This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6530303a3a2f34302d3430203d3e2030.roa
File: 323630323a663936643a6530303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier: WIbtgMQGwNwKXJ6a1cGmGvDnAInzATMU2lrxKcEiK5I=
Subject key identifier: 48:31:CF:16:4D:0B:16:83:B3:94:7B:05:EC:AF:D8:39:8D:63:CF:5B
Certificate issuer: /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial: 0CDC25CC2CA693C940C8B68D222194784EA79119
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6530303a3a2f34302d3430203d3e2030.roa
Signing time: Fri 12 Dec 2025 15:04:25 +0000
ROA not before: Fri 12 Dec 2025 14:59:25 +0000
ROA not after: Fri 11 Dec 2026 15:04:25 +0000
asID: 0
IP address blocks: 2602:f96d:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 03:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:dc:25:cc:2c:a6:93:c9:40:c8:b6:8d:22:21:94:78:4e:a7:91:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Validity
Not Before: Dec 12 14:59:25 2025 GMT
Not After : Dec 11 15:04:25 2026 GMT
Subject: CN=4831CF164D0B1683B3947B05ECAFD8398D63CF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:69:30:8d:55:92:63:ad:cf:aa:4e:0d:d9:
b2:64:e2:31:c2:f9:56:fa:2e:1b:00:81:a2:90:27:
0c:f0:91:f5:61:3f:c4:4b:a2:45:fb:1c:58:12:17:
f5:13:e0:04:df:83:6e:3a:f4:22:7d:18:44:ee:11:
39:ad:8b:89:0b:70:74:93:6a:14:07:89:d0:4d:85:
4f:fe:9c:53:20:7d:49:89:2f:44:9f:be:aa:71:34:
6b:47:d9:c2:da:00:03:33:a9:82:18:08:11:c9:fd:
84:98:be:18:a8:08:ae:93:fc:ea:c8:bf:ff:a6:26:
49:d4:74:46:dc:16:dd:60:79:15:ec:c2:69:5d:4e:
96:f9:63:c5:29:6f:cc:7b:45:70:b1:e2:fe:8b:49:
c2:25:ae:b0:ef:a6:d5:ba:83:96:e7:7c:a7:b3:77:
3d:a2:aa:2c:08:70:4d:76:ed:5b:3d:39:21:7b:0b:
e8:33:52:ce:39:89:0c:fe:aa:c4:0a:95:2a:43:9f:
08:f8:95:f3:14:e9:06:c7:91:83:75:22:59:4d:73:
e3:02:77:8e:92:b1:6a:a1:77:9e:77:5c:93:34:de:
ae:0f:92:4d:ab:1d:44:2a:b8:c2:74:96:bd:94:91:
d1:59:7d:bf:ec:c2:61:d2:ed:a2:44:6a:df:6a:e8:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:CF:16:4D:0B:16:83:B3:94:7B:05:EC:AF:D8:39:8D:63:CF:5B
X509v3 Authority Key Identifier:
keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6530303a3a2f34302d3430203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:e00::/40
Signature Algorithm: sha256WithRSAEncryption
bb:2e:88:69:c3:54:d6:d9:4b:ab:01:25:25:d4:0f:d1:1e:4e:
af:8f:5b:a3:23:5e:45:45:56:1c:3f:70:31:82:89:1f:b9:b3:
91:96:ad:29:d7:03:2f:f1:79:fc:e0:ef:89:b1:84:91:31:91:
89:48:4b:53:fd:4d:e7:af:c6:70:54:93:01:85:62:33:87:c3:
72:19:c5:84:33:34:1b:52:cd:5f:08:df:d9:d6:7a:0a:bf:c2:
36:1d:9d:ed:19:06:10:df:78:b2:a9:cc:ae:0a:91:72:9d:20:
ad:83:04:36:25:bb:23:68:05:c9:86:78:d6:dd:ea:90:0d:ab:
c1:b3:99:e8:7e:3b:1d:a5:9f:65:c2:4f:f9:87:2f:f9:fb:e6:
5d:ef:10:48:03:25:17:0d:f2:e6:8d:d5:c1:50:4b:5f:7f:9b:
30:9c:17:40:cb:43:54:43:fb:0a:0c:c3:98:f7:8b:9d:97:88:
82:04:f0:06:97:ff:95:9b:fa:10:96:8e:9d:af:66:5f:5c:e0:
50:ba:9a:ec:99:71:88:f7:d1:74:8b:10:23:1d:47:ee:f6:7c:
34:76:33:c6:12:15:62:e4:8a:80:5c:01:43:d4:5d:5d:c9:ea:
fd:b0:77:fd:17:29:80:12:0e:a4:a3:8a:64:77:03:6a:d7:f2:
a7:44:bd:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:40 2025 by rpki-client