This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: sGpR5ZasEWdsU4P7Wnh4QKqs6ogXD3k+6sDAcHlkzMU=
Subject key identifier: 58:96:BF:FD:2A:56:E2:26:8E:62:04:73:BB:C8:D5:3A:D7:04:F9:AF
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 1B26D343E2311D8132C9D2CE748020B93DD4046F
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa
Signing time: Wed 07 Jan 2026 17:50:50 +0000
ROA not before: Wed 07 Jan 2026 17:45:50 +0000
ROA not after: Wed 06 Jan 2027 17:50:50 +0000
asID: 40676
IP address blocks: 2a0f:6284:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:26:d3:43:e2:31:1d:81:32:c9:d2:ce:74:80:20:b9:3d:d4:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jan 7 17:45:50 2026 GMT
Not After : Jan 6 17:50:50 2027 GMT
Subject: CN=5896BFFD2A56E2268E620473BBC8D53AD704F9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:12:6f:ff:fb:05:69:61:fa:2e:15:59:3b:
23:87:5f:04:08:51:0a:99:7b:3b:c9:af:4d:a6:5d:
e1:c5:e3:52:86:6e:93:92:b1:c8:76:a4:dd:a0:2d:
f2:30:ae:f3:4d:ca:62:3d:21:46:59:d3:78:7e:5f:
db:f0:fd:34:ae:91:b6:2e:b0:e2:8e:32:ed:11:ff:
e7:04:d9:13:6a:8e:5d:96:61:90:c8:c7:af:27:80:
02:28:50:b5:74:a8:8d:0c:35:67:c5:cc:9b:ca:91:
85:19:88:98:87:33:95:8d:19:46:1e:02:cf:aa:59:
7c:96:63:8b:a2:5d:bd:a4:b8:86:aa:62:93:57:bf:
d6:66:13:e5:88:18:82:96:66:9f:3c:13:5e:85:fb:
8c:e8:c6:97:b8:a9:17:85:e8:79:b8:f0:56:4c:99:
91:a3:48:be:cd:6f:aa:7b:80:e5:11:de:7c:f5:36:
af:8b:0c:da:4c:5d:d9:05:46:7c:7a:8a:f0:b1:f3:
5c:19:08:41:87:3b:1e:1e:68:ac:4f:8e:8d:4c:ce:
02:46:30:35:1a:b7:da:12:26:a3:ac:57:d9:8c:d6:
21:11:ad:53:be:38:f3:8c:db:dd:24:72:b8:f4:5d:
6b:6a:06:7c:52:4b:fc:5f:f6:c5:6b:79:d9:89:94:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:BF:FD:2A:56:E2:26:8E:62:04:73:BB:C8:D5:3A:D7:04:F9:AF
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:c000::/36
Signature Algorithm: sha256WithRSAEncryption
93:78:23:d5:a0:e5:79:62:a7:43:9e:74:3e:4e:75:f4:2c:d2:
0d:e9:5e:7c:a4:08:a8:35:90:45:f2:73:cf:95:3d:f9:33:67:
0c:f7:25:a0:c8:b3:32:04:30:ad:fd:f0:d6:2d:fe:a8:a4:91:
d6:1d:72:a0:8c:56:32:86:d4:48:a1:e0:3a:e1:4e:73:ed:21:
e6:b9:60:39:7f:a9:33:4c:84:8d:8a:ec:aa:39:5d:ac:59:49:
f8:8b:56:1d:aa:d2:53:40:d7:e5:9f:ac:22:0e:ab:64:45:17:
b4:aa:83:9c:25:4c:cb:47:97:b4:d6:42:18:52:e5:1c:8c:0d:
c1:37:33:b4:8b:56:ed:64:63:6e:54:de:4e:5b:c2:23:97:10:
aa:a8:47:86:be:94:a0:a1:be:e6:d2:ca:f2:1a:0c:d9:56:dc:
ae:3d:e6:ef:d8:7d:81:0f:a6:f4:c6:88:2b:a0:05:1d:f0:73:
e1:fb:cc:b9:4d:20:c4:56:74:da:6d:0c:72:fe:83:4f:6f:fd:
67:af:3e:46:18:c8:31:ae:5d:6f:5b:18:11:8c:3c:df:51:d0:
81:d7:59:2a:3c:15:a1:bb:0b:6c:30:dc:9e:5d:7c:2f:e1:6c:
9d:c1:f1:33:fe:42:a9:fe:ac:65:2e:6d:3f:92:ea:c7:59:b6:
1b:4b:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:04 2026 by rpki-client