This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa File: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (raw, json) Hash identifier: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8= Subject key identifier: A6:57:7E:2A:BA:D2:1F:63:B7:3D:9C:94:42:D3:FF:2A:EB:E9:FB:6B Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Certificate serial: 019B7CEE455E754BCD250C0C1BC12189B95C Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208410 IP address blocks: 212.102.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:45:5e:75:4b:cd:25:0c:0c:1b:c1:21:89:b9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6577e2abad21f63b73d9c9442d3ff2aebe9fb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:ef:8e:da:31:00:e4:a5:47:96:a1:fc:24: 1c:3a:1d:d3:a5:f9:28:1a:9a:9b:fc:5f:58:7b:b7: 75:02:63:d7:12:51:66:db:07:d8:2f:c7:b1:ed:9c: 02:d1:4a:33:f2:1e:70:22:85:dd:55:fc:39:c4:a2: b8:65:c6:24:1a:36:72:fd:6e:ea:aa:b4:09:85:ac: 97:89:0e:1c:2c:30:51:10:44:63:ed:d9:d1:ce:65: fd:e2:55:b5:3f:8c:5d:61:8e:06:64:f7:5d:80:0a: 0c:6f:c2:76:6f:c0:4b:96:4d:63:fb:70:da:1e:ba: fc:0a:f5:df:15:a2:72:0c:15:f9:9e:31:47:8f:f8: f7:9f:0d:e3:05:e3:44:e2:0d:4c:50:fa:de:dd:4d: a6:84:e0:78:2f:ec:10:a0:ee:37:f6:6e:89:6d:15: c3:f3:0a:ed:56:6e:97:eb:10:10:c5:61:31:30:ae: f4:30:7d:4b:f5:53:0b:92:5d:ac:27:f7:02:78:d8: b5:05:3c:b8:6b:0f:ec:b8:44:92:2e:8b:dd:ee:81: d3:ec:3f:ad:ef:0d:81:7b:f4:87:4e:13:59:4a:58: 3b:72:a1:3a:1f:5b:c0:00:f7:54:95:a0:0c:17:37: 42:81:fc:f0:e2:94:0a:2d:06:f5:1b:e1:e2:1b:a8: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:7E:2A:BA:D2:1F:63:B7:3D:9C:94:42:D3:FF:2A:EB:E9:FB:6B X509v3 Authority Key Identifier: keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.123.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d6:8e:a4:db:2a:2c:c1:bf:8e:c6:e1:62:fa:3f:88:04:a0: e6:af:51:07:12:97:73:2e:07:f7:f4:70:d7:e1:bf:e8:e6:f4: 71:11:84:62:87:a8:34:7e:33:2a:ba:b3:63:84:01:1a:8a:82: 92:2e:cc:82:c2:1c:39:c0:e8:d0:e1:b9:99:36:ba:01:e1:bd: 4b:d0:85:e4:74:60:8f:45:a5:61:84:e8:51:f1:1b:1a:5c:9d: 7b:4e:83:c3:95:af:60:4b:1a:ec:91:37:81:cf:2d:b6:86:bf: e7:54:10:78:de:9f:35:b9:19:a9:d9:a6:7e:68:d6:f6:96:7c: 5b:d7:17:4e:71:de:3d:2c:f2:5a:21:24:35:84:6a:9b:cc:2e: 1c:08:c2:b9:f7:0a:8b:cf:6f:05:dc:c1:cf:e6:ec:16:66:ed: d0:5e:09:74:17:a3:e2:a8:86:60:8b:20:e3:af:fc:bd:a0:96: 19:5f:f8:32:d7:d1:fd:a3:90:cd:48:99:5b:64:99:cc:1b:6f: 7e:83:fa:12:26:28:38:a9:fe:4e:5b:57:c4:30:0b:41:c3:18: e7:62:3e:bc:d9:bb:80:0f:05:1c:74:fc:03:60:58:70:76:19: 24:ea:8b:02:c4:a1:b3:5d:00:f1:83:b9:09:ea:c8:88:01:43: e0:3b:20:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kVedUvNJQwMG8EhiblcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3 YmMwYzMwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjU3N2UyYWJhZDIxZjYzYjczZDljOTQ0MmQzZmYyYWViZTlmYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD3vjtoxAOSlR5ah/CQcOh3Tpfko Gpqb/F9Ye7d1AmPXElFm2wfYL8ex7ZwC0Uoz8h5wIoXdVfw5xKK4ZcYkGjZy/W7q qrQJhayXiQ4cLDBREERj7dnRzmX94lW1P4xdYY4GZPddgAoMb8J2b8BLlk1j+3Da Hrr8CvXfFaJyDBX5njFHj/j3nw3jBeNE4g1MUPre3U2mhOB4L+wQoO439m6JbRXD 8wrtVm6X6xAQxWExMK70MH1L9VMLkl2sJ/cCeNi1BTy4aw/suESSLovd7oHT7D+t 7w2Be/SHThNZSlg7cqE6H1vAAPdUlaAMFzdCgfzw4pQKLQb1G+HiG6giuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZXfiq60h9jtz2clELT/yrr6ftrMB8GA1UdIwQY MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt MjUxMTY4ZWRkM2U0LzEvcGxkLUtyclNIMk8zUFp5VVF0UF9LdXZwLTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0 LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZ7MA0G CSqGSIb3DQEBCwUAA4IBAQCE1o6k2yoswb+OxuFi+j+IBKDmr1EHEpdzLgf39HDX 4b/o5vRxEYRih6g0fjMqurNjhAEaioKSLsyCwhw5wOjQ4bmZNroB4b1L0IXkdGCP RaVhhOhR8RsaXJ17ToPDla9gSxrskTeBzy22hr/nVBB43p81uRmp2aZ+aNb2lnxb 1xdOcd49LPJaISQ1hGqbzC4cCMK59wqLz28F3MHP5uwWZu3QXgl0F6PiqIZgiyDj r/y9oJYZX/gy19H9o5DNSJlbZJnMG29+g/oSJig4qf5OW1fEMAtBwxjnYj682buA DwUcdPwDYFhwdhkk6osCxKGzXQDxg7kJ6siIAUPgOyAt -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:41 2026 by rpki-client