This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS204208.roa File: AS204208.roa (raw, json) Hash identifier: V/M+Vzls0d+lYHqNox7lqyWXlkx7J6oVSrXcDuJJPQ8= Subject key identifier: F0:ED:6A:21:5E:9F:82:E8:BC:6A:1C:67:C1:6C:B8:70:5B:21:04:41 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1716D7023AC48782C06AE2419DE82E8F8D4A3E2E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204208.roa Signing time: Sun 25 Jan 2026 14:35:58 +0000 ROA not before: Sun 25 Jan 2026 14:30:58 +0000 ROA not after: Sun 24 Jan 2027 14:35:58 +0000 asID: 204208 IP address blocks: 2a05:dfc3::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:16:d7:02:3a:c4:87:82:c0:6a:e2:41:9d:e8:2e:8f:8d:4a:3e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jan 25 14:30:58 2026 GMT Not After : Jan 24 14:35:58 2027 GMT Subject: CN=F0ED6A215E9F82E8BC6A1C67C16CB8705B210441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:ab:04:4b:54:77:39:1b:fb:f3:dc:a0:5f: df:46:a2:90:10:6d:d6:76:d6:8a:53:01:d4:90:b4: bf:ea:8b:0a:af:45:a5:b6:d9:fe:90:d9:7e:3d:f4: 66:9b:c8:7e:e9:11:9a:02:56:ae:fe:72:ab:87:1e: 66:0d:88:2e:0a:6a:69:ef:16:fe:09:45:16:97:cc: 0f:f1:46:4d:8c:68:37:12:01:8a:a1:38:82:60:b0: df:c4:58:f5:c3:88:8d:75:57:be:54:42:b6:c8:de: 30:7a:06:e8:32:40:47:e1:fd:5f:28:ed:f7:27:28: 83:11:e3:09:b4:ec:40:86:32:b8:43:b9:61:bd:37: a5:36:ea:04:79:0f:81:40:90:74:4c:f7:83:02:0d: 0c:50:0a:a1:77:75:76:dc:46:65:11:7e:eb:2e:a0: 36:27:2e:be:e7:f0:c9:22:29:0e:f8:e2:c0:70:b1: 46:ad:6d:fc:8a:9a:4f:52:f1:39:d8:88:6b:a7:22: 50:ef:30:b0:4f:50:6c:c8:f5:22:e7:40:bd:c2:3c: e7:b8:6b:a4:e9:35:ad:d0:92:05:6f:f7:32:f5:9e: 4c:65:fc:7a:28:24:2a:4c:86:98:97:71:4d:9f:97: fa:76:d7:71:2b:8a:a3:ed:9c:7a:1c:4c:a5:2b:58: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:ED:6A:21:5E:9F:82:E8:BC:6A:1C:67:C1:6C:B8:70:5B:21:04:41 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3::/40 Signature Algorithm: sha256WithRSAEncryption 3c:d3:b1:7a:bd:7f:58:bc:56:8a:e4:68:e5:61:ab:f3:27:66: d8:b0:65:6f:ff:46:18:12:9b:af:2d:59:41:a5:0a:0a:4c:ec: 7f:64:0c:8f:57:34:ee:e4:b2:9a:b8:3a:42:ce:7f:96:5f:b8: 9c:7f:ba:08:aa:0d:3d:ab:56:f4:df:5c:9c:5c:4b:9d:c1:76: f9:80:c2:19:6a:44:3b:f0:a7:55:6d:d0:65:96:d2:02:f3:db: 58:06:8e:02:e5:75:62:5d:da:eb:6a:71:1c:d1:ce:76:22:b7: 86:4b:03:fc:71:ff:1e:1b:ec:ee:f4:6e:40:a5:f9:9e:47:1e: 69:fa:46:91:9a:98:2b:ce:9a:0d:36:1a:a3:e5:99:7d:d1:cf: 5f:14:ee:eb:ed:47:ba:13:9f:cf:43:22:fa:0c:86:04:3d:11: ff:1e:a4:9b:84:3f:e1:4d:d6:2d:24:15:20:15:37:6b:e8:aa: 04:12:01:a1:98:08:b4:a0:16:1b:18:47:07:3a:77:5c:48:ed: c3:61:dd:34:72:3d:6d:cb:d6:53:e4:37:cc:cd:92:70:ad:ae: 12:c3:d6:4f:2d:76:61:8e:75:85:0b:7a:78:79:5a:60:3a:3a: 61:3a:69:74:f0:fc:b5:f4:3f:d2:47:0a:31:cb:dd:46:f4:2a: 70:4d:96:5a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUFxbXAjrEh4LAauJBneguj41KPi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAxMjUxNDMwNThaFw0yNzAxMjQxNDM1NThaMDMxMTAvBgNV BAMTKEYwRUQ2QTIxNUU5RjgyRThCQzZBMUM2N0MxNkNCODcwNUIyMTA0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJKsES1R3ORv789ygX99GopAQ bdZ21opTAdSQtL/qiwqvRaW22f6Q2X499GabyH7pEZoCVq7+cquHHmYNiC4Kamnv Fv4JRRaXzA/xRk2MaDcSAYqhOIJgsN/EWPXDiI11V75UQrbI3jB6BugyQEfh/V8o 7fcnKIMR4wm07ECGMrhDuWG9N6U26gR5D4FAkHRM94MCDQxQCqF3dXbcRmURfusu oDYnLr7n8MkiKQ744sBwsUatbfyKmk9S8TnYiGunIlDvMLBPUGzI9SLnQL3CPOe4 a6TpNa3QkgVv9zL1nkxl/HooJCpMhpiXcU2fl/p213EriqPtnHocTKUrWOYrAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU8O1qIV6fgui8ahxnwWy4cFshBEEwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQyMDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq Bd/DADANBgkqhkiG9w0BAQsFAAOCAQEAPNOxer1/WLxWiuRo5WGr8ydm2LBlb/9G GBKbry1ZQaUKCkzsf2QMj1c07uSymrg6Qs5/ll+4nH+6CKoNPatW9N9cnFxLncF2 +YDCGWpEO/CnVW3QZZbSAvPbWAaOAuV1Yl3a62pxHNHOdiK3hksD/HH/Hhvs7vRu QKX5nkceafpGkZqYK86aDTYao+WZfdHPXxTu6+1HuhOfz0Mi+gyGBD0R/x6km4Q/ 4U3WLSQVIBU3a+iqBBIBoZgItKAWGxhHBzp3XEjtw2HdNHI9bcvWU+Q3zM2ScK2u EsPWTy12YY51hQt6eHlaYDo6YTppdPD8tfQ/0kcKMcvdRvQqcE2WWg== -----END CERTIFICATE-----Generated at Wed Feb 4 06:47:40 2026 by rpki-client