This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214915.roa File: AS214915.roa (raw, json) Hash identifier: X75G4RtbnrqX/sBNXlznBKqWpS4zRSTbj49muxdGcRc= Subject key identifier: 12:0D:D5:85:F0:FC:92:4C:24:61:ED:95:27:99:7B:A8:9B:D1:46:C5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4AAF05E5CF6AA220C41AAFE2AA195D3DB3981DE1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214915.roa Signing time: Mon 08 Dec 2025 21:02:12 +0000 ROA not before: Mon 08 Dec 2025 20:57:12 +0000 ROA not after: Mon 07 Dec 2026 21:02:12 +0000 asID: 214915 IP address blocks: 2a0f:6284:c00::/40 maxlen: 40 2a0f:6284:c00::/48 maxlen: 48 2a0f:6284:4300::/40 maxlen: 40 2a0f:6284:4300::/44 maxlen: 44 2a0f:6284:4316::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:af:05:e5:cf:6a:a2:20:c4:1a:af:e2:aa:19:5d:3d:b3:98:1d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 8 20:57:12 2025 GMT Not After : Dec 7 21:02:12 2026 GMT Subject: CN=120DD585F0FC924C2461ED9527997BA89BD146C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:67:32:a2:7f:52:76:63:8c:cc:50:37:46: 82:a1:0c:9d:8c:3b:eb:da:dd:ed:29:0f:f8:fe:eb: e7:d1:9b:a8:50:6a:b9:ba:94:e0:a3:2c:5c:87:5c: f9:a7:31:10:2b:90:e1:ea:77:41:fa:10:b6:59:15: 1e:eb:55:3f:34:61:b0:43:97:09:24:9a:39:ee:98: 66:02:e2:08:4a:96:14:78:d8:fd:7d:e4:a9:bd:32: 40:59:cd:9e:99:08:14:eb:6d:48:61:5e:35:6d:30: a9:a7:db:09:ff:89:f0:86:79:e2:7d:64:06:c3:b2: 9a:bc:95:59:a1:b4:c9:e1:87:f5:95:e3:f4:82:71: 28:6f:94:f3:ca:a6:6c:03:0c:7c:87:55:83:9e:b3: 7b:f5:51:50:c1:67:96:9c:ec:56:90:50:38:bf:c4: 3f:d5:52:9e:d2:83:c0:c6:f4:67:b0:80:83:5d:ee: 7e:74:13:0a:4f:7c:2c:4b:07:fb:7b:f5:a2:46:90: 33:f6:d6:bc:fa:99:db:28:bc:a1:a7:2a:4d:7d:1d: e4:9e:0a:f8:ef:88:b4:ae:c3:51:f2:61:99:77:01: a7:4a:23:ab:52:65:d3:84:13:65:de:3c:8b:99:37: 96:d8:79:44:e5:fa:23:5a:79:25:96:d4:da:17:cd: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0D:D5:85:F0:FC:92:4C:24:61:ED:95:27:99:7B:A8:9B:D1:46:C5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:c00::/40 2a0f:6284:4300::/40 Signature Algorithm: sha256WithRSAEncryption 8e:6d:9f:7e:3e:36:92:91:32:47:f7:cc:d4:79:65:22:65:54: 6b:19:c8:d2:ce:bd:67:d6:55:91:af:52:4c:58:20:db:a5:43: 79:de:f6:aa:34:2c:2e:1d:8d:c5:36:19:47:ef:6f:a8:e3:e8: c4:fe:2d:fa:87:12:25:2e:f8:2b:07:08:93:06:5a:14:0f:27: 17:9e:08:b6:d4:32:e0:22:df:e5:01:d5:0c:75:da:a5:1f:04: 12:ae:9c:45:ef:f7:c2:aa:30:17:03:12:77:04:95:a4:65:f8: 5f:05:77:bf:b5:f8:ef:92:55:bf:66:c4:cc:05:37:11:3c:0f: d3:b6:1d:a6:22:7a:a6:a2:89:07:54:55:5a:bf:15:f5:5b:37: 7e:c2:ca:d6:e4:90:9a:0f:4b:1a:14:38:b8:03:25:df:8b:bd: 10:9a:9b:f6:6b:e7:64:6e:80:16:79:ff:1d:33:7e:0e:ba:76: bd:19:57:66:f3:6f:2c:65:7a:13:51:1e:f8:c0:f5:a7:5c:43: 27:d7:77:23:7d:93:b4:33:6d:3c:5a:6a:00:58:f4:7f:f4:c1: f3:39:3d:05:e9:6d:c7:a1:23:b7:54:2f:b8:96:80:ad:c6:83: 85:42:da:51:1b:40:8f:75:2c:3e:71:7c:a9:78:86:1f:5b:16: 72:24:28:2a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUSq8F5c9qoiDEGq/iqhldPbOYHeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMDgyMDU3MTJaFw0yNjEyMDcyMTAyMTJaMDMxMTAvBgNV BAMTKDEyMERENTg1RjBGQzkyNEMyNDYxRUQ5NTI3OTk3QkE4OUJEMTQ2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Dmcyon9SdmOMzFA3RoKhDJ2M O+va3e0pD/j+6+fRm6hQarm6lOCjLFyHXPmnMRArkOHqd0H6ELZZFR7rVT80YbBD lwkkmjnumGYC4ghKlhR42P195Km9MkBZzZ6ZCBTrbUhhXjVtMKmn2wn/ifCGeeJ9 ZAbDspq8lVmhtMnhh/WV4/SCcShvlPPKpmwDDHyHVYOes3v1UVDBZ5ac7FaQUDi/ xD/VUp7Sg8DG9GewgINd7n50EwpPfCxLB/t79aJGkDP21rz6mdsovKGnKk19HeSe CvjviLSuw1HyYZl3AadKI6tSZdOEE2XePIuZN5bYeUTl+iNaeSWW1NoXzTKlAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUEg3VhfD8kkwkYe2VJ5l7qJvRRsUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq D2KEDAMGACoPYoRDMA0GCSqGSIb3DQEBCwUAA4IBAQCObZ9+PjaSkTJH98zUeWUi ZVRrGcjSzr1n1lWRr1JMWCDbpUN53vaqNCwuHY3FNhlH72+o4+jE/i36hxIlLvgr BwiTBloUDycXngi21DLgIt/lAdUMddqlHwQSrpxF7/fCqjAXAxJ3BJWkZfhfBXe/ tfjvklW/ZsTMBTcRPA/Tth2mInqmookHVFVavxX1Wzd+wsrW5JCaD0saFDi4AyXf i70Qmpv2a+dkboAWef8dM34Ouna9GVdm828sZXoTUR74wPWnXEMn13cjfZO0M208 WmoAWPR/9MHzOT0F6W3HoSO3VC+4loCtxoOFQtpRG0CPdSw+cXypeIYfWxZyJCgq -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:08 2025 by rpki-client