This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa
File:                     jq3mq-50R-JOu-sxSGPaEm55e08.roa (raw, json)
Hash identifier:          taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=
Subject key identifier:   8E:AD:E6:AB:EE:74:47:E2:4E:BB:EB:31:48:63:DA:12:6E:79:7B:4F
Certificate issuer:       /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial:       019B797DF5952CB6ED72367FC18FFCDF2A74
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa
Signing time:             Thu 01 Jan 2026 12:17:36 +0000
ROA not before:           Thu 01 Jan 2026 12:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25374
IP address blocks:        93.183.128.0/18 maxlen: 18
                          93.183.128.0/24 maxlen: 24
                          93.183.129.0/24 maxlen: 24
                          93.183.130.0/24 maxlen: 24
                          93.183.131.0/24 maxlen: 32
                          93.183.132.0/24 maxlen: 24
                          93.183.133.0/24 maxlen: 24
                          93.183.134.0/24 maxlen: 24
                          93.183.135.0/24 maxlen: 24
                          93.183.136.0/24 maxlen: 24
                          93.183.137.0/24 maxlen: 24
                          93.183.138.0/24 maxlen: 24
                          93.183.139.0/24 maxlen: 24
                          93.183.140.0/24 maxlen: 24
                          93.183.141.0/24 maxlen: 32
                          93.183.142.0/24 maxlen: 32
                          93.183.143.0/24 maxlen: 24
                          93.183.144.0/24 maxlen: 24
                          93.183.145.0/24 maxlen: 24
                          93.183.146.0/24 maxlen: 24
                          93.183.147.0/24 maxlen: 24
                          93.183.148.0/24 maxlen: 32
                          93.183.149.0/24 maxlen: 24
                          93.183.150.0/24 maxlen: 24
                          93.183.151.0/24 maxlen: 24
                          93.183.152.0/24 maxlen: 24
                          93.183.153.0/24 maxlen: 24
                          93.183.154.0/24 maxlen: 24
                          93.183.155.0/24 maxlen: 24
                          93.183.156.0/24 maxlen: 24
                          93.183.157.0/24 maxlen: 24
                          93.183.158.0/24 maxlen: 24
                          93.183.159.0/24 maxlen: 24
                          93.183.160.0/24 maxlen: 24
                          93.183.161.0/24 maxlen: 24
                          93.183.162.0/24 maxlen: 24
                          93.183.163.0/24 maxlen: 24
                          93.183.164.0/24 maxlen: 24
                          93.183.165.0/24 maxlen: 24
                          93.183.166.0/24 maxlen: 24
                          93.183.167.0/24 maxlen: 24
                          93.183.168.0/24 maxlen: 24
                          93.183.169.0/24 maxlen: 24
                          93.183.170.0/24 maxlen: 24
                          93.183.171.0/24 maxlen: 24
                          93.183.172.0/24 maxlen: 24
                          93.183.173.0/24 maxlen: 24
                          93.183.174.0/24 maxlen: 24
                          93.183.175.0/24 maxlen: 24
                          93.183.176.0/24 maxlen: 24
                          93.183.177.0/24 maxlen: 24
                          93.183.178.0/24 maxlen: 32
                          93.183.179.0/24 maxlen: 24
                          93.183.180.0/24 maxlen: 32
                          93.183.181.0/24 maxlen: 24
                          93.183.182.0/24 maxlen: 24
                          93.183.183.0/24 maxlen: 24
                          93.183.184.0/24 maxlen: 24
                          93.183.185.0/24 maxlen: 24
                          93.183.186.0/24 maxlen: 24
                          93.183.187.0/24 maxlen: 24
                          93.183.188.0/24 maxlen: 24
                          93.183.189.0/24 maxlen: 24
                          93.183.190.0/24 maxlen: 24
                          93.183.191.0/24 maxlen: 24
                          109.199.224.0/19 maxlen: 19
                          109.199.224.0/24 maxlen: 24
                          109.199.225.0/24 maxlen: 24
                          109.199.226.0/24 maxlen: 24
                          109.199.227.0/24 maxlen: 24
                          109.199.228.0/24 maxlen: 24
                          109.199.229.0/24 maxlen: 24
                          109.199.230.0/24 maxlen: 24
                          109.199.231.0/24 maxlen: 24
                          109.199.232.0/24 maxlen: 24
                          109.199.233.0/24 maxlen: 24
                          109.199.234.0/24 maxlen: 24
                          109.199.235.0/24 maxlen: 24
                          109.199.236.0/24 maxlen: 24
                          109.199.237.0/24 maxlen: 24
                          109.199.238.0/24 maxlen: 32
                          109.199.239.0/24 maxlen: 24
                          109.199.240.0/24 maxlen: 24
                          109.199.241.0/24 maxlen: 24
                          109.199.242.0/24 maxlen: 24
                          109.199.243.0/24 maxlen: 24
                          109.199.244.0/24 maxlen: 24
                          109.199.245.0/24 maxlen: 24
                          109.199.246.0/24 maxlen: 24
                          109.199.247.0/24 maxlen: 24
                          109.199.248.0/24 maxlen: 24
                          109.199.249.0/24 maxlen: 24
                          109.199.250.0/24 maxlen: 24
                          109.199.251.0/24 maxlen: 32
                          109.199.252.0/24 maxlen: 24
                          109.199.253.0/24 maxlen: 24
                          109.199.254.0/24 maxlen: 24
                          109.199.255.0/24 maxlen: 24
                          185.2.208.0/22 maxlen: 22
                          185.2.208.0/24 maxlen: 24
                          185.2.209.0/24 maxlen: 24
                          185.2.210.0/24 maxlen: 24
                          185.2.211.0/24 maxlen: 24
                          195.24.88.0/21 maxlen: 21
                          195.24.88.0/24 maxlen: 24
                          195.24.89.0/24 maxlen: 24
                          195.24.90.0/24 maxlen: 24
                          195.24.91.0/24 maxlen: 24
                          195.24.92.0/24 maxlen: 24
                          195.24.93.0/24 maxlen: 24
                          195.24.94.0/24 maxlen: 24
                          195.24.95.0/24 maxlen: 24
                          195.39.212.0/23 maxlen: 23
                          195.39.212.0/24 maxlen: 24
                          195.39.213.0/24 maxlen: 24
                          2a02:4dc0::/32 maxlen: 32
                          2a02:4dc0::/36 maxlen: 36
                          2a02:4dc0::/48 maxlen: 48
                          2a02:4dc0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:f5:95:2c:b6:ed:72:36:7f:c1:8f:fc:df:2a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
        Validity
            Not Before: Jan  1 12:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8eade6abee7447e24ebbeb314863da126e797b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:f5:5a:17:56:44:b9:99:a2:6a:37:de:7f:
                    ce:46:6e:1e:a4:c9:36:02:2d:04:a4:42:b7:96:25:
                    4b:48:5f:0e:84:fe:38:b0:0e:28:04:ca:0d:05:da:
                    36:db:d7:90:3d:0a:b9:d6:dc:4f:9c:59:98:c9:c6:
                    cf:a5:43:e5:f7:30:d2:b4:95:06:c2:27:8e:69:b2:
                    8a:96:48:aa:70:f6:10:ac:b3:ea:ba:e1:4d:3e:fe:
                    92:ac:09:13:61:ef:21:69:7c:8f:86:f2:f9:86:19:
                    67:c1:89:b4:df:fb:50:99:06:a1:c5:ef:74:04:b5:
                    97:52:18:d8:48:3b:4a:4d:03:8f:a6:97:0d:17:37:
                    f7:d5:65:4e:c8:62:47:86:f9:8f:57:dd:50:6e:b7:
                    68:4c:bf:a0:f7:37:84:22:50:8e:7d:4f:3f:4f:59:
                    e3:15:74:53:cd:38:c0:e2:ff:85:b8:ae:37:91:bc:
                    fe:e1:e6:4e:a8:f5:f5:ea:db:c5:59:90:3d:47:a6:
                    d1:1e:92:e3:7d:c3:b3:65:80:d5:49:9c:4b:37:5b:
                    d9:41:de:78:08:c7:5f:e3:7b:ff:66:cd:ce:46:83:
                    b9:a9:47:d3:b5:be:9d:f6:01:05:60:2d:5f:92:b2:
                    9e:d7:09:34:6e:04:af:a9:de:ff:45:83:45:da:8d:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:E6:AB:EE:74:47:E2:4E:BB:EB:31:48:63:DA:12:6E:79:7B:4F
            X509v3 Authority Key Identifier:
                keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/jq3mq-50R-JOu-sxSGPaEm55e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.183.128.0/18
                  109.199.224.0/19
                  185.2.208.0/22
                  195.24.88.0/21
                  195.39.212.0/23
                IPv6:
                  2a02:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:75:6d:f7:ba:6b:10:0a:15:40:29:34:3d:11:8e:cc:64:
         41:54:53:d0:0a:b8:af:f9:16:1c:e5:20:c6:dd:e8:cc:e9:44:
         cf:60:3c:25:db:06:4a:80:55:1f:42:75:70:2e:3d:f5:03:4b:
         b4:d5:55:45:36:96:92:54:52:45:99:f8:ca:3d:ab:2d:9f:1f:
         21:79:d8:9a:ae:42:b9:d3:64:4c:3b:fb:9d:1b:2f:b8:1a:a8:
         1d:a4:85:bf:e7:de:bc:cc:b7:ff:a1:1e:9f:a9:b1:ab:7a:25:
         1c:ee:17:eb:18:c8:9d:41:db:bb:43:aa:66:22:bb:1f:7b:27:
         f3:b3:fb:25:2f:77:1a:82:ef:b6:b6:dc:0b:aa:2d:49:43:73:
         5e:9d:bf:4b:db:e2:0a:9c:48:49:3b:5e:7e:a0:13:7b:44:e8:
         69:4d:46:bc:69:e3:2b:a9:f0:ca:72:33:f2:ca:2c:91:5f:bd:
         04:be:53:57:2d:af:3b:56:ce:1f:50:66:02:69:47:b5:68:d6:
         d1:f8:dd:31:64:62:aa:6d:be:36:d4:2a:85:44:31:52:af:a0:
         58:b6:f7:bf:95:f3:73:6e:36:15:7d:11:51:4e:16:85:6f:96:
         90:3d:ba:46:c3:48:7d:c6:1f:2a:ad:4f:13:ee:1c:e5:25:2e:
         00:50:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:33:44 2026 by rpki-client