This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214040.roa
File: AS214040.roa (raw, json)
Hash identifier: 0ykGg+sCGPaQz2X5TYj494FZqz3OHqkPAXVQNrUMB/4=
Subject key identifier: DE:CB:09:2E:8C:68:6D:C7:DD:AD:70:C7:18:2D:C2:FD:A7:FD:E5:B7
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3130870AB43792C750F05794669BAC7A3B893A42
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
Signing time: Fri 02 Jan 2026 13:38:34 +0000
ROA not before: Fri 02 Jan 2026 13:33:34 +0000
ROA not after: Fri 01 Jan 2027 13:38:34 +0000
asID: 214040
IP address blocks: 2a06:1281:8000::/36 maxlen: 36
2a09:54c6:3000::/36 maxlen: 36
2a09:54c6:b000::/36 maxlen: 36
2a09:54c6:c000::/36 maxlen: 44
2a09:54c6:e000::/36 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:30:87:0a:b4:37:92:c7:50:f0:57:94:66:9b:ac:7a:3b:89:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jan 2 13:33:34 2026 GMT
Not After : Jan 1 13:38:34 2027 GMT
Subject: CN=DECB092E8C686DC7DDAD70C7182DC2FDA7FDE5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:99:a2:bc:f4:5e:4b:69:3d:e8:03:a1:38:
50:88:28:e9:9d:d6:a2:83:ec:f4:d7:30:e1:ed:d0:
d8:50:64:cc:46:74:21:f9:e6:ed:be:30:42:00:8d:
ea:59:b4:1f:36:cf:31:d8:9f:0f:87:78:5c:73:d9:
76:44:53:83:c2:51:68:63:ed:75:c8:31:c9:93:c6:
ad:9a:63:17:2b:5e:44:a3:00:f6:7a:d1:04:bf:e2:
6b:1d:dd:08:2a:59:6e:f9:22:79:c7:1d:9e:db:10:
87:35:8e:5b:38:c4:f0:29:20:6f:fd:e0:c1:a6:c3:
e0:80:14:d9:c1:22:b3:f6:af:01:82:53:50:5f:0d:
bf:07:94:de:0b:4c:af:19:08:fa:8d:0c:11:f1:c3:
61:78:5c:fb:3c:74:53:e9:25:27:95:7e:38:52:5e:
8c:80:2c:cd:48:f8:64:3c:2c:9e:fc:09:61:4a:d2:
d4:42:37:ff:ee:50:85:9a:15:0b:97:11:b1:e8:6f:
bf:c4:20:6f:5a:ad:0b:e5:fd:26:66:0b:57:b3:e1:
f9:6b:6d:7c:b5:af:63:d8:82:cf:75:8c:6a:05:3c:
f5:dd:9d:69:e6:ca:eb:5a:04:76:98:19:68:0e:3d:
bf:0c:46:d8:7d:56:08:67:c4:43:eb:aa:82:05:9b:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:09:2E:8C:68:6D:C7:DD:AD:70:C7:18:2D:C2:FD:A7:FD:E5:B7
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:8000::/36
2a09:54c6:3000::/36
2a09:54c6:b000::-2a09:54c6:cfff:ffff:ffff:ffff:ffff:ffff
2a09:54c6:e000::/36
Signature Algorithm: sha256WithRSAEncryption
6f:ff:4d:28:5b:f8:ad:a3:07:43:b1:75:a5:ad:35:ed:ff:63:
b7:90:6d:57:38:61:ce:73:ed:74:c3:90:98:be:56:c9:6e:84:
60:8a:bf:96:6f:0e:e9:c4:4a:41:a2:92:7a:57:8d:39:61:4e:
e8:88:15:47:c8:a3:b8:22:2d:97:47:f9:98:49:23:53:16:ac:
3f:0a:c0:50:01:ca:1d:83:f2:24:98:a4:48:56:5f:a3:24:fe:
ef:c9:f2:c9:4a:74:12:23:76:80:ee:6e:fc:2b:25:f1:f1:3e:
1e:cf:66:82:cf:3d:d3:38:bf:38:44:f1:65:d8:ca:a0:ae:a5:
a4:15:75:d4:2d:af:1d:fe:c9:d9:6f:d1:b7:58:3f:6a:10:65:
d0:3a:19:7d:9e:83:6f:8b:56:67:de:20:c3:85:da:7e:c0:70:
e2:f5:0d:85:1b:a9:27:70:5f:a0:3b:55:f8:24:06:af:bf:ce:
4a:21:c3:90:fe:0a:db:37:d8:58:f7:49:96:1a:ad:7c:18:0b:
c1:5f:4b:1e:6b:8f:21:67:34:c8:8c:65:ef:85:cd:ac:6b:55:
8b:a7:5d:43:59:7e:02:a8:ee:dd:54:9e:84:b8:d5:1a:7e:da:
33:eb:f6:c5:9a:ae:22:a0:91:bc:d2:e5:88:9f:70:e2:ce:a2:
a8:f7:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:14 2026 by rpki-client