This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WhP1rzyaT9bkXwN2djcokg0P7kE.roa
File: WhP1rzyaT9bkXwN2djcokg0P7kE.roa (raw, json)
Hash identifier: rF3xmazxG58oQX+UXBPdaTTkT+kZ/vkpUP4kLmVMCks=
Subject key identifier: 5A:13:F5:AF:3C:9A:4F:D6:E4:5F:03:76:76:37:28:92:0D:0F:EE:41
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019B7E37C9A5F1A2F17B8CC2BCF71B77BC36
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WhP1rzyaT9bkXwN2djcokg0P7kE.roa
Signing time: Fri 02 Jan 2026 10:19:03 +0000
ROA not before: Fri 02 Jan 2026 10:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:c9:a5:f1:a2:f1:7b:8c:c2:bc:f7:1b:77:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 2 10:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a13f5af3c9a4fd6e45f0376763728920d0fee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:98:e7:f9:2f:7c:81:b1:ae:2c:74:aa:86:
e8:d4:6d:01:46:6f:20:bb:69:ee:5e:ad:af:79:a8:
7f:1a:80:35:8e:03:26:96:b2:3a:7b:a2:1d:22:5b:
aa:fe:df:ee:5a:3f:d8:fc:c6:24:c5:8a:c5:6a:13:
10:96:56:db:c8:5d:82:18:e7:c5:9a:98:bd:dd:a6:
55:d7:c4:62:45:bf:b3:cb:97:ea:58:d3:b5:68:b9:
23:87:0f:03:9a:f7:cc:00:e7:dc:d4:83:ca:dc:e2:
38:86:dc:98:8b:8f:bd:3b:da:03:81:b9:6d:60:f9:
99:cc:dd:43:13:81:7b:00:3e:5f:f9:7a:86:4e:2c:
4b:7e:a1:b0:5a:92:42:53:2e:63:67:1b:17:08:47:
df:a5:1c:83:1e:a3:7d:f0:d7:71:07:94:44:8e:44:
12:f4:9c:43:28:b9:5f:e7:fd:d0:a0:dd:ee:20:a4:
6e:03:d1:23:53:64:8a:95:3f:8b:87:79:37:92:95:
20:64:c3:a6:7c:47:6f:2b:9e:97:17:b8:ee:13:3e:
a3:9c:f9:ca:64:7c:e6:4f:20:2a:6e:a4:fa:15:66:
2b:a5:53:1b:c6:9c:29:a2:03:de:09:ac:1d:64:7e:
6e:2b:75:6c:0c:eb:ee:15:ed:8e:a5:59:12:e8:f7:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:F5:AF:3C:9A:4F:D6:E4:5F:03:76:76:37:28:92:0D:0F:EE:41
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WhP1rzyaT9bkXwN2djcokg0P7kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f7:12:6d:cf:93:76:bb:0a:41:cf:85:28:e2:4a:88:b1:17:
28:17:09:8c:97:22:cb:da:e7:53:06:f4:81:0d:55:96:20:29:
e5:4a:1f:7d:6c:19:b6:57:22:af:9e:22:a4:be:62:cc:6d:c0:
a5:f0:3e:3c:3b:57:d8:ea:ad:de:be:9f:22:3c:d8:69:c2:d0:
51:2d:fe:6c:fc:23:36:63:c9:83:5f:48:ce:7a:36:63:9a:b7:
c7:d9:95:88:31:01:f1:24:3c:5a:89:ed:c2:ab:12:92:2b:a3:
4b:ff:31:4f:70:37:d8:fc:38:6b:c5:83:eb:5e:52:fc:df:ae:
7a:e5:63:3e:35:02:db:97:36:5d:94:5f:4d:fd:14:e9:bc:84:
ab:4d:59:55:3e:a5:29:72:21:58:e4:e0:f1:0b:dc:37:d1:df:
40:45:36:ac:f9:67:fb:5e:c4:09:d1:0e:75:88:98:44:82:16:
a2:7e:46:36:ce:5a:f4:b4:fc:ae:e2:cf:64:a9:bc:68:a0:ba:
01:14:e1:4d:94:68:49:70:80:8e:bd:d1:00:4d:22:2d:1e:41:
72:97:21:cd:e9:69:2f:86:28:de:62:78:da:8e:ff:90:03:a2:
cd:09:a0:68:09:c0:ec:42:9b:55:1d:4f:66:83:3f:4f:72:60:
3c:86:f1:0c
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgISAZt+N8ml8aLxe4zCvPcbd7w2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMTAyMTAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTEzZjVhZjNjOWE0ZmQ2ZTQ1ZjAzNzY3NjM3Mjg5MjBkMGZlZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFqY5/kvfIGxrix0qobo1G0BRm8g
u2nuXq2veah/GoA1jgMmlrI6e6IdIluq/t/uWj/Y/MYkxYrFahMQllbbyF2CGOfF
mpi93aZV18RiRb+zy5fqWNO1aLkjhw8DmvfMAOfc1IPK3OI4htyYi4+9O9oDgblt
YPmZzN1DE4F7AD5f+XqGTixLfqGwWpJCUy5jZxsXCEffpRyDHqN98NdxB5REjkQS
9JxDKLlf5/3QoN3uIKRuA9EjU2SKlT+Lh3k3kpUgZMOmfEdvK56XF7juEz6jnPnK
ZHzmTyAqbqT6FWYrpVMbxpwpogPeCawdZH5uK3VsDOvuFe2OpVkS6PdAsQIDAQAB
o4IDsTCCA60wHQYDVR0OBBYEFFoT9a88mk/W5F8DdnY3KJIND+5BMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvV2hQMXJ6eWFUOWJrWHdOMmRqY29rZzBQN2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxQYIKwYBBQUHAQcBAf8EggG0MIIBsDCCAawEAgABMIIB
pAMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQAPqmEAwQBPqmGMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVFf
MgMEA1FfOAMEAVQz6gMEAVwz6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUD
BANnPcAwDAMEAGd9TQMEBGd9QAMEAWfSxgMEAmfV1AMEAWf/TAMEApsCsDAMAwQB
mwK2AwQAmwK8AwQBmwLCAwQAmwLUMAwDBACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC
3gMEAZ6thgMEAp6tjDAMAwQDnq2YAwQAnq2eAwQBp6AQAwQAp6AdMAwDBACqPlkD
BAWqPkADBACqPmQDBAGqPmYwDAMEAao+agMEAKo+bAMEAao+bgMEAKo+oDAMAwQF
qj7gAwQBqj7sAwQCuSJsAwQAwP3QAwQBxjccAwQAy7ykAwQAy7ynMAwDBADLvKkD
BADLvKoDBADLvKwDBADUODIwDAMEANRO9QMEAtRO+AMEANX+rjANBgkqhkiG9w0B
AQsFAAOCAQEAe/cSbc+TdrsKQc+FKOJKiLEXKBcJjJciy9rnUwb0gQ1VliAp5Uof
fWwZtlcir54ipL5izG3ApfA+PDtX2Oqt3r6fIjzYacLQUS3+bPwjNmPJg19Izno2
Y5q3x9mViDEB8SQ8WontwqsSkiujS/8xT3A32Pw4a8WD615S/N+ueuVjPjUC25c2
XZRfTf0U6byEq01ZVT6lKXIhWOTg8QvcN9HfQEU2rPln+17ECdEOdYiYRIIWon5G
Ns5a9LT8ruLPZKm8aKC6ARThTZRoSXCAjr3RAE0iLR5BcpchzelpL4Yo3mJ42o7/
kAOizQmgaAnA7EKbVR1PZoM/T3JgPIbxDA==
-----END CERTIFICATE-----
Generated at Fri Jan 23 04:39:20 2026 by rpki-client