This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa
File:                     QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (raw, json)
Hash identifier:          n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=
Subject key identifier:   41:C5:B0:3C:4A:5E:F8:FF:AC:70:5A:7A:8B:2E:19:77:C8:CF:7E:39
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019C32E0B430A537D65F3DF26010DCCF2D07
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa
Signing time:             Fri 06 Feb 2026 12:15:12 +0000
ROA not before:           Fri 06 Feb 2026 12:15:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3257
IP address blocks:        185.84.217.0/24 maxlen: 24
                          2a05:a882:de10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:32:e0:b4:30:a5:37:d6:5f:3d:f2:60:10:dc:cf:2d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Feb  6 12:15:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41c5b03c4a5ef8ffac705a7a8b2e1977c8cf7e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:3f:fb:55:cd:74:3a:94:64:8b:2d:6d:f0:
                    80:a3:15:8a:08:61:2b:1d:ed:d4:0d:90:dd:7c:e6:
                    10:d2:68:b4:0d:df:7d:ae:6e:cd:00:6d:fd:e6:20:
                    63:fd:06:3e:21:ca:ab:d1:02:33:8a:02:ff:35:e3:
                    ad:1b:55:34:f1:72:17:03:d6:ce:d8:d7:70:32:fd:
                    8b:91:3f:be:1f:9b:1a:0f:18:a1:7e:72:16:55:52:
                    13:7f:d5:50:af:b7:ae:c3:04:57:89:01:23:e8:56:
                    b8:30:a3:f3:28:de:40:03:d8:a5:8c:b0:7d:f7:b9:
                    d3:16:d2:1e:e3:7e:4d:76:70:9a:7b:4b:40:34:91:
                    b9:56:6c:4a:0f:8a:fb:0b:40:2e:eb:53:7f:b4:79:
                    5c:38:65:c7:ef:25:58:5c:36:e3:63:91:c2:68:60:
                    30:b0:cd:51:5b:15:d3:ee:16:6e:ac:f9:bf:86:24:
                    ea:94:c5:aa:3c:a7:63:2c:8a:8f:70:4f:e0:86:e3:
                    84:38:84:f6:6f:01:31:cb:bd:f5:2b:ac:c4:7f:b7:
                    f9:18:19:26:b3:35:4a:84:4d:12:6d:1b:09:49:b9:
                    3a:be:6c:90:3a:96:b1:b1:c2:a8:9b:8b:33:94:30:
                    ab:ee:c9:b3:5a:e5:b0:7f:f5:e0:37:0e:c0:59:0d:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:B0:3C:4A:5E:F8:FF:AC:70:5A:7A:8B:2E:19:77:C8:CF:7E:39
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.217.0/24
                IPv6:
                  2a05:a882:de10::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:88:6b:8d:a5:bb:5d:19:84:55:77:9b:40:bb:47:bc:60:dd:
         ea:d0:55:e8:74:36:7e:f3:80:c2:33:37:0f:b2:ce:86:f0:eb:
         ea:5c:25:ee:16:07:39:49:4f:40:9d:ff:a5:f9:17:17:d3:e5:
         96:d4:bc:40:82:5e:6e:18:a8:96:a5:42:67:24:8d:85:4b:31:
         9f:87:fd:0c:2b:db:b9:ab:99:ed:73:a4:5b:64:4b:60:91:b0:
         58:54:ec:b3:09:30:c7:dd:53:eb:1b:f0:b6:a3:57:dc:61:ff:
         b7:cd:9d:c6:3b:b7:55:a0:37:a1:cb:19:37:d6:a2:d3:e7:3b:
         75:e7:88:cc:0d:e2:44:d4:70:b1:91:28:bd:bf:45:51:db:fe:
         27:19:83:58:2a:b2:24:9b:2f:12:d8:7d:79:c2:73:0e:a1:c5:
         cb:8c:1d:09:a3:36:b1:53:ef:68:00:3f:9e:e2:47:a8:99:ac:
         27:23:9a:e6:fc:1f:13:8a:f9:a5:cf:ce:35:0b:1b:fe:4a:f9:
         69:84:5a:43:aa:6b:6a:85:33:75:3d:55:62:48:84:38:9a:52:
         fc:d3:6b:82:cf:8a:97:b4:f9:51:78:b7:a8:1e:1b:bd:17:27:
         13:c0:d3:93:bf:5a:68:91:36:35:38:24:31:1c:3b:20:9e:3f:
         95:86:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:32:34 2026 by rpki-client