This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/fkXF0PUhEAWisKtRHR-GAF1e_HU.roa File: fkXF0PUhEAWisKtRHR-GAF1e_HU.roa (raw, json) Hash identifier: RCFEekK0DmAiSwdyY0Msx63FTAgjydQrcYldw9jfJCo= Subject key identifier: 7E:45:C5:D0:F5:21:10:05:A2:B0:AB:51:1D:1F:86:00:5D:5E:FC:75 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B037E097B9ACA4E31A5DE703EAB9BB495 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/fkXF0PUhEAWisKtRHR-GAF1e_HU.roa Signing time: Tue 09 Dec 2025 14:22:30 +0000 ROA not before: Tue 09 Dec 2025 14:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200185 IP address blocks: 86.105.48.0/21 maxlen: 24 89.36.216.0/22 maxlen: 24 89.40.116.0/22 maxlen: 24 89.40.124.0/22 maxlen: 24 94.177.224.0/21 maxlen: 24 94.177.244.0/22 maxlen: 24 185.12.176.0/22 maxlen: 24 194.182.104.0/22 maxlen: 24 217.61.0.0/21 maxlen: 24 217.61.104.0/21 maxlen: 24 2a03:a140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:7e:09:7b:9a:ca:4e:31:a5:de:70:3e:ab:9b:b4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Dec 9 14:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e45c5d0f5211005a2b0ab511d1f86005d5efc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:cf:10:02:f0:67:62:34:27:de:c7:c9:3e: 80:6f:9b:3d:17:c0:8a:fc:f0:c9:17:b8:3c:da:35: 05:a2:96:7d:33:62:1f:21:b8:56:67:21:00:f6:09: 15:26:59:4c:fd:7f:e7:b7:94:ac:c2:35:83:7c:2b: 0d:d2:9a:2f:b2:d5:eb:6d:04:b9:28:e2:75:4e:f6: 0d:e7:a3:15:00:35:e5:3a:f1:fb:3c:18:9e:c1:36: 80:4a:ad:e3:13:14:df:57:c2:9e:c1:81:5a:d5:8a: ed:39:2c:70:98:cb:18:2d:a0:c9:6a:67:24:65:1e: 43:e0:ae:93:2a:c0:78:68:95:9d:e6:fc:a8:c5:1f: 8c:9b:e4:a9:d5:71:20:63:5f:08:51:64:2f:b5:54: d1:28:99:72:10:c7:6c:28:92:7b:56:2f:8c:cf:b8: b8:f5:84:1b:1b:e8:d7:06:53:54:99:5c:25:cc:10: 1f:72:3c:06:63:f6:03:c4:1c:46:67:15:47:00:7b: d7:6e:48:1f:6a:9a:5e:b2:05:d9:69:48:b4:2f:42: 89:7c:f8:01:e8:41:0f:dc:5e:fc:50:4a:53:da:92: 97:65:d1:3c:3c:ff:c3:af:ab:8b:24:4e:28:3f:ba: b6:75:47:93:bb:94:bf:ad:01:77:a9:ae:82:c4:4b: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:C5:D0:F5:21:10:05:A2:B0:AB:51:1D:1F:86:00:5D:5E:FC:75 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/fkXF0PUhEAWisKtRHR-GAF1e_HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.48.0/21 89.36.216.0/22 89.40.116.0/22 89.40.124.0/22 94.177.224.0/21 94.177.244.0/22 185.12.176.0/22 194.182.104.0/22 217.61.0.0/21 217.61.104.0/21 IPv6: 2a03:a140::/32 Signature Algorithm: sha256WithRSAEncryption a8:53:59:0e:3a:74:5b:c2:f3:f9:3e:b6:85:72:79:58:67:db: 60:b3:4e:90:f9:10:f2:fd:ec:ff:22:5d:b7:6c:00:71:b0:fc: 29:ce:fc:c1:9d:38:b4:5f:37:0d:7c:83:05:a2:c3:c6:1c:6f: e0:a7:06:04:41:89:0a:7e:d8:17:c9:c4:72:61:ba:65:10:7d: e4:5e:ba:27:1d:47:02:8b:05:44:49:ed:59:58:57:5d:1a:ea: 63:c0:67:7c:44:91:13:f1:af:a3:b1:d3:de:34:c1:32:81:16: 87:08:0c:c1:f7:36:69:be:db:e6:dc:47:dc:42:e4:ba:b1:ab: 61:30:5e:c9:f3:07:cc:58:5c:27:cf:90:02:a7:0b:7c:0b:ad: 85:45:a1:8b:37:80:3e:e3:2d:6a:bd:db:08:cc:f1:64:7f:1b: c3:9f:d0:f4:96:d6:bf:1e:75:ae:92:50:2e:a0:3c:ca:a1:b7: f7:42:4a:b5:28:06:9e:5a:02:de:13:5f:7d:88:21:83:41:df: 06:fd:41:b3:ab:a8:09:2c:75:1e:d0:45:93:6a:8c:6a:0e:44: e8:a7:38:5a:01:68:5c:49:97:2b:a8:f2:e4:a5:14:be:a1:09: a1:72:71:3a:df:35:e9:81:d9:5c:7a:81:6d:c7:78:27:28:8d: 92:34:61:f8 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZsDfgl7mspOMaXecD6rm7SVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMjA5MTQyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQ1YzVkMGY1MjExMDA1YTJiMGFiNTExZDFmODYwMDVkNWVmYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowHPEALwZ2I0J97HyT6Ab5s9F8CK /PDJF7g82jUFopZ9M2IfIbhWZyEA9gkVJllM/X/nt5SswjWDfCsN0povstXrbQS5 KOJ1TvYN56MVADXlOvH7PBiewTaASq3jExTfV8KewYFa1YrtOSxwmMsYLaDJamck ZR5D4K6TKsB4aJWd5vyoxR+Mm+Sp1XEgY18IUWQvtVTRKJlyEMdsKJJ7Vi+Mz7i4 9YQbG+jXBlNUmVwlzBAfcjwGY/YDxBxGZxVHAHvXbkgfappesgXZaUi0L0KJfPgB 6EEP3F78UEpT2pKXZdE8PP/Dr6uLJE4oP7q2dUeTu5S/rQF3qa6CxEvcywIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFH5FxdD1IRAForCrUR0fhgBdXvx1MB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvZmtYRjBQVWhFQVdpc0t0UkhSLUdBRjFlX0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDVmkwAwQC WSTYAwQCWSh0AwQCWSh8AwQDXrHgAwQCXrH0AwQCuQywAwQCwrZoAwQD2T0AAwQD 2T1oMA0EAgACMAcDBQAqA6FAMA0GCSqGSIb3DQEBCwUAA4IBAQCoU1kOOnRbwvP5 PraFcnlYZ9tgs06Q+RDy/ez/Il23bABxsPwpzvzBnTi0XzcNfIMFosPGHG/gpwYE QYkKftgXycRyYbplEH3kXronHUcCiwVESe1ZWFddGupjwGd8RJET8a+jsdPeNMEy gRaHCAzB9zZpvtvm3EfcQuS6sathMF7J8wfMWFwnz5ACpwt8C62FRaGLN4A+4y1q vdsIzPFkfxvDn9D0lta/HnWuklAuoDzKobf3Qkq1KAaeWgLeE199iCGDQd8G/UGz q6gJLHUe0EWTaoxqDkTopzhaAWhcSZcrqPLkpRS+oQmhcnE63zXpgdlceoFtx3gn KI2SNGH4 -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:35 2025 by rpki-client