This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207083.roa
File: AS207083.roa (raw, json)
Hash identifier: DMbHmifMMeomJz4Wclq7T+nNySpXMimd67S3L+66mMM=
Subject key identifier: 45:AD:0D:F2:94:22:F6:63:21:9C:BB:64:2F:47:E6:1F:0D:F1:48:98
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 08E9CD615D8B8739C3C61FAB3B226D824979D400
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa
Signing time: Thu 27 Nov 2025 15:42:41 +0000
ROA not before: Thu 27 Nov 2025 15:37:41 +0000
ROA not after: Thu 26 Nov 2026 15:42:41 +0000
asID: 207083
IP address blocks: 2a09:54c6:a000::/48 maxlen: 48
2a09:54c6:a700::/48 maxlen: 48
2a0f:6283:1102::/48 maxlen: 48
2a0f:6284:1::/48 maxlen: 48
2a0f:6284:4213::/48 maxlen: 48
2a0f:6284:4219::/48 maxlen: 48
2a0f:6284:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e9:cd:61:5d:8b:87:39:c3:c6:1f:ab:3b:22:6d:82:49:79:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 27 15:37:41 2025 GMT
Not After : Nov 26 15:42:41 2026 GMT
Subject: CN=45AD0DF29422F663219CBB642F47E61F0DF14898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:a5:a3:ed:7c:62:98:e2:a0:90:0c:bd:53:
6f:38:cf:e4:30:e4:db:3a:75:3d:f9:81:8d:dd:0f:
5e:e3:5d:3c:4f:8f:66:66:52:1a:6c:f8:da:45:41:
9e:56:95:c8:db:0f:40:aa:c8:bc:56:b7:b3:3e:15:
8e:f5:3d:4c:f9:8d:ff:c5:7d:03:4b:41:0c:db:51:
64:ea:41:55:ec:be:4e:fe:a6:48:b6:29:07:69:c8:
18:c8:c8:1c:08:05:3e:38:cb:94:5d:26:b4:81:f4:
41:c5:ab:9f:77:92:cf:f1:ad:1e:15:1a:49:87:fa:
06:c7:16:b7:f6:ec:17:f9:57:41:fa:4d:b0:7c:22:
29:2b:ae:7e:28:ba:69:92:f3:99:26:7e:d4:58:ec:
9b:4a:cd:74:d3:3f:d4:db:e5:a7:9b:dd:60:48:a5:
ab:e1:0b:64:4f:b8:5e:5e:45:ae:83:07:e7:3a:f3:
92:7f:40:ba:06:11:85:ed:28:bc:7b:f9:14:09:34:
40:29:7f:28:0b:d0:57:df:78:cf:33:bd:72:4f:5c:
20:ab:d6:34:27:6b:ec:26:18:49:bc:eb:f7:a8:f4:
07:7f:4b:60:e8:83:53:e4:e3:ed:e9:45:a3:da:1f:
67:f6:5e:50:3c:0a:1d:fc:ab:c9:06:e8:ef:36:78:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:0D:F2:94:22:F6:63:21:9C:BB:64:2F:47:E6:1F:0D:F1:48:98
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/48
2a09:54c6:a700::/48
2a0f:6283:1102::/48
2a0f:6284:1::/48
2a0f:6284:4213::/48
2a0f:6284:4219::/48
2a0f:6284:8000::/36
Signature Algorithm: sha256WithRSAEncryption
2e:55:9b:10:41:a7:c1:b9:c2:6c:9f:d2:4d:d1:bf:c1:54:14:
d1:3c:ea:ef:7b:41:4d:49:d3:f6:3c:16:a4:0a:0a:d5:58:30:
e1:78:bf:89:bb:5f:38:6b:93:a1:8f:68:df:28:f1:ac:88:01:
82:32:fc:41:73:ea:2b:a3:f4:59:13:80:de:4e:f3:70:2a:19:
45:f0:69:0d:e0:af:ae:00:27:9d:3f:ec:87:ce:c8:62:4d:5c:
04:5b:d7:aa:a6:9b:89:59:ba:0a:00:ea:12:82:4c:11:b7:77:
40:e7:fc:ad:31:27:60:08:c6:46:ae:fb:47:66:9b:4a:46:cd:
c4:0b:ab:e3:36:48:04:58:c2:34:5d:97:4a:73:9d:bc:d6:c9:
d1:a1:39:54:06:dd:eb:1e:b8:64:2a:50:b8:21:bd:1d:2b:6d:
9d:a0:cf:60:1e:75:da:c2:a5:e2:4c:d3:26:1b:a8:bf:5e:83:
0d:d9:2d:2b:84:04:fd:cb:d0:0e:8a:ba:63:94:b4:22:d2:94:
b3:38:f4:ec:f6:33:cc:da:e1:f2:a1:a3:6b:11:5b:64:e5:b1:
dd:a3:44:2b:74:54:b9:c6:8c:e5:fd:e8:76:bf:b7:b6:ac:01:
9a:07:63:8b:28:60:dc:96:9e:b3:ee:67:bd:de:ed:4e:e5:dc:
f0:a6:ed:50
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCOnNYV2LhznDxh+rOyJtgkl51AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTExMjcxNTM3NDFaFw0yNjExMjYxNTQyNDFaMDMxMTAvBgNV
BAMTKDQ1QUQwREYyOTQyMkY2NjMyMTlDQkI2NDJGNDdFNjFGMERGMTQ4OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSKWj7XximOKgkAy9U284z+Qw
5Ns6dT35gY3dD17jXTxPj2ZmUhps+NpFQZ5WlcjbD0CqyLxWt7M+FY71PUz5jf/F
fQNLQQzbUWTqQVXsvk7+pki2KQdpyBjIyBwIBT44y5RdJrSB9EHFq593ks/xrR4V
GkmH+gbHFrf27Bf5V0H6TbB8Iikrrn4oummS85kmftRY7JtKzXTTP9Tb5aeb3WBI
pavhC2RPuF5eRa6DB+c685J/QLoGEYXtKLx7+RQJNEApfygL0FffeM8zvXJPXCCr
1jQna+wmGEm86/eo9Ad/S2Dog1Pk4+3pRaPaH2f2XlA8Ch38q8kG6O82eBftAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQURa0N8pQi9mMhnLtkL0fmHw3xSJgwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDcwODMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMEQEAgACMD4DBwAq
CVTGoAADBwAqCVTGpwADBwAqD2KDEQIDBwAqD2KEAAEDBwAqD2KEQhMDBwAqD2KE
QhkDBgQqD2KEgDANBgkqhkiG9w0BAQsFAAOCAQEALlWbEEGnwbnCbJ/STdG/wVQU
0Tzq73tBTUnT9jwWpAoK1Vgw4Xi/ibtfOGuToY9o3yjxrIgBgjL8QXPqK6P0WROA
3k7zcCoZRfBpDeCvrgAnnT/sh87IYk1cBFvXqqabiVm6CgDqEoJMEbd3QOf8rTEn
YAjGRq77R2abSkbNxAur4zZIBFjCNF2XSnOdvNbJ0aE5VAbd6x64ZCpQuCG9HStt
naDPYB512sKl4kzTJhuov16DDdktK4QE/cvQDoq6Y5S0ItKUszj07PYzzNrh8qGj
axFbZOWx3aNEK3RUucaM5f3odr+3tqwBmgdjiyhg3Jaes+5nvd7tTuXc8KbtUA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:39 2025 by rpki-client