This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214848.roa File: AS214848.roa (raw, json) Hash identifier: cGHTjsi5P6jjvnw0G8OVt6/nONG7h6YiOpkWBXlEj40= Subject key identifier: 5C:9B:9D:FC:9C:4E:5C:2D:1B:75:6C:59:0A:7C:C2:41:1B:AF:24:6A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 40AC49B159016476E53A1F1E7D2033E5B0267CFF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa Signing time: Sat 06 Dec 2025 16:10:57 +0000 ROA not before: Sat 06 Dec 2025 16:05:57 +0000 ROA not after: Sat 05 Dec 2026 16:10:57 +0000 asID: 214848 IP address blocks: 2a09:54c6:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ac:49:b1:59:01:64:76:e5:3a:1f:1e:7d:20:33:e5:b0:26:7c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 6 16:05:57 2025 GMT Not After : Dec 5 16:10:57 2026 GMT Subject: CN=5C9B9DFC9C4E5C2D1B756C590A7CC2411BAF246A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:05:f4:d0:8b:23:b6:64:42:ad:40:d4:84: 01:e0:70:1d:21:08:b1:13:0e:24:7f:f5:b9:29:ea: 34:81:e2:71:bb:bf:5f:58:c4:89:07:5f:9c:27:d7: 6f:f2:51:a5:0a:8b:e3:23:db:60:b3:83:fb:a3:94: 0b:6b:ce:a0:5d:86:a3:e4:3c:f6:f6:22:f2:ae:9d: 4d:5f:7b:74:e2:b6:98:c9:d6:d8:74:ac:ad:4a:40: bd:54:a6:80:6e:a5:20:f0:47:7a:c8:b7:07:2d:36: 1b:9c:02:d7:91:8c:f9:5b:5c:0f:e5:bf:0c:88:11: 7a:03:1e:40:81:6d:b1:21:81:2e:5a:57:16:3f:aa: 64:72:36:d5:c4:12:9d:fe:ad:c7:01:23:f4:38:2c: de:c2:6c:91:fb:8d:0c:32:9d:ce:ab:8a:f8:5c:90: e2:5f:d4:80:e2:a5:97:3d:61:72:a0:1e:c5:03:b5: ed:f4:7e:4e:8b:c4:60:75:3b:4b:b8:7f:4a:43:93: 8f:50:d9:f8:0b:64:f5:c9:aa:92:49:8d:26:1b:a8: fa:27:7e:ec:e6:c0:18:92:60:15:d4:ce:65:05:5c: 79:3c:ae:a8:74:ac:33:51:ba:30:16:87:f5:6e:b1: dc:bf:95:cf:5b:00:d2:be:a9:fa:dc:e4:89:00:66: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9B:9D:FC:9C:4E:5C:2D:1B:75:6C:59:0A:7C:C2:41:1B:AF:24:6A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:d000::/48 Signature Algorithm: sha256WithRSAEncryption 87:c2:96:35:25:6b:58:ff:68:6c:70:11:8b:2d:0e:ad:76:b3: f5:38:d6:04:5c:a8:6f:79:c9:13:ca:13:dc:97:c4:9b:c5:c4: 39:56:86:69:cf:86:4b:f3:15:86:c1:35:18:59:4c:a0:6e:5b: e1:31:da:c9:50:14:df:e4:84:db:57:68:89:47:f2:c5:fd:19: 9b:63:fe:58:15:56:a1:a9:24:54:06:b8:0c:3c:1c:8d:45:25: 36:b3:50:40:43:b3:a4:58:5f:9d:62:aa:30:eb:23:1b:4f:f9: 67:35:9e:9d:f5:0b:f9:0f:d8:77:ea:6a:b2:00:8e:7e:f5:a0: 10:5c:ca:0a:82:3b:41:9c:1f:ee:ed:aa:38:18:3d:4f:fe:ae: 09:82:5e:6a:02:f5:e3:44:7a:42:95:09:5f:65:ad:67:cf:27: 3c:bb:0b:00:c6:1b:e2:fc:2c:e7:99:33:23:7a:03:28:86:db: f9:1a:6f:6d:7e:9c:bc:26:bd:66:b6:84:69:f5:1c:b7:d3:39: df:92:1b:09:81:20:00:25:0a:4f:81:d2:91:0e:5b:61:c6:f8: 6b:fa:55:ce:3b:a8:ba:8c:05:a1:2d:59:51:c9:a7:1e:eb:84: 82:1f:98:b2:5f:9a:c6:07:6a:bc:5f:65:5e:6c:a8:fa:ab:5d: f8:03:38:18 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUQKxJsVkBZHblOh8efSAz5bAmfP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMDYxNjA1NTdaFw0yNjEyMDUxNjEwNTdaMDMxMTAvBgNV BAMTKDVDOUI5REZDOUM0RTVDMkQxQjc1NkM1OTBBN0NDMjQxMUJBRjI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6QX00IsjtmRCrUDUhAHgcB0h CLETDiR/9bkp6jSB4nG7v19YxIkHX5wn12/yUaUKi+Mj22Czg/ujlAtrzqBdhqPk PPb2IvKunU1fe3TitpjJ1th0rK1KQL1UpoBupSDwR3rItwctNhucAteRjPlbXA/l vwyIEXoDHkCBbbEhgS5aVxY/qmRyNtXEEp3+rccBI/Q4LN7CbJH7jQwync6rivhc kOJf1IDipZc9YXKgHsUDte30fk6LxGB1O0u4f0pDk49Q2fgLZPXJqpJJjSYbqPon fuzmwBiSYBXUzmUFXHk8rqh0rDNRujAWh/Vusdy/lc9bANK+qfrc5IkAZlsPAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUXJud/JxOXC0bdWxZCnzCQRuvJGowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ4NDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq CVTG0AAwDQYJKoZIhvcNAQELBQADggEBAIfCljUla1j/aGxwEYstDq12s/U41gRc qG95yRPKE9yXxJvFxDlWhmnPhkvzFYbBNRhZTKBuW+Ex2slQFN/khNtXaIlH8sX9 GZtj/lgVVqGpJFQGuAw8HI1FJTazUEBDs6RYX51iqjDrIxtP+Wc1np31C/kP2Hfq arIAjn71oBBcygqCO0GcH+7tqjgYPU/+rgmCXmoC9eNEekKVCV9lrWfPJzy7CwDG G+L8LOeZMyN6AyiG2/kab21+nLwmvWa2hGn1HLfTOd+SGwmBIAAlCk+B0pEOW2HG +Gv6Vc47qLqMBaEtWVHJpx7rhIIfmLJfmsYHarxfZV5sqPqrXfgDOBg= -----END CERTIFICATE-----Generated at Mon Dec 15 22:43:40 2025 by rpki-client