This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213866.roa File: AS213866.roa (raw, json) Hash identifier: ZHqckGbABaNGzV0KeMCqWJFrsCa/AROFx3HR5V8RGos= Subject key identifier: FE:AE:D6:F8:1A:6F:EA:CB:77:FF:34:1B:81:15:EA:89:3D:36:CC:32 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 155A14AD2EB93168FCA4849B141E8F37EEC98504 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213866.roa Signing time: Thu 20 Nov 2025 21:34:43 +0000 ROA not before: Thu 20 Nov 2025 21:29:43 +0000 ROA not after: Thu 19 Nov 2026 21:34:43 +0000 asID: 213866 IP address blocks: 2a06:1281:a1::/48 maxlen: 48 2a0f:6284:4218::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5a:14:ad:2e:b9:31:68:fc:a4:84:9b:14:1e:8f:37:ee:c9:85:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 20 21:29:43 2025 GMT Not After : Nov 19 21:34:43 2026 GMT Subject: CN=FEAED6F81A6FEACB77FF341B8115EA893D36CC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:08:82:ed:69:01:8a:b8:a5:0a:ab:96:2e: 02:b8:5e:b1:3b:f4:8e:41:a1:ed:b2:3d:cb:ac:f1: c2:cf:27:48:cb:d2:94:37:08:88:98:63:c3:06:67: f4:00:9a:1a:7c:06:57:41:e6:1b:97:d4:c0:b7:77: ca:c9:32:bf:a0:af:09:36:de:a5:43:1d:cf:6b:65: f5:d0:06:09:4d:24:1c:1c:8f:81:d6:ff:82:7f:af: 8f:be:03:72:11:ff:ee:54:e2:de:e7:f1:fa:ac:2b: 2b:60:b8:3c:6a:70:a9:b7:91:f6:e6:40:f0:22:90: 9b:1b:50:54:1e:f5:5e:bb:d5:80:6b:a6:4f:e2:09: 0e:0c:0d:70:68:5c:97:35:3b:d2:76:6c:a7:f7:ec: 07:ff:04:a5:ec:98:cf:1e:22:2b:50:fd:b2:d2:b6: de:a8:5a:30:ec:6b:c4:27:2d:a3:34:c9:4e:eb:15: 8e:4d:0c:81:10:35:a6:43:6c:90:65:52:4a:43:c1: 73:99:b6:b0:8c:66:93:bd:d4:f8:00:bc:98:74:4c: 2c:ac:08:71:eb:d1:4b:39:83:ec:29:2e:1e:61:e0: 31:46:33:f6:60:4f:36:1b:f9:7b:f5:38:ee:f6:f5: 53:55:a2:10:d1:fb:e6:6e:6c:a8:f6:66:80:4e:a2: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AE:D6:F8:1A:6F:EA:CB:77:FF:34:1B:81:15:EA:89:3D:36:CC:32 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:a1::/48 2a0f:6284:4218::/48 Signature Algorithm: sha256WithRSAEncryption 0b:bc:05:26:07:bc:4a:4b:bf:fb:e4:cc:fa:9f:41:27:3b:a4: d7:db:0c:14:9a:bc:7b:f6:2a:bb:15:aa:d7:50:c7:ac:87:32: e2:df:7d:72:7e:8c:97:0a:e1:c2:8a:8f:62:bc:88:6d:49:e2: fa:46:f3:88:fb:78:60:41:bf:94:13:e2:58:c5:6b:8d:7e:75: 1c:5f:86:5c:05:eb:e8:f1:8c:1c:41:64:cf:96:0c:b3:9e:33: 93:b1:ee:14:8e:71:54:e3:5b:f1:18:d3:bf:fe:1e:ce:80:50: ef:6e:e2:4c:a6:ca:57:f9:ee:6c:e2:c2:5a:75:05:e9:c0:83: 2f:14:df:7c:08:68:f9:e2:37:57:9c:54:9f:6b:be:c7:27:3b: 85:e8:75:bf:88:b4:7a:d6:04:cf:ab:e0:41:69:46:24:02:11: b7:8b:f7:05:d2:ac:93:c4:fe:79:6b:bd:3e:03:84:e5:c5:37: a5:25:d5:b7:43:0d:b5:e0:f1:ff:4b:ec:55:c3:ce:7e:b8:a3: d4:c3:f0:4d:b0:42:98:26:29:86:f6:39:d1:d0:12:eb:ae:c6: 31:f8:37:d5:36:ac:c7:4f:47:f7:f6:6b:88:02:3a:cb:f7:0a: 6a:0a:95:5e:af:75:62:f1:29:d6:e8:1d:7c:3c:c6:13:1c:22: 00:4f:38:80 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUFVoUrS65MWj8pISbFB6PN+7JhQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMjAyMTI5NDNaFw0yNjExMTkyMTM0NDNaMDMxMTAvBgNV BAMTKEZFQUVENkY4MUE2RkVBQ0I3N0ZGMzQxQjgxMTVFQTg5M0QzNkNDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYygiC7WkBirilCquWLgK4XrE7 9I5Boe2yPcus8cLPJ0jL0pQ3CIiYY8MGZ/QAmhp8BldB5huX1MC3d8rJMr+grwk2 3qVDHc9rZfXQBglNJBwcj4HW/4J/r4++A3IR/+5U4t7n8fqsKytguDxqcKm3kfbm QPAikJsbUFQe9V671YBrpk/iCQ4MDXBoXJc1O9J2bKf37Af/BKXsmM8eIitQ/bLS tt6oWjDsa8QnLaM0yU7rFY5NDIEQNaZDbJBlUkpDwXOZtrCMZpO91PgAvJh0TCys CHHr0Us5g+wpLh5h4DFGM/ZgTzYb+Xv1OO729VNVohDR++ZubKj2ZoBOon4zAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU/q7W+Bpv6st3/zQbgRXqiT02zDIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM4NjYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq BhKBAKEDBwAqD2KEQhgwDQYJKoZIhvcNAQELBQADggEBAAu8BSYHvEpLv/vkzPqf QSc7pNfbDBSavHv2KrsVqtdQx6yHMuLffXJ+jJcK4cKKj2K8iG1J4vpG84j7eGBB v5QT4ljFa41+dRxfhlwF6+jxjBxBZM+WDLOeM5Ox7hSOcVTjW/EY07/+Hs6AUO9u 4kymylf57mziwlp1BenAgy8U33wIaPniN1ecVJ9rvscnO4Xodb+ItHrWBM+r4EFp RiQCEbeL9wXSrJPE/nlrvT4DhOXFN6Ul1bdDDbXg8f9L7FXDzn64o9TD8E2wQpgm KYb2OdHQEuuuxjH4N9U2rMdPR/f2a4gCOsv3CmoKlV6vdWLxKdboHXw8xhMcIgBP OIA= -----END CERTIFICATE-----Generated at Sat Nov 22 21:54:31 2025 by rpki-client