This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215605.roa File: AS215605.roa (raw, json) Hash identifier: DYyZ/XhpzlEF1N0aEE6En8ygAvPSW18evCrui9gkLyw= Subject key identifier: 2B:CE:BD:EE:04:7D:AD:40:71:83:51:4F:04:2B:28:08:89:A0:2B:12 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 23402E15DA4CEA51D08A9FB0D509B059FF1A7506 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215605.roa Signing time: Fri 12 Dec 2025 08:00:21 +0000 ROA not before: Fri 12 Dec 2025 07:55:21 +0000 ROA not after: Fri 11 Dec 2026 08:00:21 +0000 asID: 215605 IP address blocks: 2a0a:6044:7c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:40:2e:15:da:4c:ea:51:d0:8a:9f:b0:d5:09:b0:59:ff:1a:75:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 12 07:55:21 2025 GMT Not After : Dec 11 08:00:21 2026 GMT Subject: CN=2BCEBDEE047DAD407183514F042B280889A02B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d3:f0:48:db:29:12:15:17:20:47:33:3c:18: 36:0d:f2:f0:62:4b:de:60:ae:fc:96:62:30:d9:6f: 28:4a:c0:71:9a:e0:b2:ac:f4:2b:9e:43:42:e8:ca: 96:3d:06:58:c2:b9:1e:f4:3b:c4:2a:3e:7c:c3:d4: 84:d9:0c:a0:b7:e4:73:59:bd:6a:ea:87:97:b2:46: 43:8a:a3:8a:15:0e:2e:a5:80:7d:00:c9:f3:8a:48: 85:86:a7:ba:33:4d:96:93:2f:2d:2f:53:f7:b5:b8: ed:6c:3d:eb:da:93:0a:6a:41:86:e2:ac:d4:85:83: 81:f3:45:5a:e3:2e:0d:b4:45:6c:6d:78:19:bd:a7: f6:76:8d:7f:1c:cd:96:63:88:13:d4:bb:53:28:a0: 84:5d:4c:59:79:61:55:2a:90:2e:42:1b:e2:b3:35: a0:51:e9:e3:3d:42:75:da:ab:65:0d:b3:94:98:15: 17:55:c9:f4:bb:0e:bf:df:24:5f:6e:c7:7a:72:34: 07:b4:f0:cc:18:76:71:91:f3:19:ad:1b:21:7c:71: 9b:4a:8d:e1:44:e5:11:4e:ba:13:6b:89:4f:c1:c1: 9e:d6:17:5d:bf:c3:f1:7f:35:71:6b:e0:5c:38:5d: 27:92:53:ea:e5:09:e1:b3:17:a8:6c:7e:ac:61:26: 34:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CE:BD:EE:04:7D:AD:40:71:83:51:4F:04:2B:28:08:89:A0:2B:12 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7c00::/40 Signature Algorithm: sha256WithRSAEncryption 8b:27:7b:48:e2:de:99:32:5c:2a:61:94:56:26:fb:75:f3:8b: 45:e2:16:bb:a8:42:82:b8:b2:ac:e3:86:8d:a8:59:03:94:6e: 53:db:9f:7d:09:73:b5:08:a2:eb:a2:e8:17:c1:51:65:b4:f1: e1:6a:69:07:f5:30:cc:ec:c0:9b:f8:28:60:6e:42:bc:e2:31: 6e:9d:b2:84:28:17:d1:47:91:0a:fc:e3:e0:37:2a:7f:48:ca: 14:5f:e8:04:9b:b3:44:47:54:d0:59:b3:d4:27:87:36:dc:20: 31:c9:2a:56:1d:ae:3c:6e:f7:ce:67:f2:df:5a:14:14:29:0a: c6:70:27:36:95:bc:c9:d4:d3:c8:aa:c3:34:7f:41:4d:30:51: 04:8b:06:7d:8c:da:f1:f3:b8:c1:2a:b9:07:c1:ff:52:4b:72: 06:48:8b:51:3a:22:43:db:21:5c:0c:eb:cb:11:03:0e:93:b1: a4:12:8a:c9:8b:18:46:83:c7:00:31:86:0c:d0:b1:0e:fa:af: f5:8e:bf:c9:a7:b9:13:4b:7d:17:1d:73:e5:b8:03:82:ef:6a: 11:84:13:1a:2b:98:1c:c3:3a:b0:51:80:31:4d:4d:ee:86:86: 24:d7:1c:d8:b9:89:5f:a0:b2:fd:f2:d2:e6:12:56:09:cf:71: 05:a1:d9:67 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUI0AuFdpM6lHQip+w1QmwWf8adQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMTIwNzU1MjFaFw0yNjEyMTEwODAwMjFaMDMxMTAvBgNV BAMTKDJCQ0VCREVFMDQ3REFENDA3MTgzNTE0RjA0MkIyODA4ODlBMDJCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0/BI2ykSFRcgRzM8GDYN8vBi S95grvyWYjDZbyhKwHGa4LKs9CueQ0LoypY9BljCuR70O8QqPnzD1ITZDKC35HNZ vWrqh5eyRkOKo4oVDi6lgH0AyfOKSIWGp7ozTZaTLy0vU/e1uO1sPevakwpqQYbi rNSFg4HzRVrjLg20RWxteBm9p/Z2jX8czZZjiBPUu1MooIRdTFl5YVUqkC5CG+Kz NaBR6eM9QnXaq2UNs5SYFRdVyfS7Dr/fJF9ux3pyNAe08MwYdnGR8xmtGyF8cZtK jeFE5RFOuhNriU/BwZ7WF12/w/F/NXFr4Fw4XSeSU+rlCeGzF6hsfqxhJjTlAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUK8697gR9rUBxg1FPBCsoCImgKxIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU2MDUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEfDANBgkqhkiG9w0BAQsFAAOCAQEAiyd7SOLemTJcKmGUVib7dfOLReIWu6hC griyrOOGjahZA5RuU9uffQlztQii66LoF8FRZbTx4WppB/UwzOzAm/goYG5CvOIx bp2yhCgX0UeRCvzj4Dcqf0jKFF/oBJuzREdU0Fmz1CeHNtwgMckqVh2uPG73zmfy 31oUFCkKxnAnNpW8ydTTyKrDNH9BTTBRBIsGfYza8fO4wSq5B8H/UktyBkiLUToi Q9shXAzryxEDDpOxpBKKyYsYRoPHADGGDNCxDvqv9Y6/yae5E0t9Fx1z5bgDgu9q EYQTGiuYHMM6sFGAMU1N7oaGJNcc2LmJX6Cy/fLS5hJWCc9xBaHZZw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:08 2025 by rpki-client