This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209693.roa
File: AS209693.roa (raw, json)
Hash identifier: bl1Rz01c/MRBvaqJXvP/nSRaMAXGe3wnMj9e2UHPbEQ=
Subject key identifier: 53:3D:C9:F7:73:08:15:06:BC:4F:16:E8:C8:C7:83:BC:22:4A:DA:E4
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 1AC7CE22014A04094B077B87799D62A522E38542
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa
Signing time: Sat 31 Jan 2026 00:24:36 +0000
ROA not before: Sat 31 Jan 2026 00:19:36 +0000
ROA not after: Sat 30 Jan 2027 00:24:36 +0000
asID: 209693
IP address blocks: 2a0f:6284:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c7:ce:22:01:4a:04:09:4b:07:7b:87:79:9d:62:a5:22:e3:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jan 31 00:19:36 2026 GMT
Not After : Jan 30 00:24:36 2027 GMT
Subject: CN=533DC9F773081506BC4F16E8C8C783BC224ADAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:4b:59:73:2e:e5:1c:7a:e6:cc:94:c3:f7:
84:f2:ff:54:2a:6e:29:4b:f6:0c:87:67:b0:5d:0d:
85:33:d6:bd:37:a5:c1:7f:c0:4e:fb:e5:e1:b6:a6:
0c:e2:cd:36:34:90:ca:47:06:37:02:77:f6:3e:3c:
4a:70:56:f5:b6:20:e9:2a:3d:2c:33:91:a4:b3:e6:
55:81:2d:24:73:7c:75:4a:19:c2:8f:33:67:0e:af:
46:da:7f:ee:a2:5f:2b:27:f0:55:fe:fe:6a:2f:e5:
97:3c:0b:dc:96:4c:07:b9:13:c6:a5:de:28:c8:23:
1c:98:60:44:a5:37:3b:1b:ab:3e:3f:42:5c:c7:da:
68:e6:f7:a7:37:b9:6a:79:9c:15:ea:25:0a:e4:0b:
e6:ae:3b:ac:e3:db:31:fb:eb:43:76:27:6a:b9:2a:
3a:fa:90:e9:48:c8:f8:df:d6:d5:8b:ae:8a:77:7d:
42:61:b7:1a:9f:69:3e:61:dc:92:95:d9:87:98:54:
0e:6f:a0:b1:73:cb:96:8c:a3:75:5a:40:97:81:34:
db:be:40:59:a5:ee:f3:8c:25:62:43:7a:37:28:76:
28:39:1f:16:db:1f:8d:83:00:b1:80:50:d0:b9:e8:
57:03:6b:7b:23:86:e9:f5:47:0e:4d:9d:b3:07:3a:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:C9:F7:73:08:15:06:BC:4F:16:E8:C8:C7:83:BC:22:4A:DA:E4
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:7000::/36
Signature Algorithm: sha256WithRSAEncryption
21:b4:56:1e:fe:ed:31:41:e5:6b:e6:f8:ab:7d:16:eb:0f:a7:
ce:d8:dd:f9:80:24:c4:09:4d:50:ba:30:0e:33:b4:a6:06:85:
5f:b3:c2:78:b5:5f:3f:ed:4d:2d:8a:e5:c5:49:f8:b8:ee:66:
37:2e:e8:13:04:d7:76:ca:c8:74:9d:02:89:44:58:28:80:e9:
11:78:d0:25:4c:2c:79:5d:ee:bd:3c:79:94:6a:34:fc:0c:b6:
11:f4:e1:c8:03:de:97:db:43:fe:cb:ff:01:c5:ce:6c:df:3b:
14:04:44:d9:36:02:ed:45:cb:70:90:f9:90:3a:fb:ff:e0:a9:
c7:fa:a9:39:27:7b:d0:9f:d9:8b:d9:3e:e1:81:40:a3:ff:1d:
c1:9a:37:ff:b5:e0:2e:5a:9c:d9:8c:dc:11:d6:35:c4:c1:79:
ce:7d:1d:ba:43:27:05:09:85:56:fb:41:60:39:82:5e:0b:50:
e5:88:97:43:4a:af:08:d7:d6:4a:ed:8e:cb:f3:b0:f3:80:02:
ae:15:1c:49:39:4c:3b:75:b0:ca:bc:12:2b:66:b9:7e:59:90:
a3:ae:88:7e:ba:22:37:36:b8:18:d3:87:a6:bf:75:00:78:77:
92:e4:49:19:6e:c6:b9:3a:83:72:2a:db:9c:f8:89:b3:e6:21:
5a:46:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:10:47 2026 by rpki-client