This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204150.roa
File: AS204150.roa (raw, json)
Hash identifier: RoD7nW8XF8jgojMXSSZ1J3qcWrk90h3QRAFmS2t5grw=
Subject key identifier: 6F:C5:72:09:18:2D:09:6F:6B:F8:59:4A:D9:F7:E7:76:1F:33:5D:72
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 42E5A13D92988486D53635FFE07D99894BC6F33B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204150.roa
Signing time: Mon 17 Nov 2025 12:21:11 +0000
ROA not before: Mon 17 Nov 2025 12:16:11 +0000
ROA not after: Mon 16 Nov 2026 12:21:11 +0000
asID: 204150
IP address blocks: 2a0f:6284::/48 maxlen: 48
2a0f:6284:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 11:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e5:a1:3d:92:98:84:86:d5:36:35:ff:e0:7d:99:89:4b:c6:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 17 12:16:11 2025 GMT
Not After : Nov 16 12:21:11 2026 GMT
Subject: CN=6FC57209182D096F6BF8594AD9F7E7761F335D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:d4:0e:47:23:ff:bf:3c:ca:7f:b5:76:23:
8e:93:c7:42:9d:01:84:e6:7b:b9:86:83:61:3d:16:
ce:2c:79:ce:72:a6:a9:43:e3:db:fb:db:0b:66:a6:
f8:83:74:23:5a:1a:12:e5:87:77:d7:5d:2a:74:15:
2b:d7:87:b5:1f:ad:44:b6:22:c8:64:c5:f8:a0:13:
92:86:a7:a1:ab:fa:ba:3a:d6:82:67:2e:ed:98:c8:
d9:99:4c:54:23:2c:24:6a:71:1b:96:f6:16:f9:10:
c2:16:58:32:ce:7e:31:ac:83:ed:31:db:b6:f3:d9:
86:d6:f9:d2:75:f0:7b:99:03:23:42:5b:7a:d3:03:
8e:42:b5:f0:90:4e:1a:0f:0e:4a:12:c3:c6:eb:25:
10:a6:54:a4:e0:5c:22:6c:d7:7a:ef:d9:b4:72:b7:
c8:61:37:b9:4a:f7:91:c8:6f:29:cf:f4:14:6a:f8:
09:8a:cc:57:54:df:43:da:33:4c:26:70:57:77:e8:
7f:7e:5b:78:53:34:23:f2:1c:38:d0:1c:6a:71:e8:
a6:1e:2c:1a:8d:dc:b4:00:8a:a4:81:1f:93:e4:ad:
33:30:0d:f3:40:52:d6:63:ea:d5:ac:99:f5:d3:3d:
23:4b:78:ce:7a:70:34:fb:1a:b6:5b:ac:59:fe:6d:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:72:09:18:2D:09:6F:6B:F8:59:4A:D9:F7:E7:76:1F:33:5D:72
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284::/48
2a0f:6284:800::/40
Signature Algorithm: sha256WithRSAEncryption
1f:f7:1f:ae:10:df:07:25:40:0d:90:34:04:51:48:68:d1:9f:
4a:1a:10:5c:e8:ad:f9:da:b1:0b:53:59:0d:55:55:8e:f6:bc:
fc:76:d3:24:f6:cc:ea:f5:3a:57:88:30:52:a2:b3:53:84:3d:
2d:f5:3b:f7:29:03:4a:d9:73:23:3a:19:b5:56:36:eb:a3:5e:
73:63:4f:7b:15:0d:69:5d:11:c4:85:c6:7f:d0:af:b8:d6:89:
2f:62:c3:ec:eb:eb:a4:1f:3c:75:9a:b7:ec:be:19:ef:c3:df:
15:45:69:59:26:f5:6f:7a:01:10:8c:4f:53:44:b2:49:14:ed:
a5:28:9f:b3:da:60:54:c6:6e:13:24:40:bc:2a:c7:6d:bc:72:
26:45:87:79:d7:f7:9a:85:12:95:d6:01:ed:35:4e:d4:38:33:
e0:4c:18:33:b3:ed:4f:d2:6a:e3:9d:12:7f:c8:f8:5b:24:51:
42:5f:b4:68:a5:84:63:21:a0:eb:36:fb:aa:8e:2f:07:54:dd:
a4:69:b2:b8:72:18:e2:eb:1e:e6:26:67:e9:82:bf:d7:9a:53:
f0:08:df:85:83:df:4a:ed:dc:75:eb:4e:35:6a:36:46:08:e9:
d5:3f:f0:56:93:2a:e5:df:e7:63:13:d9:61:d8:7d:15:a7:1a:
bb:d6:84:c0
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQuWhPZKYhIbVNjX/4H2ZiUvG8zswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTExMTcxMjE2MTFaFw0yNjExMTYxMjIxMTFaMDMxMTAvBgNV
BAMTKDZGQzU3MjA5MTgyRDA5NkY2QkY4NTk0QUQ5RjdFNzc2MUYzMzVENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDdQORyP/vzzKf7V2I46Tx0Kd
AYTme7mGg2E9Fs4sec5ypqlD49v72wtmpviDdCNaGhLlh3fXXSp0FSvXh7UfrUS2
IshkxfigE5KGp6Gr+ro61oJnLu2YyNmZTFQjLCRqcRuW9hb5EMIWWDLOfjGsg+0x
27bz2YbW+dJ18HuZAyNCW3rTA45CtfCQThoPDkoSw8brJRCmVKTgXCJs13rv2bRy
t8hhN7lK95HIbynP9BRq+AmKzFdU30PaM0wmcFd36H9+W3hTNCPyHDjQHGpx6KYe
LBqN3LQAiqSBH5PkrTMwDfNAUtZj6tWsmfXTPSNLeM56cDT7GrZbrFn+bfUbAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUb8VyCRgtCW9r+FlK2ffndh8zXXIwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQxNTAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAq
D2KEAAADBgAqD2KECDANBgkqhkiG9w0BAQsFAAOCAQEAH/cfrhDfByVADZA0BFFI
aNGfShoQXOit+dqxC1NZDVVVjva8/HbTJPbM6vU6V4gwUqKzU4Q9LfU79ykDStlz
IzoZtVY266Nec2NPexUNaV0RxIXGf9CvuNaJL2LD7OvrpB88dZq37L4Z78PfFUVp
WSb1b3oBEIxPU0SySRTtpSifs9pgVMZuEyRAvCrHbbxyJkWHedf3moUSldYB7TVO
1Dgz4EwYM7PtT9Jq450Sf8j4WyRRQl+0aKWEYyGg6zb7qo4vB1TdpGmyuHIY4use
5iZn6YK/15pT8AjfhYPfSu3cdetONWo2Rgjp1T/wVpMq5d/nYxPZYdh9Facau9aE
wA==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:18 2025 by rpki-client