This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208915.roa
File: AS208915.roa (raw, json)
Hash identifier: dGU6RaexXXtd2hND6znnLec4U9c19vMgSj7ncFG448U=
Subject key identifier: 36:E2:88:3E:C8:14:63:3C:31:C5:54:7E:EE:E9:C9:D3:07:B4:2D:C4
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 2A16B51812F25D162AEA86763241FF70BF65FE73
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa
Signing time: Sat 13 Dec 2025 16:07:39 +0000
ROA not before: Sat 13 Dec 2025 16:02:39 +0000
ROA not after: Sat 12 Dec 2026 16:07:39 +0000
asID: 208915
IP address blocks: 2a0f:6284:700::/40 maxlen: 40
2a0f:6284:701::/48 maxlen: 48
2a0f:6284:702::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:16:b5:18:12:f2:5d:16:2a:ea:86:76:32:41:ff:70:bf:65:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 13 16:02:39 2025 GMT
Not After : Dec 12 16:07:39 2026 GMT
Subject: CN=36E2883EC814633C31C5547EEEE9C9D307B42DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:ce:55:bf:10:62:3d:ea:0b:f9:69:50:8d:
8d:d2:51:30:69:89:ef:24:19:22:9c:65:01:10:01:
36:89:9c:0f:ed:38:87:75:e3:ea:95:67:83:af:be:
00:3b:54:70:60:b7:67:67:ab:ac:27:d2:51:5d:92:
d3:9a:97:74:59:77:5e:31:d3:5f:90:dd:bb:3b:cf:
ab:1a:b6:62:2c:0e:c6:0b:b7:8b:4c:2e:a1:48:ea:
af:79:c3:67:e3:fd:7a:8b:a6:f2:d3:5f:7f:54:3d:
ec:ae:61:ca:43:0a:c1:73:57:b0:39:40:9e:5a:7a:
7a:2c:7d:fd:c0:09:6d:0a:c3:28:de:0e:31:0f:fa:
bf:eb:5f:35:56:0b:9f:4d:65:5e:b5:a0:81:f2:cd:
8a:a2:4b:d1:fd:70:b4:cb:83:40:77:67:7c:b9:1e:
e3:f3:3e:34:a1:b7:dc:a1:d3:4c:36:34:5a:b8:4e:
6f:91:ed:b4:a7:72:75:7a:d6:ce:24:bd:90:9f:b9:
38:e2:b2:89:fa:af:5d:c8:63:36:19:67:dc:ec:6f:
c0:1a:32:43:52:e5:70:c4:04:e3:e2:b3:16:45:5f:
fe:ab:36:d3:6a:7e:18:26:7b:70:0d:dd:e9:c0:61:
e4:7f:32:cd:05:95:01:fe:fa:f4:13:44:8d:27:ff:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:88:3E:C8:14:63:3C:31:C5:54:7E:EE:E9:C9:D3:07:B4:2D:C4
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:700::/40
Signature Algorithm: sha256WithRSAEncryption
59:88:fd:83:0a:b2:63:bc:b6:83:80:7f:d6:ba:76:d6:9e:9f:
d1:28:69:48:48:06:35:be:30:a8:1a:49:32:63:12:e5:b6:ee:
de:a9:9e:94:42:c9:1d:4e:f3:88:b6:2c:79:1e:06:0c:0f:22:
ce:8b:e2:54:d2:30:36:f6:00:c7:84:89:8f:2c:82:5f:cd:47:
67:3b:d4:1a:49:b0:52:91:a0:1b:1d:e8:77:c4:ee:d4:c4:3b:
40:cd:ed:a2:ef:ff:c9:e4:31:b2:28:c7:ec:42:ff:b8:ab:02:
54:9b:34:df:60:f5:a1:7d:48:c1:18:04:b8:a3:04:a0:a5:35:
c5:56:fd:12:81:18:d6:e2:61:83:bd:50:c6:a1:c7:09:50:55:
aa:57:11:52:16:84:80:32:3b:ec:ef:c9:96:42:b4:2f:cb:2a:
28:cb:2a:37:9f:ae:b9:8d:9e:bb:4d:72:26:ef:78:0d:6c:a2:
55:f9:f4:54:19:59:20:99:12:1f:8b:37:a7:97:a8:3e:0b:33:
cc:25:6e:b8:6d:e9:d3:17:e7:3e:77:2f:1e:4b:96:10:83:ce:
94:af:7c:84:41:03:ff:ff:a2:75:7e:0f:c5:56:1d:e7:e5:12:
d9:b3:95:c8:96:6f:b4:a0:37:0a:b0:f6:fb:10:e9:9b:fa:86:
07:03:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:32:57 2025 by rpki-client