This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Klar462pF_C7Uti8GK6IYP2krDE.roa File: Klar462pF_C7Uti8GK6IYP2krDE.roa (raw, json) Hash identifier: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8= Subject key identifier: 2A:56:AB:E3:AD:A9:17:F0:BB:52:D8:BC:18:AE:88:60:FD:A4:AC:31 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A3A1FA78D91A1BA0980977E68802 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Klar462pF_C7Uti8GK6IYP2krDE.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 213.220.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:a1:fa:78:d9:1a:1b:a0:98:09:77:e6:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a56abe3ada917f0bb52d8bc18ae8860fda4ac31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:34:ec:2d:b9:fd:f1:e5:1e:a6:47:9a:30: ca:28:b9:57:85:fc:da:42:51:24:83:08:4f:54:81: d7:76:b1:5e:f1:b7:bb:a1:d1:24:75:4d:08:01:2a: 52:a3:81:2c:a0:23:1c:e5:ee:bc:9d:1c:fc:b5:d4: 8f:c8:50:4b:d0:50:b8:61:a5:e8:b1:fd:43:c3:f5: ac:2d:4e:21:6f:3b:5d:73:94:71:e0:90:7c:e8:0c: 31:3d:96:30:b1:1b:95:34:12:1b:ad:cf:95:11:70: ab:57:8b:47:40:a0:7e:08:ea:d3:22:50:f6:db:8b: d2:b4:ec:b7:6e:86:c9:c5:81:39:89:1d:06:ca:9a: f5:7b:18:71:40:0b:4d:00:2f:35:aa:73:ab:de:c3: d1:07:04:e3:9e:f0:c7:12:a6:50:6d:79:e4:1a:18: 1d:5f:3b:5b:70:47:34:9b:e5:5d:34:f2:86:7b:65: 9e:6e:f5:d9:4d:3e:10:22:1b:a7:85:9c:5c:65:59: 97:9f:62:85:98:40:29:61:40:0a:21:03:68:34:19: 88:a9:52:29:1d:31:ff:e0:b7:dd:ee:ab:6b:9e:b0: f1:95:97:91:89:1c:f9:6a:6b:fa:f4:f3:43:ae:27: 33:f6:2e:19:bf:72:8d:3d:cb:56:c2:f7:d4:7e:ff: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:56:AB:E3:AD:A9:17:F0:BB:52:D8:BC:18:AE:88:60:FD:A4:AC:31 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Klar462pF_C7Uti8GK6IYP2krDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.5.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:f8:d1:c0:75:ad:97:8d:75:29:60:b0:77:62:76:62:b0:82: b6:80:93:e6:43:0e:74:ef:b8:5a:b5:f6:47:55:f0:ea:38:d0: 0c:3d:52:e9:41:3d:76:df:8b:ef:30:8a:e0:8d:9e:b7:89:43: 8c:6b:0c:ea:82:41:df:a1:08:79:a5:47:9e:9c:9b:22:c3:9c: 94:d2:5c:40:09:b5:cb:0f:02:9b:58:cf:ce:7a:3b:b3:4b:33: 3d:6b:f3:06:4b:fe:60:54:2f:8e:dd:cb:d0:1d:a1:93:4b:a0: dd:58:4c:df:32:65:a3:54:0a:aa:d4:5a:a3:74:1d:c5:f7:e7: b7:c7:05:b9:88:95:3c:9a:a2:a1:43:1e:52:e0:c5:4c:90:70: 36:98:18:ed:eb:d0:bd:a7:5d:c3:d8:17:d4:11:d0:c3:b7:f0: 0a:47:45:67:ab:8d:80:3d:c4:6e:44:ec:cb:e7:98:c3:75:0d: bb:48:dc:47:6c:98:9f:c1:7c:9a:3a:73:99:7e:00:35:4f:32: 63:a2:20:ea:ff:2d:9e:e1:b1:1a:f6:4d:4a:7b:22:e8:8b:7d: ac:46:c4:81:e0:57:6c:13:38:f0:75:ff:6a:15:3e:74:01:5f: 43:db:63:59:79:2b:88:16:27:cb:89:1f:aa:28:4a:8d:70:e1: a1:a7:64:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKOh+njZGhugmAl35ogCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTU2YWJlM2FkYTkxN2YwYmI1MmQ4YmMxOGFlODg2MGZkYTRhYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79s07C25/fHlHqZHmjDKKLlXhfza QlEkgwhPVIHXdrFe8be7odEkdU0IASpSo4EsoCMc5e68nRz8tdSPyFBL0FC4YaXo sf1Dw/WsLU4hbztdc5Rx4JB86AwxPZYwsRuVNBIbrc+VEXCrV4tHQKB+COrTIlD2 24vStOy3bobJxYE5iR0Gypr1exhxQAtNAC81qnOr3sPRBwTjnvDHEqZQbXnkGhgd XztbcEc0m+VdNPKGe2WebvXZTT4QIhunhZxcZVmXn2KFmEApYUAKIQNoNBmIqVIp HTH/4Lfd7qtrnrDxlZeRiRz5amv69PNDricz9i4Zv3KNPctWwvfUfv9ftwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCpWq+OtqRfwu1LYvBiuiGD9pKwxMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvS2xhcjQ2MnBGX0M3VXRpOEdLNklZUDJrckRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dwFMA0G CSqGSIb3DQEBCwUAA4IBAQBO+NHAda2XjXUpYLB3YnZisIK2gJPmQw5077hatfZH VfDqONAMPVLpQT1234vvMIrgjZ63iUOMawzqgkHfoQh5pUeenJsiw5yU0lxACbXL DwKbWM/OejuzSzM9a/MGS/5gVC+O3cvQHaGTS6DdWEzfMmWjVAqq1FqjdB3F9+e3 xwW5iJU8mqKhQx5S4MVMkHA2mBjt69C9p13D2BfUEdDDt/AKR0Vnq42APcRuROzL 55jDdQ27SNxHbJifwXyaOnOZfgA1TzJjoiDq/y2e4bEa9k1KeyLoi32sRsSB4Fds Ezjwdf9qFT50AV9D22NZeSuIFifLiR+qKEqNcOGhp2Sj -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client