This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: HJQWbenbJtYHZtGOkA8G3vw9LP77a3Wfvf6lWvvxUvI=
Subject key identifier: 0E:61:75:AC:F6:F7:CF:4B:BF:23:04:73:9C:D3:B9:21:D4:3D:E1:39
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6C2A80E82176DEF2FE711BC5DB0190D545C17AA5
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Wed 19 Nov 2025 17:42:11 +0000
ROA not before: Wed 19 Nov 2025 17:37:11 +0000
ROA not after: Wed 18 Nov 2026 17:42:11 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a05:dfc3:f500::/40 maxlen: 48
2a05:dfc3:fd24::/48 maxlen: 48
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a09:54c6::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 128
2a0f:6280:10::/48 maxlen: 128
2a0f:6280:11::/48 maxlen: 128
2a0f:6280:12::/48 maxlen: 128
2a0f:6280:13::/48 maxlen: 128
2a0f:6280:14::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 128
2a0f:6280:16::/48 maxlen: 128
2a0f:6280:17::/48 maxlen: 128
2a0f:6280:18::/48 maxlen: 128
2a0f:6280:1a::/48 maxlen: 128
2a0f:6280:1b::/48 maxlen: 128
2a0f:6280:1c::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 128
2a0f:6280:1f::/48 maxlen: 128
2a0f:6283:1130::/44 maxlen: 44
2a0f:6283:1140::/44 maxlen: 44
2a0f:6283:1150::/44 maxlen: 44
2a0f:6283:6000::/36 maxlen: 36
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 11:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2a:80:e8:21:76:de:f2:fe:71:1b:c5:db:01:90:d5:45:c1:7a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 19 17:37:11 2025 GMT
Not After : Nov 18 17:42:11 2026 GMT
Subject: CN=0E6175ACF6F7CF4BBF2304739CD3B921D43DE139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:6d:59:50:a1:be:91:bf:aa:67:82:47:b7:
21:52:34:91:10:97:74:21:d6:cf:d1:5b:cc:f5:15:
db:e2:64:de:44:ec:4b:01:dc:fc:23:af:83:8b:8d:
23:61:dd:8d:9c:3f:6a:d9:99:0d:c4:7b:a6:a7:cc:
b8:4c:21:11:72:a7:a8:40:4d:4a:e3:39:39:0b:9d:
f8:86:6e:c3:ce:cd:f6:8e:46:10:f5:fc:9b:55:d4:
ac:78:a8:95:da:3c:97:71:ca:46:ea:b8:ed:bd:65:
43:69:8b:b1:5a:58:1c:5e:17:e7:62:22:e3:86:e6:
f9:b1:3c:9a:fd:2e:8d:7c:94:51:2b:c8:1c:eb:d4:
c2:fc:43:cf:4b:6f:cc:fd:31:f2:ee:32:32:1e:9f:
0d:d7:e7:34:6f:b0:47:91:12:0e:6c:c7:31:93:e6:
20:00:ba:e7:59:b0:3d:5c:8d:2c:4c:a1:4c:9a:62:
92:cd:62:15:f0:84:fe:8d:33:69:7d:57:1b:2e:aa:
9f:8e:82:3f:33:1f:fa:4e:3f:8d:96:a4:1f:fb:e5:
46:af:6e:1d:7d:1f:43:29:01:01:9b:cc:9d:f1:a8:
49:2b:af:81:1d:16:0d:6f:80:12:20:aa:df:9a:ce:
b6:95:38:1c:67:0d:31:41:88:55:ba:53:a3:22:87:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:75:AC:F6:F7:CF:4B:BF:23:04:73:9C:D3:B9:21:D4:3D:E1:39
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a05:dfc3:f500::/40
2a05:dfc3:fd24::/48
2a06:1281:40::/44
2a06:1281:1000::/36
2a09:54c6::/36
2a0f:6280:a::/48
2a0f:6280:10::-2a0f:6280:18:ffff:ffff:ffff:ffff:ffff
2a0f:6280:1a::-2a0f:6280:1d:ffff:ffff:ffff:ffff:ffff
2a0f:6280:1f::/48
2a0f:6283:1130::-2a0f:6283:115f:ffff:ffff:ffff:ffff:ffff
2a0f:6283:6000::/36
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
69:a7:6a:d4:8b:d2:9c:32:95:50:d5:2d:cf:f9:05:c8:4e:69:
53:16:52:86:82:d7:66:a3:89:79:35:2d:d1:c4:ff:23:64:77:
02:f7:18:d4:d2:4f:af:a2:47:a9:bd:f9:b3:23:f1:51:23:69:
63:5c:5e:90:29:db:b7:a2:5a:13:88:77:9a:e7:37:f2:2b:7d:
2a:f6:0d:77:1e:4c:02:40:dd:1e:7a:b1:54:6f:08:19:39:2d:
76:e0:d7:d5:55:bf:6c:47:2b:5e:86:c0:91:2e:23:63:ca:6b:
22:2d:ef:cb:7d:70:9b:0d:f8:d2:8c:0e:03:2b:76:1b:9d:8a:
50:2e:b9:fe:1c:b4:26:75:79:e6:83:a0:02:35:83:49:66:11:
b9:9b:bc:a0:44:35:ae:d2:3c:fa:4b:0e:2b:12:9c:be:20:37:
b9:3a:01:b5:c3:5f:66:37:37:22:04:50:ba:fb:8c:fa:bc:a5:
5c:8e:db:41:8b:be:96:ea:47:35:ef:28:95:14:f1:da:cc:38:
ef:4e:ae:5b:11:0a:76:87:fc:4d:a6:be:4d:d8:c5:f2:7e:ce:
f3:77:cf:b6:2c:1c:22:91:79:c2:6a:39:94:0e:f8:9a:6c:4d:
35:75:7f:2f:51:67:90:cd:16:ea:f3:57:f4:91:de:a3:c5:0d:
59:8a:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:56:00 2025 by rpki-client