This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: 9PD/6zjPGi3JXJo3Ybp7XqMWOvr7DrYI0FQor758k+c=
Subject key identifier: 03:43:66:5B:F6:31:D6:00:B1:68:31:86:09:29:C9:14:8B:67:FB:B4
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 73B0D9A6DC28171E2E955212C15A39F349152DD4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa
Signing time: Fri 19 Dec 2025 05:17:36 +0000
ROA not before: Fri 19 Dec 2025 05:12:36 +0000
ROA not after: Fri 18 Dec 2026 05:17:36 +0000
asID: 215607
IP address blocks: 2a0f:6284:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 11:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b0:d9:a6:dc:28:17:1e:2e:95:52:12:c1:5a:39:f3:49:15:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 19 05:12:36 2025 GMT
Not After : Dec 18 05:17:36 2026 GMT
Subject: CN=0343665BF631D600B16831860929C9148B67FBB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:aa:fd:8d:3e:ae:7e:71:97:6d:be:84:ef:
da:b2:a5:8a:7c:d2:7e:aa:b4:40:99:6b:03:77:57:
4b:7f:0b:b2:5c:e0:8c:98:bf:07:76:b0:c3:ea:e8:
be:f6:fa:7f:a2:09:9d:57:62:8f:0a:6f:ab:bc:3b:
75:94:e8:7f:5b:7d:50:76:bf:aa:33:9b:e7:7b:f5:
c4:36:01:c8:7c:fd:b5:6a:fb:52:c7:9c:47:dd:cb:
3a:07:ee:26:2b:5c:b0:b8:62:86:12:bd:b3:64:d8:
96:23:c9:a4:dd:d8:84:a1:eb:cb:88:a1:33:0d:e6:
84:7e:c8:96:1a:88:1f:f4:97:9c:65:bc:b5:1c:61:
97:12:46:eb:22:29:e0:79:27:7f:bd:d0:39:94:94:
2f:75:4e:53:86:c6:82:2f:ee:6b:cc:3a:a4:6d:8b:
07:c3:71:2f:8c:dd:be:bd:f7:3d:00:c6:ae:f9:86:
56:a4:aa:db:79:48:88:c1:4a:e6:40:9f:d1:a2:6b:
7b:2e:1d:02:1d:10:27:f2:74:ef:62:e3:cc:ac:70:
9b:b2:da:69:d4:0c:82:e2:dd:d8:f1:bc:f5:f7:e7:
55:fb:f8:66:48:f4:81:57:aa:21:75:bc:88:3d:33:
9d:62:15:82:00:96:c3:28:c8:13:6c:c5:66:3e:e3:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:66:5B:F6:31:D6:00:B1:68:31:86:09:29:C9:14:8B:67:FB:B4
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:2::/48
Signature Algorithm: sha256WithRSAEncryption
8d:dc:c3:75:07:4e:4e:a1:1f:07:ee:ea:c5:75:44:4b:cb:af:
70:28:4a:9b:51:25:b2:bb:47:59:66:1d:f8:97:b6:f5:17:51:
f9:70:d7:63:f7:c2:19:37:10:d5:a4:ef:fb:b3:db:b7:68:97:
a4:21:4a:d0:d1:8d:14:77:fa:be:f1:aa:92:4a:dc:6c:02:2c:
32:cb:29:e3:83:b2:b9:ac:b4:09:d8:fd:b8:3c:24:cc:59:cb:
5e:ab:e3:7b:4a:68:48:4d:e8:46:ab:28:6a:ee:76:fa:a2:62:
29:16:f1:06:1e:a6:77:80:d0:67:df:15:49:5b:a0:bf:c8:1e:
56:90:00:61:62:e7:f5:e8:09:b0:7b:b2:c7:ab:d5:da:d7:7c:
1c:d8:95:e7:25:d1:e8:50:b9:45:96:d9:f3:97:6b:98:1d:3f:
63:67:4c:b1:0d:97:be:c7:9c:a5:64:9a:0d:3b:ee:4d:13:8b:
f9:22:e2:51:77:28:e4:c1:e6:d7:1c:c2:5f:c3:55:2c:7d:1f:
2d:56:fd:36:92:24:76:bc:4e:7e:5d:15:25:b2:40:95:cd:40:
2d:b7:f2:98:56:ea:42:0e:b8:f7:2c:e6:df:22:64:c8:8d:cd:
8b:b4:7e:3a:66:82:02:39:11:a7:0d:30:9c:fe:97:ca:df:6e:
5d:af:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:38 2025 by rpki-client