d3:ca:1d:1b:13:19:77:
         8d:a2:4a:db:25:87:0a:5a:ae:cd:c3:ce:0c:63:93:d6:e1:a8:
         a5:65:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:59 2025 by rpki-client