This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS47377.roa
File:                     AS47377.roa (raw, json)
Hash identifier:          tBfdfQudhNcPqPMgiveZsIOSa99JK7CgycKDEmA/ub8=
Subject key identifier:   51:1B:80:E5:74:5A:C3:1D:5F:9F:A9:FC:C2:9B:90:CC:0B:27:18:0B
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       53E017A6377BE15095968BB0D9E8DF20D05552C6
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS47377.roa
Signing time:             Thu 08 Jan 2026 11:00:25 +0000
ROA not before:           Thu 08 Jan 2026 10:55:25 +0000
ROA not after:            Thu 07 Jan 2027 11:00:25 +0000
asID:                     47377
IP address blocks:        83.171.247.0/24 maxlen: 24
                          188.119.70.0/24 maxlen: 24
                          193.32.186.0/24 maxlen: 24
                          193.32.187.0/24 maxlen: 24
                          193.32.206.0/24 maxlen: 24
                          193.187.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e0:17:a6:37:7b:e1:50:95:96:8b:b0:d9:e8:df:20:d0:55:52:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan  8 10:55:25 2026 GMT
            Not After : Jan  7 11:00:25 2027 GMT
        Subject: CN=511B80E5745AC31D5F9FA9FCC29B90CC0B27180B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:e0:14:e5:dd:86:f0:0b:b1:16:8f:7e:52:
                    d4:92:4a:7e:6d:9a:0d:e3:05:e5:0c:a0:6e:10:33:
                    65:8d:81:32:32:0d:d4:d9:6a:23:5f:43:d2:96:5b:
                    f3:d8:dd:e2:c7:79:c4:d5:0e:4c:62:73:df:ae:d1:
                    ec:05:3f:eb:73:77:7e:c3:5c:30:96:08:fc:e8:fe:
                    fb:3d:3a:b1:6c:cf:8d:8c:bd:69:85:1a:cb:e1:84:
                    1f:e3:fe:71:2a:2c:09:cf:66:b1:f7:0b:4f:03:85:
                    00:d3:88:e4:5c:ae:1e:4f:ed:ab:fd:43:1f:7c:47:
                    92:fb:19:49:7d:d7:5a:f3:85:e8:ca:4b:db:ca:dc:
                    eb:80:e3:3d:a2:a8:d9:28:4a:aa:d4:76:b1:63:8e:
                    f7:ef:69:83:36:7c:e3:57:e7:f5:39:92:fe:3d:d5:
                    b7:bd:4b:6d:c5:37:f1:13:7d:0d:39:a9:b2:64:be:
                    bd:bf:59:c2:56:0e:17:dc:32:6a:45:69:f6:05:f1:
                    e5:68:cb:93:85:94:ca:7f:7e:5e:a2:21:53:6f:f4:
                    73:8d:7b:98:66:da:2d:c6:02:04:b3:f7:40:21:f5:
                    82:87:fd:63:d1:55:14:9e:65:44:ce:f9:d8:43:c2:
                    89:bd:5d:71:fe:de:49:d7:5c:6f:67:fa:b9:3e:a5:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1B:80:E5:74:5A:C3:1D:5F:9F:A9:FC:C2:9B:90:CC:0B:27:18:0B
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS47377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.247.0/24
                  188.119.70.0/24
                  193.32.186.0/23
                  193.32.206.0/24
                  193.187.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:04:98:ea:b1:5b:74:51:98:b4:48:63:d4:14:d1:33:1d:
         83:f7:42:35:c2:fa:d1:2c:fc:81:c0:d6:30:5f:ff:e8:97:ce:
         a4:88:67:e0:d8:a2:9c:a1:3c:8a:d3:6c:ee:9b:2b:cb:e3:ce:
         43:07:4e:5e:06:ff:3e:12:e0:b6:58:51:6f:78:d8:4a:24:8a:
         a4:2a:44:48:a0:21:49:61:74:af:35:dc:1a:16:0d:20:08:4a:
         eb:3f:60:18:40:68:02:23:37:7a:7f:7f:03:e0:9d:61:7f:dc:
         76:6e:dc:ad:c2:b8:6c:3f:6b:e7:ea:60:90:89:f3:2a:e1:4e:
         90:93:21:18:16:27:dc:f4:f4:c2:f5:8d:c2:90:b9:37:c2:89:
         00:da:e8:e2:08:e1:a5:9d:6c:73:02:25:30:ed:4a:31:30:21:
         e2:da:25:26:6a:af:c5:50:46:54:1a:87:c9:9f:38:bd:5d:3c:
         e0:95:e2:af:f3:23:1e:75:ac:5c:92:52:ac:db:0e:0e:04:98:
         f7:bd:54:02:5c:cf:69:6b:ac:26:6b:35:db:f2:34:1c:62:2a:
         6a:65:c4:90:b5:c9:5d:c0:c4:24:01:4c:ee:6c:fa:e4:3a:f3:
         ff:12:9b:20:72:03:e2:e4:15:75:ce:28:09:29:ea:95:dc:b1:
         12:8e:61:44
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUU+AXpjd74VCVlouw2ejfINBVUsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNjAxMDgxMDU1MjVaFw0yNzAxMDcxMTAwMjVaMDMxMTAvBgNV
BAMTKDUxMUI4MEU1NzQ1QUMzMUQ1RjlGQTlGQ0MyOUI5MENDMEIyNzE4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc2eAU5d2G8AuxFo9+UtSSSn5t
mg3jBeUMoG4QM2WNgTIyDdTZaiNfQ9KWW/PY3eLHecTVDkxic9+u0ewFP+tzd37D
XDCWCPzo/vs9OrFsz42MvWmFGsvhhB/j/nEqLAnPZrH3C08DhQDTiORcrh5P7av9
Qx98R5L7GUl911rzhejKS9vK3OuA4z2iqNkoSqrUdrFjjvfvaYM2fONX5/U5kv49
1be9S23FN/ETfQ05qbJkvr2/WcJWDhfcMmpFafYF8eVoy5OFlMp/fl6iIVNv9HON
e5hm2i3GAgSz90Ah9YKH/WPRVRSeZUTO+dhDwom9XXH+3knXXG9n+rk+pcoXAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUURuA5XRawx1fn6n8wpuQzAsnGAswHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNDczNzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABTq/cD
BAC8d0YDBAHBILoDBADBIM4DBADBu4cwDQYJKoZIhvcNAQELBQADggEBAD+ZBJjq
sVt0UZi0SGPUFNEzHYP3QjXC+tEs/IHA1jBf/+iXzqSIZ+DYopyhPIrTbO6bK8vj
zkMHTl4G/z4S4LZYUW942EokiqQqREigIUlhdK813BoWDSAISus/YBhAaAIjN3p/
fwPgnWF/3HZu3K3CuGw/a+fqYJCJ8yrhTpCTIRgWJ9z09ML1jcKQuTfCiQDa6OII
4aWdbHMCJTDtSjEwIeLaJSZqr8VQRlQah8mfOL1dPOCV4q/zIx51rFySUqzbDg4E
mPe9VAJcz2lrrCZrNdvyNBxiKmplxJC1yV3AxCQBTO5s+uQ68/8SmyByA+LkFXXO
KAkp6pXcsRKOYUQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:30 2026 by rpki-client