This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa
File: jq3mq-50R-JOu-sxSGPaEm55e08.roa (raw, json)
Hash identifier: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=
Subject key identifier: 8E:AD:E6:AB:EE:74:47:E2:4E:BB:EB:31:48:63:DA:12:6E:79:7B:4F
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019B797DF5952CB6ED72367FC18FFCDF2A74
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa
Signing time: Thu 01 Jan 2026 12:17:36 +0000
ROA not before: Thu 01 Jan 2026 12:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25374
IP address blocks: 93.183.128.0/18 maxlen: 18
93.183.128.0/24 maxlen: 24
93.183.129.0/24 maxlen: 24
93.183.130.0/24 maxlen: 24
93.183.131.0/24 maxlen: 32
93.183.132.0/24 maxlen: 24
93.183.133.0/24 maxlen: 24
93.183.134.0/24 maxlen: 24
93.183.135.0/24 maxlen: 24
93.183.136.0/24 maxlen: 24
93.183.137.0/24 maxlen: 24
93.183.138.0/24 maxlen: 24
93.183.139.0/24 maxlen: 24
93.183.140.0/24 maxlen: 24
93.183.141.0/24 maxlen: 32
93.183.142.0/24 maxlen: 32
93.183.143.0/24 maxlen: 24
93.183.144.0/24 maxlen: 24
93.183.145.0/24 maxlen: 24
93.183.146.0/24 maxlen: 24
93.183.147.0/24 maxlen: 24
93.183.148.0/24 maxlen: 32
93.183.149.0/24 maxlen: 24
93.183.150.0/24 maxlen: 24
93.183.151.0/24 maxlen: 24
93.183.152.0/24 maxlen: 24
93.183.153.0/24 maxlen: 24
93.183.154.0/24 maxlen: 24
93.183.155.0/24 maxlen: 24
93.183.156.0/24 maxlen: 24
93.183.157.0/24 maxlen: 24
93.183.158.0/24 maxlen: 24
93.183.159.0/24 maxlen: 24
93.183.160.0/24 maxlen: 24
93.183.161.0/24 maxlen: 24
93.183.162.0/24 maxlen: 24
93.183.163.0/24 maxlen: 24
93.183.164.0/24 maxlen: 24
93.183.165.0/24 maxlen: 24
93.183.166.0/24 maxlen: 24
93.183.167.0/24 maxlen: 24
93.183.168.0/24 maxlen: 24
93.183.169.0/24 maxlen: 24
93.183.170.0/24 maxlen: 24
93.183.171.0/24 maxlen: 24
93.183.172.0/24 maxlen: 24
93.183.173.0/24 maxlen: 24
93.183.174.0/24 maxlen: 24
93.183.175.0/24 maxlen: 24
93.183.176.0/24 maxlen: 24
93.183.177.0/24 maxlen: 24
93.183.178.0/24 maxlen: 32
93.183.179.0/24 maxlen: 24
93.183.180.0/24 maxlen: 32
93.183.181.0/24 maxlen: 24
93.183.182.0/24 maxlen: 24
93.183.183.0/24 maxlen: 24
93.183.184.0/24 maxlen: 24
93.183.185.0/24 maxlen: 24
93.183.186.0/24 maxlen: 24
93.183.187.0/24 maxlen: 24
93.183.188.0/24 maxlen: 24
93.183.189.0/24 maxlen: 24
93.183.190.0/24 maxlen: 24
93.183.191.0/24 maxlen: 24
109.199.224.0/19 maxlen: 19
109.199.224.0/24 maxlen: 24
109.199.225.0/24 maxlen: 24
109.199.226.0/24 maxlen: 24
109.199.227.0/24 maxlen: 24
109.199.228.0/24 maxlen: 24
109.199.229.0/24 maxlen: 24
109.199.230.0/24 maxlen: 24
109.199.231.0/24 maxlen: 24
109.199.232.0/24 maxlen: 24
109.199.233.0/24 maxlen: 24
109.199.234.0/24 maxlen: 24
109.199.235.0/24 maxlen: 24
109.199.236.0/24 maxlen: 24
109.199.237.0/24 maxlen: 24
109.199.238.0/24 maxlen: 32
109.199.239.0/24 maxlen: 24
109.199.240.0/24 maxlen: 24
109.199.241.0/24 maxlen: 24
109.199.242.0/24 maxlen: 24
109.199.243.0/24 maxlen: 24
109.199.244.0/24 maxlen: 24
109.199.245.0/24 maxlen: 24
109.199.246.0/24 maxlen: 24
109.199.247.0/24 maxlen: 24
109.199.248.0/24 maxlen: 24
109.199.249.0/24 maxlen: 24
109.199.250.0/24 maxlen: 24
109.199.251.0/24 maxlen: 32
109.199.252.0/24 maxlen: 24
109.199.253.0/24 maxlen: 24
109.199.254.0/24 maxlen: 24
109.199.255.0/24 maxlen: 24
185.2.208.0/22 maxlen: 22
185.2.208.0/24 maxlen: 24
185.2.209.0/24 maxlen: 24
185.2.210.0/24 maxlen: 24
185.2.211.0/24 maxlen: 24
195.24.88.0/21 maxlen: 21
195.24.88.0/24 maxlen: 24
195.24.89.0/24 maxlen: 24
195.24.90.0/24 maxlen: 24
195.24.91.0/24 maxlen: 24
195.24.92.0/24 maxlen: 24
195.24.93.0/24 maxlen: 24
195.24.94.0/24 maxlen: 24
195.24.95.0/24 maxlen: 24
195.39.212.0/23 maxlen: 23
195.39.212.0/24 maxlen: 24
195.39.213.0/24 maxlen: 24
2a02:4dc0::/32 maxlen: 32
2a02:4dc0::/36 maxlen: 36
2a02:4dc0::/48 maxlen: 48
2a02:4dc0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:f5:95:2c:b6:ed:72:36:7f:c1:8f:fc:df:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jan 1 12:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eade6abee7447e24ebbeb314863da126e797b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:f5:5a:17:56:44:b9:99:a2:6a:37:de:7f:
ce:46:6e:1e:a4:c9:36:02:2d:04:a4:42:b7:96:25:
4b:48:5f:0e:84:fe:38:b0:0e:28:04:ca:0d:05:da:
36:db:d7:90:3d:0a:b9:d6:dc:4f:9c:59:98:c9:c6:
cf:a5:43:e5:f7:30:d2:b4:95:06:c2:27:8e:69:b2:
8a:96:48:aa:70:f6:10:ac:b3:ea:ba:e1:4d:3e:fe:
92:ac:09:13:61:ef:21:69:7c:8f:86:f2:f9:86:19:
67:c1:89:b4:df:fb:50:99:06:a1:c5:ef:74:04:b5:
97:52:18:d8:48:3b:4a:4d:03:8f:a6:97:0d:17:37:
f7:d5:65:4e:c8:62:47:86:f9:8f:57:dd:50:6e:b7:
68:4c:bf:a0:f7:37:84:22:50:8e:7d:4f:3f:4f:59:
e3:15:74:53:cd:38:c0:e2:ff:85:b8:ae:37:91:bc:
fe:e1:e6:4e:a8:f5:f5:ea:db:c5:59:90:3d:47:a6:
d1:1e:92:e3:7d:c3:b3:65:80:d5:49:9c:4b:37:5b:
d9:41:de:78:08:c7:5f:e3:7b:ff:66:cd:ce:46:83:
b9:a9:47:d3:b5:be:9d:f6:01:05:60:2d:5f:92:b2:
9e:d7:09:34:6e:04:af:a9:de:ff:45:83:45:da:8d:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:E6:AB:EE:74:47:E2:4E:BB:EB:31:48:63:DA:12:6E:79:7B:4F
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.128.0/18
109.199.224.0/19
185.2.208.0/22
195.24.88.0/21
195.39.212.0/23
IPv6:
2a02:4dc0::/32
Signature Algorithm: sha256WithRSAEncryption
24:3d:75:6d:f7:ba:6b:10:0a:15:40:29:34:3d:11:8e:cc:64:
41:54:53:d0:0a:b8:af:f9:16:1c:e5:20:c6:dd:e8:cc:e9:44:
cf:60:3c:25:db:06:4a:80:55:1f:42:75:70:2e:3d:f5:03:4b:
b4:d5:55:45:36:96:92:54:52:45:99:f8:ca:3d:ab:2d:9f:1f:
21:79:d8:9a:ae:42:b9:d3:64:4c:3b:fb:9d:1b:2f:b8:1a:a8:
1d:a4:85:bf:e7:de:bc:cc:b7:ff:a1:1e:9f:a9:b1:ab:7a:25:
1c:ee:17:eb:18:c8:9d:41:db:bb:43:aa:66:22:bb:1f:7b:27:
f3:b3:fb:25:2f:77:1a:82:ef:b6:b6:dc:0b:aa:2d:49:43:73:
5e:9d:bf:4b:db:e2:0a:9c:48:49:3b:5e:7e:a0:13:7b:44:e8:
69:4d:46:bc:69:e3:2b:a9:f0:ca:72:33:f2:ca:2c:91:5f:bd:
04:be:53:57:2d:af:3b:56:ce:1f:50:66:02:69:47:b5:68:d6:
d1:f8:dd:31:64:62:aa:6d:be:36:d4:2a:85:44:31:52:af:a0:
58:b6:f7:bf:95:f3:73:6e:36:15:7d:11:51:4e:16:85:6f:96:
90:3d:ba:46:c3:48:7d:c6:1f:2a:ad:4f:13:ee:1c:e5:25:2e:
00:50:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:33:44 2026 by rpki-client