This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215265.roa
File: AS215265.roa (raw, json)
Hash identifier: Fb5f4wua3j1iNrGktbGkyLZYRjmcwMSxoNjIBrmOkwg=
Subject key identifier: E8:29:63:CE:A2:28:AB:17:F5:31:46:17:A8:7D:E4:70:CC:B1:D0:11
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 21256E423E85542A57D69CAC0380023CC40AB120
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
Signing time: Tue 11 Nov 2025 17:57:33 +0000
ROA not before: Tue 11 Nov 2025 17:52:33 +0000
ROA not after: Tue 10 Nov 2026 17:57:33 +0000
asID: 215265
IP address blocks: 2a06:1284::/32 maxlen: 32
2a0f:6284:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 11:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:25:6e:42:3e:85:54:2a:57:d6:9c:ac:03:80:02:3c:c4:0a:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 11 17:52:33 2025 GMT
Not After : Nov 10 17:57:33 2026 GMT
Subject: CN=E82963CEA228AB17F5314617A87DE470CCB1D011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:f8:88:00:b0:f6:10:8c:54:86:17:02:d0:
64:f9:81:a5:9b:25:4d:b5:da:a1:2d:ac:93:6a:fd:
bb:d8:2c:e1:ac:0a:2b:e0:78:a1:3c:89:fc:73:e2:
fa:d9:d7:3c:4f:1b:28:98:6c:3f:6a:54:9f:39:22:
95:13:f1:b3:2e:a4:d6:a1:93:92:c5:06:92:ec:e4:
2c:83:0f:68:6d:22:c7:73:1c:0b:af:9c:94:bd:8a:
00:62:34:68:25:7a:8e:b6:bf:0c:b9:e4:86:61:1e:
ec:0e:d1:99:7d:79:20:f6:d7:c1:19:01:88:59:68:
f5:56:86:7e:c6:1c:24:cf:c5:9b:4a:b0:3e:54:f5:
eb:f2:65:a9:f9:60:ea:68:62:5e:99:cf:00:17:1e:
61:d9:6e:4a:88:b2:10:a6:bc:88:60:ed:c0:09:1e:
ad:02:6a:36:a5:e0:6d:63:22:95:45:ce:70:45:69:
4e:cc:6a:c3:78:63:e5:8f:62:b8:b3:37:67:69:3a:
9b:2a:d4:f8:bc:ec:4c:25:60:08:b7:3e:37:e6:28:
48:0e:ef:9c:09:55:18:6e:85:92:22:fd:25:25:1a:
0a:d0:0e:fc:dd:b2:87:b8:94:3e:99:c2:42:0d:20:
50:88:0b:59:9b:56:2f:49:a5:54:24:97:53:d1:ee:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:63:CE:A2:28:AB:17:F5:31:46:17:A8:7D:E4:70:CC:B1:D0:11
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/32
2a0f:6284:3000::/36
Signature Algorithm: sha256WithRSAEncryption
54:d8:9b:a3:2c:7f:99:e9:6b:48:5b:8b:4e:87:4a:c7:f3:13:
54:91:4d:d2:59:05:61:ff:7c:19:c5:c9:17:4e:68:b0:39:d9:
c5:fc:df:18:d3:0f:30:dc:27:01:1f:67:be:3e:38:5a:e6:cb:
38:44:65:25:2d:5b:80:80:b4:91:98:42:e3:4d:18:51:2b:6f:
94:14:0f:a4:bb:d0:fe:f0:d6:60:d7:6f:a3:85:e4:5e:ed:14:
c5:b6:03:96:25:f2:67:09:e5:93:29:c2:7c:b6:e7:9f:e0:ef:
a9:1b:8d:1e:f4:47:f4:6a:3b:d0:ab:88:5d:61:87:3d:66:8f:
46:d5:3f:4f:2d:a6:86:a2:68:db:d0:83:c3:f0:ee:ad:94:56:
47:c1:37:23:5c:7b:50:0e:67:3d:00:32:3f:19:2b:18:11:1b:
ad:f2:47:f2:ad:f2:e7:ce:30:c4:3f:53:28:55:02:ee:00:60:
e2:8a:39:64:1c:9b:79:e3:f8:e2:bc:c6:12:f9:90:38:cf:f5:
a4:d9:e8:26:70:78:a1:f8:f7:f2:dd:f4:14:d0:b4:69:9b:da:
f7:a4:8a:06:21:f1:13:de:a5:77:d3:06:0c:67:31:9f:6e:4f:
e3:88:70:50:d0:22:eb:92:dd:87:1c:28:4c:6b:d7:43:dc:70:
bf:0d:70:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:31 2025 by rpki-client