This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa
File:                     AS48011.roa (raw, json)
Hash identifier:          Vybuz1RBGVy6/+25CylyyNGqIoMgmgnM89o94px/iS8=
Subject key identifier:   CD:09:DF:EE:D9:A9:50:F4:13:9B:52:37:7D:B1:D7:31:1D:AE:8E:B3
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       50C4A64A42FEFE3330C94986BDE92FDD3C847713
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa
Signing time:             Mon 05 Jan 2026 19:55:33 +0000
ROA not before:           Mon 05 Jan 2026 19:50:33 +0000
ROA not after:            Mon 04 Jan 2027 19:55:33 +0000
asID:                     48011
IP address blocks:        5.133.124.0/23 maxlen: 23
                          5.133.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c4:a6:4a:42:fe:fe:33:30:c9:49:86:bd:e9:2f:dd:3c:84:77:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan  5 19:50:33 2026 GMT
            Not After : Jan  4 19:55:33 2027 GMT
        Subject: CN=CD09DFEED9A950F4139B52377DB1D7311DAE8EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:d4:c0:c1:a0:00:c1:db:bc:23:55:3d:36:
                    85:07:d5:df:15:ca:2f:50:dc:93:88:53:16:17:fd:
                    46:a9:19:f0:26:70:ee:2f:4f:3d:01:f0:90:d3:f1:
                    e9:a4:26:77:09:72:e0:85:dc:b2:ef:09:ec:d4:e1:
                    d9:16:75:6f:6d:f2:0e:70:b3:9d:f7:25:82:cb:25:
                    fa:c2:03:31:92:3a:e2:24:aa:33:55:29:33:82:79:
                    2a:ff:3c:96:9c:7a:54:cc:12:9e:38:35:73:0d:a4:
                    f2:83:62:91:c4:de:87:e6:e5:81:6c:ca:e7:a9:fb:
                    eb:f9:2e:a9:d6:4b:ba:62:40:d9:e9:52:41:56:1e:
                    c8:d9:4d:1b:3f:6d:6f:c8:57:10:ae:36:66:8e:ec:
                    f7:19:10:8b:8e:43:05:37:8f:76:ff:2e:45:28:63:
                    06:b6:88:32:cb:cf:8b:70:10:53:b6:9c:20:d9:bf:
                    06:c9:63:45:96:de:49:06:79:23:d5:04:65:16:fe:
                    3c:b4:ca:3c:e3:25:da:00:c1:dd:b4:cd:ae:0d:c0:
                    ef:be:d7:a3:bf:eb:2c:4c:f2:11:23:1e:cc:34:84:
                    1f:a9:44:cb:4c:bb:29:d2:fb:33:c4:52:f7:cd:79:
                    05:b0:ac:33:41:a2:e5:e5:36:24:92:f5:06:b9:97:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:DF:EE:D9:A9:50:F4:13:9B:52:37:7D:B1:D7:31:1D:AE:8E:B3
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:d0:45:7a:4d:4e:0d:52:e3:b0:03:f9:50:5d:6d:68:ef:
         b1:71:33:4d:a9:8b:e1:18:3d:81:4c:bd:ed:9b:b4:ae:59:ee:
         00:bd:fb:b1:49:a8:b2:4a:b1:88:5e:ec:6d:c7:03:10:6e:3b:
         34:55:30:7a:74:1c:41:b0:6a:77:e5:01:96:e2:b5:c0:c1:08:
         97:85:76:de:0d:db:b6:77:30:65:26:e3:77:32:dc:a9:86:9b:
         41:f6:5f:0b:50:70:b4:c1:5c:16:63:75:49:fb:5f:19:24:18:
         a8:2a:01:de:d5:14:ab:8a:93:f0:7c:e7:c4:71:05:3b:21:aa:
         13:0e:29:a4:9a:df:12:31:16:3e:3a:5f:dd:fd:34:d7:48:ed:
         25:38:a7:10:69:cf:02:51:c0:fd:c2:ac:87:1f:9c:81:94:51:
         b6:c6:c5:02:25:86:2b:0d:bc:cc:bc:4d:39:e6:7e:9b:f8:41:
         b7:8e:73:c7:fd:b4:d3:79:c3:1a:5e:40:55:5a:07:33:4a:b8:
         9e:00:d1:65:29:5e:60:ac:53:10:ab:06:d8:41:d8:a1:4a:b0:
         c7:be:d4:b9:4c:fc:ae:f1:cd:0c:2e:c3:fc:9e:21:cf:f9:34:
         8c:66:a4:2f:67:a2:f3:e9:50:2b:60:88:2f:1a:59:fe:d1:b4:
         b7:12:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:51 2026 by rpki-client