This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214299.roa
File: AS214299.roa (raw, json)
Hash identifier: M7JpzRv0AQHSJtgfPBE4tBLRHV0GFvmRp2uY1iuaqnk=
Subject key identifier: 67:FD:83:A2:31:82:E8:F7:05:62:44:0F:45:A1:E6:06:12:7C:E2:A9
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 08E4DBE08376BB5184227BC6932BE792DF5C8A17
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa
Signing time: Sat 20 Dec 2025 19:48:06 +0000
ROA not before: Sat 20 Dec 2025 19:43:06 +0000
ROA not after: Sat 19 Dec 2026 19:48:06 +0000
asID: 214299
IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52
2a05:dfc3:fd40::/48 maxlen: 48
2a09:54c7:1000::/48 maxlen: 48
2a0f:6284:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e4:db:e0:83:76:bb:51:84:22:7b:c6:93:2b:e7:92:df:5c:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 20 19:43:06 2025 GMT
Not After : Dec 19 19:48:06 2026 GMT
Subject: CN=67FD83A23182E8F70562440F45A1E606127CE2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:aa:0c:05:c0:fd:86:c1:11:14:aa:ef:bc:
55:15:b2:5c:b3:4c:1c:c0:1f:55:e3:55:26:29:5c:
68:e5:e2:40:b2:6d:1c:58:dc:88:22:35:df:af:35:
c1:2a:32:16:6a:49:ae:6b:90:36:bf:ba:5e:b9:79:
ea:63:26:69:d5:0d:5b:28:6e:a3:22:1c:a9:4a:ce:
b7:48:5a:64:a0:0b:52:c3:10:19:ca:a4:2b:fc:b3:
4a:88:ba:05:40:08:47:d2:ba:5f:14:f0:1e:fd:4a:
80:1b:97:66:62:40:1d:2f:03:6a:bd:fb:54:d0:15:
87:f6:f7:c5:39:78:55:64:cb:d3:85:04:9f:7a:3d:
81:59:8b:49:37:3f:62:d0:90:cb:bb:20:7b:33:09:
46:a2:39:68:73:ab:bf:78:79:a8:25:31:df:65:ef:
f5:d3:53:16:12:ff:a1:19:18:09:2d:de:f6:a6:68:
f1:1d:27:84:80:2b:71:4c:b3:b0:28:a5:e9:fb:36:
86:7e:2b:6f:9a:f7:26:f7:61:95:37:e6:13:9b:80:
fc:81:13:2b:db:63:63:89:3f:d3:a7:ac:76:48:b0:
aa:fa:d9:91:15:3f:ba:b7:5e:09:2d:3a:ac:2d:f7:
d8:ef:c7:13:43:ad:22:8f:38:6d:1c:ae:ab:79:84:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:83:A2:31:82:E8:F7:05:62:44:0F:45:A1:E6:06:12:7C:E2:A9
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd40::/44
2a09:54c7:1000::/48
2a0f:6284:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6b:d8:5f:f7:f8:cf:26:64:c5:c9:1c:33:b0:c3:08:64:36:99:
0e:17:bb:f0:bc:af:2e:37:09:b6:f8:ab:25:ec:ac:c9:ca:c1:
f8:32:9f:24:07:68:4c:de:f2:01:1d:9d:87:14:79:94:ca:04:
c5:64:8f:85:19:d0:f5:13:89:b1:36:8d:a8:28:8e:b5:8c:d8:
99:1c:7d:e0:c4:c2:c9:09:ea:bf:d7:8b:2a:b5:45:fc:8d:bd:
b4:47:c6:e9:9d:24:7c:1f:8d:00:0a:a5:aa:05:80:cc:ce:4c:
7b:68:e6:a9:c1:11:bf:fa:ba:cf:a8:13:3e:c9:b5:ee:8f:4e:
69:2d:bd:44:f9:dd:4e:b9:e0:a5:04:6b:9f:41:c9:a6:14:79:
c1:d1:fd:a6:c8:35:9b:af:88:07:5c:57:17:58:ec:5a:1b:d1:
09:18:4d:e7:56:b2:e9:e3:4f:f5:1c:cb:c8:ab:83:9f:88:e3:
bc:25:0d:c8:39:88:61:49:5e:9e:55:b6:2e:af:29:af:be:85:
c0:e3:59:63:73:06:c2:51:5d:c9:0a:b4:55:6c:17:4b:71:47:
81:42:03:2d:e1:7f:d5:59:2b:f9:4b:6f:9c:c5:34:43:6d:f3:
c6:3c:e6:7a:7f:26:0d:e7:de:91:3a:4f:69:da:7f:13:ff:6b:
e4:64:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:45 2025 by rpki-client