This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          fYRIP4/t3JJv/tAEtRbjaixl/ncapuyAkk3v6p+AaEo=
Subject key identifier:   7E:97:A2:CF:DF:50:DA:31:07:1D:B9:1A:89:9D:9A:9D:DD:19:38:86
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       3353B756C2C9F58DC70969B18A40C1ED51AC01F0
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa
Signing time:             Mon 12 Jan 2026 14:32:51 +0000
ROA not before:           Mon 12 Jan 2026 14:27:51 +0000
ROA not after:            Mon 11 Jan 2027 14:32:51 +0000
asID:                     51019
IP address blocks:        160.202.134.0/24 maxlen: 24
                          2a07:54c4:175c::/48 maxlen: 48
                          2a07:54c4:175d::/48 maxlen: 48
                          2a07:54c4:175e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:b7:56:c2:c9:f5:8d:c7:09:69:b1:8a:40:c1:ed:51:ac:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jan 12 14:27:51 2026 GMT
            Not After : Jan 11 14:32:51 2027 GMT
        Subject: CN=7E97A2CFDF50DA31071DB91A899D9A9DDD193886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:49:0a:4c:5d:3d:99:89:0b:67:6a:83:6b:
                    3a:95:4a:c8:19:84:06:ec:8a:03:3a:46:9d:b2:73:
                    10:d8:7a:96:17:ea:c4:62:8c:14:f5:d5:7a:b0:77:
                    4b:0e:f7:97:96:b6:08:b5:c5:19:7e:90:20:6f:a6:
                    7a:1a:d4:8c:c4:29:a5:df:83:00:00:4a:cf:0f:69:
                    b2:c1:00:2f:fa:01:53:76:30:fa:5b:be:c0:1b:6b:
                    b5:c1:fa:c5:6a:11:c9:99:bc:f8:a2:6c:d2:8c:4f:
                    1b:76:db:25:fb:e4:5e:76:52:3e:d4:93:57:a2:43:
                    67:30:4e:09:68:61:0e:79:b4:b2:40:7a:e4:19:08:
                    6c:d9:8e:33:34:5f:39:ff:7a:3a:6b:6c:f6:16:13:
                    ec:78:d8:e3:be:60:c3:d0:36:46:9e:79:ae:97:3a:
                    9c:92:9d:f9:37:a6:e1:a9:87:08:31:8f:51:a1:ee:
                    df:0a:47:46:59:9b:52:c4:8a:db:09:08:43:a5:b4:
                    2f:b9:13:66:62:22:a6:a8:7a:d3:96:e1:5a:6f:44:
                    21:0a:87:ae:2f:10:a4:7d:8e:44:58:a4:5d:90:66:
                    e3:45:f3:63:6e:e7:05:83:91:63:95:be:29:76:cf:
                    e8:60:c9:fe:87:36:e0:7f:e7:b7:33:1b:9b:03:29:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:A2:CF:DF:50:DA:31:07:1D:B9:1A:89:9D:9A:9D:DD:19:38:86
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.134.0/24
                IPv6:
                  2a07:54c4:175c::-2a07:54c4:175e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:27:b0:fa:2a:ed:2a:7c:d7:39:ed:68:ab:25:f1:5a:eb:
         f5:f7:28:b2:96:af:e5:8c:6f:0a:a1:89:7e:65:9d:45:d8:fa:
         39:e1:00:36:54:0b:46:a7:8c:aa:45:95:8b:b2:0d:e0:bd:85:
         c3:17:75:a2:e2:a1:64:2e:6d:35:20:c4:97:28:a3:5a:4d:9a:
         02:04:af:39:58:6e:60:68:33:42:cc:55:90:f9:49:4b:53:cf:
         b1:04:4e:b6:da:4e:6a:37:61:b2:ef:62:ad:8e:2f:d5:a3:9b:
         a0:a3:b6:8b:32:be:bd:8b:e2:c2:a0:e1:ba:ae:c1:11:6b:92:
         dc:c0:e9:15:13:4a:83:72:d3:ba:10:bb:6a:b9:f6:e6:b2:fe:
         ab:db:4e:0c:aa:08:ed:f3:7b:19:3a:6b:e6:c5:09:15:ec:74:
         2f:80:82:55:5e:cc:91:86:b7:22:f2:57:8e:61:fb:7e:6a:22:
         1c:59:55:64:2e:42:27:6e:5f:3d:5e:11:30:ee:3e:a1:17:6a:
         ee:8c:33:77:f2:e1:2b:90:29:36:c5:4c:7f:c4:6b:41:f1:04:
         5b:64:68:43:7b:32:d6:f6:61:a0:80:c3:74:2d:42:60:cb:98:
         ea:a0:4d:06:0f:d9:bd:19:0f:01:7a:09:aa:69:5d:e7:43:e9:
         ab:00:2e:bc
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUM1O3VsLJ9Y3HCWmxikDB7VGsAfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjAxMTIxNDI3NTFaFw0yNzAxMTExNDMyNTFaMDMxMTAvBgNV
BAMTKDdFOTdBMkNGREY1MERBMzEwNzFEQjkxQTg5OUQ5QTlEREQxOTM4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GkkKTF09mYkLZ2qDazqVSsgZ
hAbsigM6Rp2ycxDYepYX6sRijBT11Xqwd0sO95eWtgi1xRl+kCBvpnoa1IzEKaXf
gwAASs8PabLBAC/6AVN2MPpbvsAba7XB+sVqEcmZvPiibNKMTxt22yX75F52Uj7U
k1eiQ2cwTgloYQ55tLJAeuQZCGzZjjM0Xzn/ejprbPYWE+x42OO+YMPQNkaeea6X
OpySnfk3puGphwgxj1Gh7t8KR0ZZm1LEitsJCEOltC+5E2ZiIqaoetOW4VpvRCEK
h64vEKR9jkRYpF2QZuNF82Nu5wWDkWOVvil2z+hgyf6HNuB/57czG5sDKbZVAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUfpeiz99Q2jEHHbkaiZ2and0ZOIYwHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTEwMTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMAwEAgABMAYDBACgyoYw
GgQCAAIwFDASAwcCKgdUxBdcAwcAKgdUxBdeMA0GCSqGSIb3DQEBCwUAA4IBAQCW
oSew+irtKnzXOe1oqyXxWuv19yiylq/ljG8KoYl+ZZ1F2Po54QA2VAtGp4yqRZWL
sg3gvYXDF3Wi4qFkLm01IMSXKKNaTZoCBK85WG5gaDNCzFWQ+UlLU8+xBE622k5q
N2Gy72Ktji/Vo5ugo7aLMr69i+LCoOG6rsERa5LcwOkVE0qDctO6ELtqufbmsv6r
204Mqgjt83sZOmvmxQkV7HQvgIJVXsyRhrci8leOYft+aiIcWVVkLkInbl89XhEw
7j6hF2rujDN38uErkCk2xUx/xGtB8QRbZGhDezLW9mGggMN0LUJgy5jqoE0GD9m9
GQ8BegmqaV3nQ+mrAC68
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:25 2026 by rpki-client