This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212234.roa
File: AS212234.roa (raw, json)
Hash identifier: nM1NrEGD6e+UYGKj84QZUgoZn2AS/9h/is6RvU0GlWo=
Subject key identifier: C5:05:F8:E8:19:4D:65:FF:B6:E9:95:57:DD:AB:69:92:CD:51:85:A6
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 5032B397D05163323D8FCBA1322B83753B4E0159
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
Signing time: Thu 18 Dec 2025 18:05:22 +0000
ROA not before: Thu 18 Dec 2025 18:00:22 +0000
ROA not after: Thu 17 Dec 2026 18:05:22 +0000
asID: 212234
IP address blocks: 2a0f:6284:5::/48 maxlen: 48
2a0f:6284:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 11:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:32:b3:97:d0:51:63:32:3d:8f:cb:a1:32:2b:83:75:3b:4e:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 18 18:00:22 2025 GMT
Not After : Dec 17 18:05:22 2026 GMT
Subject: CN=C505F8E8194D65FFB6E99557DDAB6992CD5185A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:ae:96:71:ef:b8:9d:c3:cf:00:21:d7:dc:
db:5d:ce:6a:34:db:53:40:19:f3:a4:ca:cd:d7:a4:
ce:32:34:65:9c:ae:43:07:4e:3b:39:a1:37:b9:44:
f9:16:11:e6:fb:c3:fe:4f:83:34:a0:34:86:01:0d:
91:38:17:70:24:60:3d:4e:f3:19:df:80:1b:fb:bd:
17:67:ee:8d:8c:bd:f2:34:53:7e:1c:20:2f:72:5f:
13:72:22:ac:c7:1b:ce:fc:fc:d8:ef:01:33:e0:6a:
df:68:67:40:2b:35:18:eb:8e:a2:8b:66:ba:f7:a9:
33:b7:dc:1a:60:05:51:35:41:49:07:6b:d5:9c:bb:
0d:db:2c:f4:07:d2:2c:8e:4b:ff:04:74:06:ae:cd:
17:2f:b4:06:ad:4f:23:4d:19:f3:9e:1f:d3:c0:8c:
93:aa:fa:47:67:70:63:93:ca:fa:7b:ce:68:c3:97:
0b:35:fd:bc:cd:be:02:4a:94:85:d4:b3:5f:a4:ed:
63:a4:12:f6:e4:80:0b:bc:7e:3b:d9:14:20:27:a6:
7f:31:f8:d5:b1:ef:18:ba:5b:bb:49:7d:17:48:f2:
59:92:ce:07:61:fc:ef:ce:8b:08:fc:0b:48:ed:e9:
a3:a0:53:57:12:24:c6:0a:6f:68:5b:ea:32:1f:4a:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:F8:E8:19:4D:65:FF:B6:E9:95:57:DD:AB:69:92:CD:51:85:A6
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:5::/48
2a0f:6284:10::/44
Signature Algorithm: sha256WithRSAEncryption
51:a1:ff:a1:67:3e:4c:52:23:e5:69:49:c5:b7:96:bb:57:2a:
89:93:a3:74:99:95:42:8e:c8:9b:07:3a:76:01:a8:eb:38:4e:
46:fe:05:ea:91:90:c3:77:d8:c4:cd:07:20:73:c2:a5:2f:8d:
42:76:a8:af:08:bb:89:03:0e:f6:a9:36:86:47:f8:bb:5e:78:
6d:4c:ad:c1:41:22:ba:b6:74:ea:d1:33:ba:ac:8c:4b:74:b8:
24:24:fb:af:e9:83:86:f5:6b:a6:73:9e:68:43:60:29:3a:b0:
1a:1b:b2:fb:38:63:5f:88:ab:d4:73:2d:16:bf:54:dc:a6:77:
1c:66:37:b4:db:14:cb:cd:0b:fb:95:77:d1:6b:38:b0:8d:eb:
82:27:90:a6:65:0e:34:35:1f:c1:fb:db:98:c4:3b:d2:8a:4e:
89:8c:2d:26:86:23:20:ca:c3:0d:d6:4b:91:1c:51:c6:c0:0c:
cc:3d:32:70:61:97:e3:94:cb:89:f2:9b:1c:dd:b4:69:e6:d3:
ac:7d:70:7b:73:26:6a:54:3b:d1:e0:4f:b1:c7:e9:ba:98:64:
a3:92:7a:6c:24:0e:d1:84:fd:24:36:58:a5:ce:07:7c:fb:65:
69:06:2c:04:53:bf:6a:a1:14:f8:0c:b6:99:fa:82:e3:aa:26:
95:f1:ed:f5
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUUDKzl9BRYzI9j8uhMiuDdTtOAVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTEyMTgxODAwMjJaFw0yNjEyMTcxODA1MjJaMDMxMTAvBgNV
BAMTKEM1MDVGOEU4MTk0RDY1RkZCNkU5OTU1N0REQUI2OTkyQ0Q1MTg1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7K6Wce+4ncPPACHX3Ntdzmo0
21NAGfOkys3XpM4yNGWcrkMHTjs5oTe5RPkWEeb7w/5PgzSgNIYBDZE4F3AkYD1O
8xnfgBv7vRdn7o2MvfI0U34cIC9yXxNyIqzHG878/NjvATPgat9oZ0ArNRjrjqKL
Zrr3qTO33BpgBVE1QUkHa9Wcuw3bLPQH0iyOS/8EdAauzRcvtAatTyNNGfOeH9PA
jJOq+kdncGOTyvp7zmjDlws1/bzNvgJKlIXUs1+k7WOkEvbkgAu8fjvZFCAnpn8x
+NWx7xi6W7tJfRdI8lmSzgdh/O/Oiwj8C0jt6aOgU1cSJMYKb2hb6jIfShONAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUxQX46BlNZf+26ZVX3atpks1RhaYwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIyMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq
D2KEAAUDBwQqD2KEABAwDQYJKoZIhvcNAQELBQADggEBAFGh/6FnPkxSI+VpScW3
lrtXKomTo3SZlUKOyJsHOnYBqOs4Tkb+BeqRkMN32MTNByBzwqUvjUJ2qK8Iu4kD
DvapNoZH+LteeG1MrcFBIrq2dOrRM7qsjEt0uCQk+6/pg4b1a6ZznmhDYCk6sBob
svs4Y1+Iq9RzLRa/VNymdxxmN7TbFMvNC/uVd9FrOLCN64InkKZlDjQ1H8H725jE
O9KKTomMLSaGIyDKww3WS5EcUcbADMw9MnBhl+OUy4nymxzdtGnm06x9cHtzJmpU
O9HgT7HH6bqYZKOSemwkDtGE/SQ2WKXOB3z7ZWkGLARTv2qhFPgMtpn6guOqJpXx
7fU=
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:46:21 2025 by rpki-client