This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sflx_C0NTLGDBGXbovVvVoJubd0.roa File: sflx_C0NTLGDBGXbovVvVoJubd0.roa (raw, json) Hash identifier: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A= Subject key identifier: B1:F9:71:FC:2D:0D:4C:B1:83:04:65:DB:A2:F5:6F:56:82:6E:6D:DD Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B7EA5463837E391C65773D6650CADEF6C Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sflx_C0NTLGDBGXbovVvVoJubd0.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49999 IP address blocks: 45.140.192.0/24 maxlen: 24 45.140.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:46:38:37:e3:91:c6:57:73:d6:65:0c:ad:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1f971fc2d0d4cb1830465dba2f56f56826e6ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:d4:4b:77:58:65:34:8a:0a:46:11:46:16: 06:87:fd:e9:f2:ce:95:73:81:6b:6e:30:b1:db:56: 61:c3:de:90:a2:c1:ff:a8:02:40:4e:10:51:4c:39: c2:24:4b:d1:ab:9b:21:9b:61:57:bb:54:77:31:6f: ff:99:e7:8b:10:23:60:9c:a6:e8:40:51:65:e2:d9: 6a:14:a4:73:fd:49:49:13:fb:c2:71:39:d8:58:5d: d6:b2:ff:d0:fc:52:fc:98:43:f8:1d:eb:cf:ba:32: 9e:20:b8:85:3e:10:d0:67:44:38:a1:f7:3d:d9:b2: 48:da:b5:51:76:09:78:70:ee:16:bb:5e:fa:41:e9: c0:88:d1:27:e5:02:84:fb:ff:37:7a:cc:63:bc:7b: 74:d3:7a:a9:24:26:f4:b4:88:a2:c0:cf:d6:90:2c: 80:45:ce:7e:d9:31:da:99:c3:00:bf:a6:bb:70:50: 6a:38:32:d8:6e:39:d4:b9:f0:c3:ac:87:94:15:13: 26:32:13:26:f0:98:5f:4f:cd:31:14:08:15:0d:c7: 15:15:0d:53:cf:ff:fc:6d:a3:fe:75:66:de:cb:44: 00:c4:2e:88:0b:10:d9:15:af:2d:44:6a:ae:ef:21: 4e:d8:ac:81:54:95:a7:0d:48:aa:70:77:28:03:ed: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F9:71:FC:2D:0D:4C:B1:83:04:65:DB:A2:F5:6F:56:82:6E:6D:DD X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/sflx_C0NTLGDBGXbovVvVoJubd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.192.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:10:26:c9:dc:cd:02:ca:fb:ec:09:9e:13:d9:ac:55:a7:0c: e6:92:e3:7c:4b:ca:01:bf:4d:36:8d:75:62:41:a9:95:61:2a: 8f:7d:c8:35:d0:89:10:f1:de:5f:0b:eb:17:15:f5:18:c3:76: a1:8a:51:97:59:75:99:e9:9d:0a:70:69:77:b3:fb:3a:d0:05: db:96:86:09:83:b3:62:4b:44:18:ee:df:bd:2a:ca:73:a4:c5: 6b:30:9e:3a:4f:13:cd:70:6e:e8:84:e0:fc:ec:76:65:2e:c8: 24:42:78:67:c1:2a:55:ac:01:b4:a7:d1:64:cf:0e:86:db:68: 30:9d:58:b9:ab:07:34:e8:6b:3d:bd:fe:02:97:ab:7d:1c:5a: 08:a4:dd:84:81:e3:2c:27:4c:a2:9b:8f:55:ff:e0:34:7d:c3: 85:13:59:d0:01:09:ca:ed:a2:d3:e8:61:30:14:d8:09:57:89: 1d:9c:43:27:ef:35:a1:0c:1a:90:a2:cd:e9:c4:43:5a:64:98: 0b:7e:13:e1:46:45:74:2d:ae:b6:38:fa:9f:67:7a:f3:6f:35: eb:ca:0b:24:19:f2:5a:a9:e6:ea:e5:a2:6f:d9:49:ad:fa:ee: fc:e5:03:8e:99:7b:dd:88:9b:52:d0:90:44:61:f0:84:87:95: 9f:a5:3f:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUY4N+ORxldz1mUMre9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWY5NzFmYzJkMGQ0Y2IxODMwNDY1ZGJhMmY1NmY1NjgyNmU2ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/US3dYZTSKCkYRRhYGh/3p8s6V c4FrbjCx21Zhw96QosH/qAJAThBRTDnCJEvRq5shm2FXu1R3MW//meeLECNgnKbo QFFl4tlqFKRz/UlJE/vCcTnYWF3Wsv/Q/FL8mEP4HevPujKeILiFPhDQZ0Q4ofc9 2bJI2rVRdgl4cO4Wu176QenAiNEn5QKE+/83esxjvHt003qpJCb0tIiiwM/WkCyA Rc5+2THamcMAv6a7cFBqODLYbjnUufDDrIeUFRMmMhMm8JhfT80xFAgVDccVFQ1T z//8baP+dWbey0QAxC6ICxDZFa8tRGqu7yFO2KyBVJWnDUiqcHcoA+1b5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLH5cfwtDUyxgwRl26L1b1aCbm3dMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvc2ZseF9DME5UTEdEQkdYYm92VnZWb0p1YmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYzAMA0G CSqGSIb3DQEBCwUAA4IBAQBvECbJ3M0CyvvsCZ4T2axVpwzmkuN8S8oBv002jXVi QamVYSqPfcg10IkQ8d5fC+sXFfUYw3ahilGXWXWZ6Z0KcGl3s/s60AXbloYJg7Ni S0QY7t+9KspzpMVrMJ46TxPNcG7ohOD87HZlLsgkQnhnwSpVrAG0p9Fkzw6G22gw nVi5qwc06Gs9vf4Cl6t9HFoIpN2EgeMsJ0yim49V/+A0fcOFE1nQAQnK7aLT6GEw FNgJV4kdnEMn7zWhDBqQos3pxENaZJgLfhPhRkV0La62OPqfZ3rzbzXrygskGfJa qebq5aJv2Umt+u785QOOmXvdiJtS0JBEYfCEh5WfpT9p -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:49 2026 by rpki-client