This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212128.roa File: AS212128.roa (raw, json) Hash identifier: qtqyStzkB/3By6NkQdv2EPMj5l/qV5RCxys4CwvxGsA= Subject key identifier: 2F:65:0A:7D:77:E3:D3:C7:2B:6C:A7:AC:33:A2:13:85:8F:97:9A:D0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6476F94EED1F90223C146DC82D2F1FB905F606BB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa Signing time: Fri 12 Dec 2025 15:04:43 +0000 ROA not before: Fri 12 Dec 2025 14:59:43 +0000 ROA not after: Fri 11 Dec 2026 15:04:43 +0000 asID: 212128 IP address blocks: 2a09:54c6:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:76:f9:4e:ed:1f:90:22:3c:14:6d:c8:2d:2f:1f:b9:05:f6:06:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 12 14:59:43 2025 GMT Not After : Dec 11 15:04:43 2026 GMT Subject: CN=2F650A7D77E3D3C72B6CA7AC33A213858F979AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:09:8d:5e:ad:bb:a7:2e:b5:e4:cd:28:4c: f0:67:63:a0:35:cf:7a:b6:ee:85:7d:71:fc:3f:2a: 51:9a:a6:98:dc:ec:2a:23:7a:ab:05:4a:3e:10:9b: 30:4b:2b:df:67:1f:f5:37:de:99:85:02:93:42:e0: 2a:06:98:bf:e7:60:0e:90:6d:d7:44:48:25:5a:ad: 95:36:d8:c5:f1:8b:1d:ae:ad:50:30:3b:ae:8c:d7: af:ff:16:d3:86:0e:d9:5b:b1:df:3b:23:55:33:08: 32:3f:73:04:fb:48:16:6a:e3:da:a7:2e:e4:f4:e0: 55:f1:4b:11:2f:15:e8:07:57:ad:a5:74:3b:52:b5: fd:85:73:df:ba:f8:96:3c:84:5b:0e:c3:44:89:ad: 4a:c6:29:cb:47:b0:b6:45:3a:7f:2e:59:47:3d:b4: c4:04:8f:23:35:1f:a7:16:a4:14:d2:05:91:48:29: 07:95:00:03:b8:5f:6b:66:ef:62:b3:d6:1c:1d:f3: c4:f5:cc:a0:ef:c5:61:71:c6:1e:86:ab:8a:e4:e5: c8:35:f1:3e:b7:00:89:5c:45:e4:c9:6a:8f:55:42: 5f:2d:4c:fb:4f:e5:bb:33:07:b6:44:d9:75:23:01: 0b:dd:a2:e6:7b:56:76:d4:41:86:f2:5d:29:fb:fe: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:0A:7D:77:E3:D3:C7:2B:6C:A7:AC:33:A2:13:85:8F:97:9A:D0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:a000::/36 Signature Algorithm: sha256WithRSAEncryption 8c:2b:d6:54:dc:a9:08:96:3d:c5:55:8e:20:d2:2d:38:15:1f: e2:ef:2a:a9:c6:ca:a5:2d:3e:b3:27:c6:fc:83:fa:d3:67:e5: bd:7e:3e:db:9c:d8:3a:f0:11:7f:70:54:22:30:4a:56:29:a2: 59:81:17:14:9d:9d:15:49:7b:f9:9a:36:3b:91:58:fe:68:03: 52:39:13:62:8e:f5:88:07:40:20:43:cc:83:38:ac:02:22:02: 61:64:9c:25:36:5c:93:11:bd:f1:e5:b9:76:9e:67:97:2c:94: 53:b1:37:29:7a:ff:a2:8f:d1:1a:f9:db:0f:44:50:17:a9:fc: ff:08:38:46:21:77:c8:48:e1:f6:13:cf:03:c0:47:4f:a1:65: 7e:d6:6c:ad:df:f6:80:bc:dd:ea:40:5f:11:3b:f3:e7:a8:5d: 9e:62:80:39:40:6e:f6:f7:22:8d:5d:f0:50:72:68:89:ef:2a: 40:00:55:86:73:ca:e4:f5:45:b3:55:a3:0d:6f:74:ae:81:24: 99:9b:cd:ec:ab:d1:d0:7a:56:8f:c8:a4:ec:9c:88:89:13:b4: 90:ac:09:32:96:cd:26:22:32:ed:a2:25:ca:d8:71:0d:ff:cd: 49:ac:ca:d2:eb:a7:8a:f4:d8:71:2f:73:6d:b0:5b:32:2d:e5: a0:80:86:cf -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUZHb5Tu0fkCI8FG3ILS8fuQX2BrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMTIxNDU5NDNaFw0yNjEyMTExNTA0NDNaMDMxMTAvBgNV BAMTKDJGNjUwQTdENzdFM0QzQzcyQjZDQTdBQzMzQTIxMzg1OEY5NzlBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQAmNXq27py615M0oTPBnY6A1 z3q27oV9cfw/KlGappjc7CojeqsFSj4QmzBLK99nH/U33pmFApNC4CoGmL/nYA6Q bddESCVarZU22MXxix2urVAwO66M16//FtOGDtlbsd87I1UzCDI/cwT7SBZq49qn LuT04FXxSxEvFegHV62ldDtStf2Fc9+6+JY8hFsOw0SJrUrGKctHsLZFOn8uWUc9 tMQEjyM1H6cWpBTSBZFIKQeVAAO4X2tm72Kz1hwd88T1zKDvxWFxxh6Gq4rk5cg1 8T63AIlcReTJao9VQl8tTPtP5bszB7ZE2XUjAQvdouZ7VnbUQYbyXSn7/i5jAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUL2UKfXfj08crbKesM6IThY+XmtAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIxMjgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq CVTGoDANBgkqhkiG9w0BAQsFAAOCAQEAjCvWVNypCJY9xVWOINItOBUf4u8qqcbK pS0+syfG/IP602flvX4+25zYOvARf3BUIjBKVimiWYEXFJ2dFUl7+Zo2O5FY/mgD UjkTYo71iAdAIEPMgzisAiICYWScJTZckxG98eW5dp5nlyyUU7E3KXr/oo/RGvnb D0RQF6n8/wg4RiF3yEjh9hPPA8BHT6FlftZsrd/2gLzd6kBfETvz56hdnmKAOUBu 9vcijV3wUHJoie8qQABVhnPK5PVFs1WjDW90roEkmZvN7KvR0HpWj8ik7JyIiRO0 kKwJMpbNJiIy7aIlythxDf/NSazK0uunivTYcS9zbbBbMi3loICGzw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:29:14 2025 by rpki-client