This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200950.roa
File: AS200950.roa (raw, json)
Hash identifier: XxDvFcbSdJCgL8i2m9J6yM6LpblPdMPiZgRjYsSQByo=
Subject key identifier: AE:2E:5E:9B:E8:88:03:6C:1A:10:54:51:BC:C1:66:F7:1A:9F:FA:78
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 424A0E0883256E2D3702B175FEA8CAEB1AEAF165
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa
Signing time: Wed 07 Jan 2026 14:14:25 +0000
ROA not before: Wed 07 Jan 2026 14:09:25 +0000
ROA not after: Wed 06 Jan 2027 14:14:25 +0000
asID: 200950
IP address blocks: 2a06:1281:70::/44 maxlen: 44
2a06:1281:70::/44 maxlen: 48
2a0f:6284:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4a:0e:08:83:25:6e:2d:37:02:b1:75:fe:a8:ca:eb:1a:ea:f1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jan 7 14:09:25 2026 GMT
Not After : Jan 6 14:14:25 2027 GMT
Subject: CN=AE2E5E9BE888036C1A105451BCC166F71A9FFA78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:de:4e:cd:d8:ce:cf:1a:dd:fc:f5:3e:6e:
97:ad:cc:f0:96:c8:a7:a1:0d:60:40:c8:7e:27:7e:
1d:a9:27:d8:43:37:6b:26:54:1e:02:ec:4b:19:4b:
05:d5:97:0d:4d:22:4d:a2:8d:11:56:fb:ff:51:d3:
37:84:3e:ed:50:80:f8:ba:46:83:e7:76:ae:55:31:
30:fa:44:14:92:2e:0e:72:ad:3a:58:99:b8:2d:a6:
30:c9:53:2b:1b:c4:8f:ef:21:9a:72:03:d7:86:78:
59:96:e3:77:aa:72:10:61:e7:ff:4c:25:41:83:d1:
2a:e3:5b:63:f6:8d:26:4d:9d:4f:7e:13:53:aa:e5:
c1:c4:ce:28:f5:8d:d3:01:13:e3:99:cb:76:1f:24:
d6:43:16:61:b6:b7:1e:cc:53:b8:c6:d4:19:d4:ac:
b0:3e:a0:60:e3:bd:f9:f2:88:2b:87:7a:c7:65:20:
c8:4c:1b:9c:cd:b8:5e:da:d1:6a:01:d7:c4:55:9d:
8f:28:5b:8c:c9:06:09:ee:72:1b:04:4b:89:9b:c5:
25:22:09:a7:65:e3:14:73:d3:57:e5:5e:de:2f:37:
6d:6b:f2:b2:0b:cf:08:e6:3e:10:56:6d:1e:27:bf:
1a:75:bb:4f:45:83:e3:49:7b:c4:64:4b:8d:79:6c:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:5E:9B:E8:88:03:6C:1A:10:54:51:BC:C1:66:F7:1A:9F:FA:78
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:70::/44
2a0f:6284:f00::/40
Signature Algorithm: sha256WithRSAEncryption
85:0d:7c:35:71:6a:80:ec:e0:12:cf:be:65:85:b3:b0:3e:b2:
80:33:f7:a1:2a:24:f3:31:14:24:8b:40:7c:8c:9e:3c:6d:eb:
87:bd:0a:fd:37:63:33:f6:68:26:bc:32:5e:29:f3:78:3d:47:
b1:a6:a4:cb:fc:f1:6c:29:e5:1b:a4:9f:2d:ea:d4:93:67:0c:
c7:41:94:06:58:7d:13:ba:ed:78:21:8c:c1:dd:67:0d:15:78:
64:ca:db:84:e3:d5:27:93:a1:90:69:43:a1:2a:bb:ff:49:fb:
12:ae:58:00:f3:bf:42:60:19:a3:af:ff:6d:a6:45:03:95:68:
bd:4b:55:80:7d:00:08:da:1c:cb:92:ee:3d:5a:62:80:1a:f7:
05:5d:2f:e3:34:2b:91:a4:ea:a6:23:4d:fd:89:f4:ce:67:4c:
3f:13:e6:f4:a1:f8:ca:f0:a2:65:30:5c:f5:19:74:de:d4:43:
4d:2a:4c:ff:2e:97:cf:08:7e:69:f0:9f:0a:d3:c0:fa:33:91:
60:3f:d7:43:9e:76:b4:df:3a:ae:5a:ef:06:a6:3c:74:3a:27:
77:ed:a8:26:00:b7:42:9a:dc:e5:af:94:1c:6c:f5:66:90:ba:
9e:fb:20:ee:ed:ad:a6:33:81:c5:47:2f:97:e9:fa:c6:2b:62:
c1:c5:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:44 2026 by rpki-client