This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215265.roa File: AS215265.roa (raw, json) Hash identifier: 1qGdbag8cZ3rCYwpKobl/v7rL5aYHOGXr+9ybPHjvso= Subject key identifier: 2D:55:10:C9:09:56:A8:8C:14:76:57:56:69:D9:64:A0:88:5D:87:6D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 68BD962293A5801F5C550F60D80BC1EE6B1DA7DB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa Signing time: Wed 17 Dec 2025 08:00:17 +0000 ROA not before: Wed 17 Dec 2025 07:55:17 +0000 ROA not after: Wed 16 Dec 2026 08:00:17 +0000 asID: 215265 IP address blocks: 2a09:54c5::/32 maxlen: 32 2a0f:6284:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bd:96:22:93:a5:80:1f:5c:55:0f:60:d8:0b:c1:ee:6b:1d:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 17 07:55:17 2025 GMT Not After : Dec 16 08:00:17 2026 GMT Subject: CN=2D5510C90956A88C1476575669D964A0885D876D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:06:cb:0c:c8:dc:ba:6a:d6:18:b5:fb:9f: 2e:8c:69:d5:4e:96:4b:79:c4:cc:61:2d:62:85:b2: a7:14:11:96:08:9d:cb:81:45:36:2e:01:78:67:0f: 57:50:33:3f:8c:1d:d3:1b:d0:8d:b2:78:1c:e0:be: f1:42:50:ea:b9:3f:28:83:90:16:b0:26:e3:14:dd: f8:b4:c1:96:9b:0b:c0:74:77:61:47:ed:85:37:bc: 1a:33:c8:83:8e:a9:9f:b0:f3:6d:64:6c:b8:58:a4: b8:1b:69:76:97:dc:9d:98:25:ba:97:91:29:5c:f4: 41:62:bd:ed:73:3a:57:56:57:89:07:0b:86:d1:05: 0f:44:29:53:86:eb:c1:61:8b:5e:6e:8e:5c:d5:75: 4c:0e:85:aa:6b:fc:6d:47:2a:ef:a1:51:45:cf:01: 3d:55:9b:31:c7:74:62:24:38:05:4c:66:ac:d6:f9: 0f:a2:92:bc:82:b3:d7:97:1c:0b:88:f1:8e:28:8d: 5e:dc:47:a8:c1:b4:bb:93:58:e4:d7:6d:54:5b:4f: 74:19:98:23:85:c6:bf:85:96:b0:94:86:bd:e6:c5: 56:54:35:98:f7:4c:ae:e2:2f:40:5b:89:23:46:28: 71:07:1e:4d:84:2c:6b:b6:1f:01:c4:85:2d:6f:5a: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:10:C9:09:56:A8:8C:14:76:57:56:69:D9:64:A0:88:5D:87:6D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c5::/32 2a0f:6284:3000::/36 Signature Algorithm: sha256WithRSAEncryption 54:60:cd:32:22:66:53:73:7a:a7:42:a5:c8:85:43:5f:21:93: 4e:fb:0f:3b:a1:4e:b3:41:8a:f4:7a:c6:06:2c:2f:cf:f4:b3: 9f:34:74:03:3d:d1:3f:f4:74:82:ef:67:cc:e8:cf:09:56:4a: a6:43:71:66:46:6a:83:87:1f:47:3d:2f:0f:f1:22:85:b3:00: 68:0e:78:fd:d8:96:a8:46:65:0d:a0:c9:bf:f1:a7:89:8c:4f: ec:2b:67:ed:1e:ef:d3:d7:8f:94:4d:7a:de:56:a5:7f:2d:f2: cf:05:6c:c0:d2:29:f2:4d:a0:e2:ab:86:c9:64:d9:78:ff:22: 40:07:fb:34:b8:c9:e2:07:71:27:83:83:37:bd:93:6c:7a:f9: 4c:2b:37:ae:ce:c1:7f:97:85:f3:dc:45:51:e0:b6:85:b1:71: 0b:2b:37:3f:c0:3e:a0:f0:86:5d:ee:0b:ba:c1:a5:a8:ec:99: 51:21:ae:0c:f0:68:32:a3:13:aa:29:6f:94:8b:ad:e9:f1:9f: d1:71:21:24:b2:db:74:de:30:5d:e6:f3:9e:3c:a3:3f:41:39: 84:0a:5d:86:a3:22:a5:38:0c:08:38:e3:56:32:36:88:90:e6: ff:12:8b:a9:7c:04:91:11:ab:bd:5e:d0:91:e1:44:fc:22:01: 94:41:b3:69 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUaL2WIpOlgB9cVQ9g2AvB7msdp9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMTcwNzU1MTdaFw0yNjEyMTYwODAwMTdaMDMxMTAvBgNV BAMTKDJENTUxMEM5MDk1NkE4OEMxNDc2NTc1NjY5RDk2NEEwODg1RDg3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqwbLDMjcumrWGLX7ny6MadVO lkt5xMxhLWKFsqcUEZYIncuBRTYuAXhnD1dQMz+MHdMb0I2yeBzgvvFCUOq5PyiD kBawJuMU3fi0wZabC8B0d2FH7YU3vBozyIOOqZ+w821kbLhYpLgbaXaX3J2YJbqX kSlc9EFive1zOldWV4kHC4bRBQ9EKVOG68Fhi15ujlzVdUwOhapr/G1HKu+hUUXP AT1VmzHHdGIkOAVMZqzW+Q+ikryCs9eXHAuI8Y4ojV7cR6jBtLuTWOTXbVRbT3QZ mCOFxr+FlrCUhr3mxVZUNZj3TK7iL0BbiSNGKHEHHk2ELGu2HwHEhS1vWiGPAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQULVUQyQlWqIwUdldWadlkoIhdh20wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUyNjUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKAYIKwYBBQUHAQcBAf8EGTAXMBUEAgACMA8DBQAq CVTFAwYEKg9ihDAwDQYJKoZIhvcNAQELBQADggEBAFRgzTIiZlNzeqdCpciFQ18h k077DzuhTrNBivR6xgYsL8/0s580dAM90T/0dILvZ8zozwlWSqZDcWZGaoOHH0c9 Lw/xIoWzAGgOeP3YlqhGZQ2gyb/xp4mMT+wrZ+0e79PXj5RNet5WpX8t8s8FbMDS KfJNoOKrhslk2Xj/IkAH+zS4yeIHcSeDgze9k2x6+UwrN67OwX+XhfPcRVHgtoWx cQsrNz/APqDwhl3uC7rBpajsmVEhrgzwaDKjE6opb5SLrenxn9FxISSy23TeMF3m 8548oz9BOYQKXYajIqU4DAg441YyNoiQ5v8Si6l8BJERq71e0JHhRPwiAZRBs2k= -----END CERTIFICATE-----Generated at Sat Dec 20 22:38:59 2025 by rpki-client