This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208790.roa File: AS208790.roa (raw, json) Hash identifier: voilMFaGfjO4SRjhOaU5dx53S/ITuVjVWxBUnZxv91k= Subject key identifier: 03:5C:22:7E:EA:AA:3C:4C:37:32:0D:8E:FF:0F:53:88:61:B0:2A:18 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4A3BAE9846476F8D22F6E591EC054E0245C539F2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208790.roa Signing time: Sat 27 Dec 2025 17:49:44 +0000 ROA not before: Sat 27 Dec 2025 17:44:44 +0000 ROA not after: Sat 26 Dec 2026 17:49:44 +0000 asID: 208790 IP address blocks: 2a0f:6284:510::/44 maxlen: 44 2a0f:6284:520::/44 maxlen: 44 2a0f:6284:600::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3b:ae:98:46:47:6f:8d:22:f6:e5:91:ec:05:4e:02:45:c5:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 27 17:44:44 2025 GMT Not After : Dec 26 17:49:44 2026 GMT Subject: CN=035C227EEAAA3C4C37320D8EFF0F538861B02A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:db:b4:35:90:d4:74:f0:fc:b6:b2:fe:37: 06:d3:0c:1c:6b:82:a8:fb:17:06:f0:42:4a:a0:40: 08:b5:99:96:7c:8e:4a:72:e5:a8:e4:03:9b:1b:44: 43:ba:45:d4:8d:b7:2d:9a:a1:9e:e1:40:12:62:ba: 10:29:07:8d:fd:a7:80:f7:13:45:61:6f:74:d6:f7: 3a:69:5b:87:23:f4:61:6c:9b:c7:17:43:e9:4e:bd: ca:30:9c:91:be:46:8a:e1:5f:2b:f0:b0:71:5a:71: 62:6b:39:c7:f1:92:ce:08:de:13:95:ae:f6:ea:3b: fe:c1:8f:f8:35:95:4a:f5:7a:61:d8:81:33:aa:07: 0b:96:3f:a9:2b:01:8f:b8:9f:e2:73:ad:50:04:03: 3e:80:5c:44:1d:29:dd:ee:11:27:8e:00:f3:91:99: ab:a9:b6:b9:15:57:f0:98:65:70:fd:96:31:0d:71: db:76:56:ee:14:76:2e:ea:13:b2:15:e8:3c:be:d1: c6:9a:44:75:45:7f:3d:88:15:1e:11:2e:7d:5a:47: 73:73:05:63:16:0a:5e:be:d1:e4:f6:96:86:57:28: 3d:68:e3:88:0b:6c:e6:d7:48:3d:35:aa:24:6d:24: 3e:fb:4e:b0:9c:f9:dd:8e:54:62:e0:e3:4a:c0:9b: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5C:22:7E:EA:AA:3C:4C:37:32:0D:8E:FF:0F:53:88:61:B0:2A:18 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:510::-2a0f:6284:52f:ffff:ffff:ffff:ffff:ffff 2a0f:6284:600::/40 Signature Algorithm: sha256WithRSAEncryption 2b:3e:62:47:78:2a:51:d2:93:cb:fa:8d:4f:d5:1e:f2:87:c0: a1:9e:9e:74:63:67:63:66:fc:09:8e:3d:78:6d:3e:7a:64:ee: ab:de:5a:6a:5d:d7:96:c7:19:0b:3d:86:54:bc:63:01:f0:ce: fb:b9:64:fc:81:45:ee:32:16:34:04:89:95:42:24:10:f4:ee: 38:0f:16:03:e6:08:12:32:5e:25:ed:fd:ac:ab:67:dc:d3:a5: 8c:56:1a:f4:16:b2:16:a9:ba:9e:2a:1e:a9:7d:4a:85:3f:62: 96:37:7f:e7:3d:63:14:14:3a:4b:d8:95:04:56:c5:06:c6:ec: a5:52:69:fa:e4:40:60:7c:7b:c5:bf:0d:5d:53:05:94:15:19: 32:2b:bc:9e:f8:55:ff:79:94:29:c4:c1:1b:56:9f:5a:68:ac: d7:77:be:1e:d2:1e:1f:01:0f:ab:78:71:36:f6:6e:e0:87:20: 06:92:4c:7d:ab:57:17:eb:2e:91:e3:22:e0:38:cd:fc:8b:0e: bf:2b:d7:d6:5a:a4:96:3d:33:f0:02:bd:38:05:92:6e:3b:85: db:46:ab:4e:d0:41:6d:5a:df:83:1d:a1:24:86:1b:59:46:d6: 0c:26:8a:f8:7a:9f:09:c5:e1:59:1b:e0:e8:97:52:36:9e:19: 57:cb:8b:44 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUSjuumEZHb40i9uWR7AVOAkXFOfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMjcxNzQ0NDRaFw0yNjEyMjYxNzQ5NDRaMDMxMTAvBgNV BAMTKDAzNUMyMjdFRUFBQTNDNEMzNzMyMEQ4RUZGMEY1Mzg4NjFCMDJBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSydu0NZDUdPD8trL+NwbTDBxr gqj7FwbwQkqgQAi1mZZ8jkpy5ajkA5sbREO6RdSNty2aoZ7hQBJiuhApB439p4D3 E0Vhb3TW9zppW4cj9GFsm8cXQ+lOvcownJG+RorhXyvwsHFacWJrOcfxks4I3hOV rvbqO/7Bj/g1lUr1emHYgTOqBwuWP6krAY+4n+JzrVAEAz6AXEQdKd3uESeOAPOR mauptrkVV/CYZXD9ljENcdt2Vu4Udi7qE7IV6Dy+0caaRHVFfz2IFR4RLn1aR3Nz BWMWCl6+0eT2loZXKD1o44gLbObXSD01qiRtJD77TrCc+d2OVGLg40rAm4NtAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUA1wifuqqPEw3Mg2O/w9TiGGwKhgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDg3OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwNQYIKwYBBQUHAQcBAf8EJjAkMCIEAgACMBwwEgMH BCoPYoQFEAMHBCoPYoQFIAMGACoPYoQGMA0GCSqGSIb3DQEBCwUAA4IBAQArPmJH eCpR0pPL+o1P1R7yh8Chnp50Y2djZvwJjj14bT56ZO6r3lpqXdeWxxkLPYZUvGMB 8M77uWT8gUXuMhY0BImVQiQQ9O44DxYD5ggSMl4l7f2sq2fc06WMVhr0FrIWqbqe Kh6pfUqFP2KWN3/nPWMUFDpL2JUEVsUGxuylUmn65EBgfHvFvw1dUwWUFRkyK7ye +FX/eZQpxMEbVp9aaKzXd74e0h4fAQ+reHE29m7ghyAGkkx9q1cX6y6R4yLgOM38 iw6/K9fWWqSWPTPwAr04BZJuO4XbRqtO0EFtWt+DHaEkhhtZRtYMJor4ep8JxeFZ G+Dol1I2nhlXy4tE -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:59 2026 by rpki-client