This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa
File: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (raw, json)
Hash identifier: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=
Subject key identifier: 41:C5:B0:3C:4A:5E:F8:FF:AC:70:5A:7A:8B:2E:19:77:C8:CF:7E:39
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019C32E0B430A537D65F3DF26010DCCF2D07
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa
Signing time: Fri 06 Feb 2026 12:15:12 +0000
ROA not before: Fri 06 Feb 2026 12:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 185.84.217.0/24 maxlen: 24
2a05:a882:de10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:e0:b4:30:a5:37:d6:5f:3d:f2:60:10:dc:cf:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Feb 6 12:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41c5b03c4a5ef8ffac705a7a8b2e1977c8cf7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:3f:fb:55:cd:74:3a:94:64:8b:2d:6d:f0:
80:a3:15:8a:08:61:2b:1d:ed:d4:0d:90:dd:7c:e6:
10:d2:68:b4:0d:df:7d:ae:6e:cd:00:6d:fd:e6:20:
63:fd:06:3e:21:ca:ab:d1:02:33:8a:02:ff:35:e3:
ad:1b:55:34:f1:72:17:03:d6:ce:d8:d7:70:32:fd:
8b:91:3f:be:1f:9b:1a:0f:18:a1:7e:72:16:55:52:
13:7f:d5:50:af:b7:ae:c3:04:57:89:01:23:e8:56:
b8:30:a3:f3:28:de:40:03:d8:a5:8c:b0:7d:f7:b9:
d3:16:d2:1e:e3:7e:4d:76:70:9a:7b:4b:40:34:91:
b9:56:6c:4a:0f:8a:fb:0b:40:2e:eb:53:7f:b4:79:
5c:38:65:c7:ef:25:58:5c:36:e3:63:91:c2:68:60:
30:b0:cd:51:5b:15:d3:ee:16:6e:ac:f9:bf:86:24:
ea:94:c5:aa:3c:a7:63:2c:8a:8f:70:4f:e0:86:e3:
84:38:84:f6:6f:01:31:cb:bd:f5:2b:ac:c4:7f:b7:
f9:18:19:26:b3:35:4a:84:4d:12:6d:1b:09:49:b9:
3a:be:6c:90:3a:96:b1:b1:c2:a8:9b:8b:33:94:30:
ab:ee:c9:b3:5a:e5:b0:7f:f5:e0:37:0e:c0:59:0d:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:B0:3C:4A:5E:F8:FF:AC:70:5A:7A:8B:2E:19:77:C8:CF:7E:39
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.217.0/24
IPv6:
2a05:a882:de10::/48
Signature Algorithm: sha256WithRSAEncryption
49:88:6b:8d:a5:bb:5d:19:84:55:77:9b:40:bb:47:bc:60:dd:
ea:d0:55:e8:74:36:7e:f3:80:c2:33:37:0f:b2:ce:86:f0:eb:
ea:5c:25:ee:16:07:39:49:4f:40:9d:ff:a5:f9:17:17:d3:e5:
96:d4:bc:40:82:5e:6e:18:a8:96:a5:42:67:24:8d:85:4b:31:
9f:87:fd:0c:2b:db:b9:ab:99:ed:73:a4:5b:64:4b:60:91:b0:
58:54:ec:b3:09:30:c7:dd:53:eb:1b:f0:b6:a3:57:dc:61:ff:
b7:cd:9d:c6:3b:b7:55:a0:37:a1:cb:19:37:d6:a2:d3:e7:3b:
75:e7:88:cc:0d:e2:44:d4:70:b1:91:28:bd:bf:45:51:db:fe:
27:19:83:58:2a:b2:24:9b:2f:12:d8:7d:79:c2:73:0e:a1:c5:
cb:8c:1d:09:a3:36:b1:53:ef:68:00:3f:9e:e2:47:a8:99:ac:
27:23:9a:e6:fc:1f:13:8a:f9:a5:cf:ce:35:0b:1b:fe:4a:f9:
69:84:5a:43:aa:6b:6a:85:33:75:3d:55:62:48:84:38:9a:52:
fc:d3:6b:82:cf:8a:97:b4:f9:51:78:b7:a8:1e:1b:bd:17:27:
13:c0:d3:93:bf:5a:68:91:36:35:38:24:31:1c:3b:20:9e:3f:
95:86:5f:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZwy4LQwpTfWXz3yYBDczy0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj
MmE5NmIwHhcNMjYwMjA2MTIxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWM1YjAzYzRhNWVmOGZmYWM3MDVhN2E4YjJlMTk3N2M4Y2Y3ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9M/+1XNdDqUZIstbfCAoxWKCGEr
He3UDZDdfOYQ0mi0Dd99rm7NAG395iBj/QY+Icqr0QIzigL/NeOtG1U08XIXA9bO
2NdwMv2LkT++H5saDxihfnIWVVITf9VQr7euwwRXiQEj6Fa4MKPzKN5AA9iljLB9
97nTFtIe435NdnCae0tANJG5VmxKD4r7C0Au61N/tHlcOGXH7yVYXDbjY5HCaGAw
sM1RWxXT7hZurPm/hiTqlMWqPKdjLIqPcE/ghuOEOIT2bwExy731K6zEf7f5GBkm
szVKhE0SbRsJSbk6vmyQOpaxscKom4szlDCr7smzWuWwf/XgNw7AWQ2UEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEHFsDxKXvj/rHBaeosuGXfIz345MB8GA1UdIwQY
MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt
NjA4NGNmYzZlNGM0LzEvUWNXd1BFcGUtUC1zY0ZwNml5NFpkOGpQZmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0
LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVTZMA8E
AgACMAkDBwAqBaiC3hAwDQYJKoZIhvcNAQELBQADggEBAEmIa42lu10ZhFV3m0C7
R7xg3erQVeh0Nn7zgMIzNw+yzobw6+pcJe4WBzlJT0Cd/6X5FxfT5ZbUvECCXm4Y
qJalQmckjYVLMZ+H/Qwr27mrme1zpFtkS2CRsFhU7LMJMMfdU+sb8LajV9xh/7fN
ncY7t1WgN6HLGTfWotPnO3XniMwN4kTUcLGRKL2/RVHb/icZg1gqsiSbLxLYfXnC
cw6hxcuMHQmjNrFT72gAP57iR6iZrCcjmub8HxOK+aXPzjULG/5K+WmEWkOqa2qF
M3U9VWJIhDiaUvzTa4LPipe0+VF4t6geG70XJxPA05O/WmiRNjU4JDEcOyCeP5WG
X2Q=
-----END CERTIFICATE-----
Generated at Sun Feb 8 00:32:34 2026 by rpki-client