This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208915.roa File: AS208915.roa (raw, json) Hash identifier: hb85UR6KYK+CSRN1xGDXEoG/Pzd6B9s+620nhC+j7hw= Subject key identifier: DC:B4:A7:F1:2B:BA:C2:0A:8C:0D:52:8B:8D:1F:85:DE:6B:E8:B6:C1 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 20C7BFF2FC82301A0C99794DCA2DB09BF2DF560E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa Signing time: Wed 12 Nov 2025 02:05:49 +0000 ROA not before: Wed 12 Nov 2025 02:00:49 +0000 ROA not after: Wed 11 Nov 2026 02:05:49 +0000 asID: 208915 IP address blocks: 2a0f:6284:700::/40 maxlen: 40 2a0f:6284:701::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c7:bf:f2:fc:82:30:1a:0c:99:79:4d:ca:2d:b0:9b:f2:df:56:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 12 02:00:49 2025 GMT Not After : Nov 11 02:05:49 2026 GMT Subject: CN=DCB4A7F12BBAC20A8C0D528B8D1F85DE6BE8B6C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:17:c0:7f:23:1b:ce:02:3c:3f:a0:4f:b5: 94:d8:8b:d9:df:92:1c:37:91:4b:85:ab:ae:d8:18: bc:d5:f6:35:b4:29:0f:c2:f3:1b:e9:e5:60:c1:26: 31:6a:2b:7a:ba:51:c2:f5:c2:a3:a1:43:a0:0a:8b: d5:d4:ee:ba:13:43:a2:55:aa:66:5e:7b:84:66:8e: 65:de:98:4e:c6:ef:53:82:64:71:4e:8d:a0:ba:a0: 5b:03:8d:37:07:a9:50:e6:ac:4c:56:6a:71:ad:53: 30:49:fc:fd:aa:f3:8e:1e:69:49:0b:be:16:0e:cf: 3a:ea:bd:fa:ae:cc:54:72:11:13:ad:5d:57:ec:5e: d2:6d:18:81:86:20:a5:2f:2d:60:ac:30:41:ed:04: 38:11:7b:a3:e1:bb:02:4d:0c:19:ce:a3:62:25:ec: 86:e6:59:70:ba:4b:29:0d:9c:d7:ac:6f:75:a8:6c: 37:9d:b7:4a:8a:fa:1c:09:b8:41:56:2e:26:82:3f: 6c:9d:b4:bf:a0:4b:1a:32:56:c8:ba:61:8a:81:43: 8e:c9:39:b0:bf:39:74:cd:90:d8:95:85:80:6a:72: e4:b5:fc:e4:5f:6b:0c:a5:c8:7e:4a:38:79:48:38: cc:67:fb:cc:bb:df:11:3c:20:5e:61:11:8c:31:21: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B4:A7:F1:2B:BA:C2:0A:8C:0D:52:8B:8D:1F:85:DE:6B:E8:B6:C1 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:700::/40 Signature Algorithm: sha256WithRSAEncryption 7a:87:9d:c3:f8:9e:08:eb:2b:c8:6c:fb:43:37:7d:cd:4b:dc: f8:13:4a:76:0e:5c:7e:63:c5:a9:d1:7e:f2:22:e9:5a:b6:49: e9:9b:9c:9f:9c:93:8e:4a:cd:64:35:84:6e:a2:42:76:c4:29: 69:45:68:ae:48:8f:fc:b6:a3:12:e5:50:89:a1:b2:2a:bd:11: 1b:43:f1:6e:3f:7e:14:b7:e0:95:38:73:bf:f0:ea:b1:15:a9: b2:4d:bd:b7:1a:51:82:f1:8a:29:96:7e:02:c3:f6:0a:36:62: db:52:7a:fb:e5:8d:7e:71:70:65:5f:60:94:c0:df:07:bc:ef: f7:23:ac:97:7e:75:4f:64:cd:60:cd:7c:46:b0:db:3d:7a:76: f6:89:02:e9:69:a4:f9:a8:3e:e9:2a:30:92:a3:4b:41:d3:60: 1d:99:7a:b0:e8:9b:a7:21:bc:45:ad:e4:17:69:7c:ab:e6:cc: 57:e9:52:45:d8:70:95:db:13:60:31:bf:da:6d:89:ef:e5:43: a5:8f:f7:61:f3:00:05:56:fb:41:1f:94:63:08:29:36:c4:02: db:ac:8a:ca:78:3c:e6:59:fa:46:c1:ab:ba:64:0d:51:16:85: 6f:4a:99:77:b8:34:57:4b:d8:74:24:a2:d1:bc:d4:16:d4:80: 7c:c0:b5:d3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUIMe/8vyCMBoMmXlNyi2wm/LfVg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMTIwMjAwNDlaFw0yNjExMTEwMjA1NDlaMDMxMTAvBgNV BAMTKERDQjRBN0YxMkJCQUMyMEE4QzBENTI4QjhEMUY4NURFNkJFOEI2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8BfAfyMbzgI8P6BPtZTYi9nf khw3kUuFq67YGLzV9jW0KQ/C8xvp5WDBJjFqK3q6UcL1wqOhQ6AKi9XU7roTQ6JV qmZee4RmjmXemE7G71OCZHFOjaC6oFsDjTcHqVDmrExWanGtUzBJ/P2q844eaUkL vhYOzzrqvfquzFRyEROtXVfsXtJtGIGGIKUvLWCsMEHtBDgRe6PhuwJNDBnOo2Il 7IbmWXC6SykNnNesb3WobDedt0qK+hwJuEFWLiaCP2ydtL+gSxoyVsi6YYqBQ47J ObC/OXTNkNiVhYBqcuS1/ORfawylyH5KOHlIOMxn+8y73xE8IF5hEYwxIV2tAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU3LSn8Su6wgqMDVKLjR+F3mvotsEwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDg5MTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEBzANBgkqhkiG9w0BAQsFAAOCAQEAeoedw/ieCOsryGz7Qzd9zUvc+BNKdg5c fmPFqdF+8iLpWrZJ6Zucn5yTjkrNZDWEbqJCdsQpaUVorkiP/LajEuVQiaGyKr0R G0Pxbj9+FLfglThzv/DqsRWpsk29txpRgvGKKZZ+AsP2CjZi21J6++WNfnFwZV9g lMDfB7zv9yOsl351T2TNYM18RrDbPXp29okC6Wmk+ag+6SowkqNLQdNgHZl6sOib pyG8Ra3kF2l8q+bMV+lSRdhwldsTYDG/2m2J7+VDpY/3YfMABVb7QR+UYwgpNsQC 26yKyng85ln6RsGrumQNURaFb0qZd7g0V0vYdCSi0bzUFtSAfMC10w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:54:28 2025 by rpki-client