This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214749.roa
File: AS214749.roa (raw, json)
Hash identifier: 5GO5EPdpPmNWyGM5EeV8gjd24K9PJrtzMUzWyZYSO4o=
Subject key identifier: 08:3F:E3:A5:E9:92:B5:2A:09:D9:BA:77:0B:5A:C6:18:FE:B2:73:CE
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 413CB7C6D4560A45D76DEFE936BD80FC4AB6DF10
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa
Signing time: Wed 03 Dec 2025 23:09:01 +0000
ROA not before: Wed 03 Dec 2025 23:04:01 +0000
ROA not after: Wed 02 Dec 2026 23:09:01 +0000
asID: 214749
IP address blocks: 2a0f:6284:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3c:b7:c6:d4:56:0a:45:d7:6d:ef:e9:36:bd:80:fc:4a:b6:df:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 3 23:04:01 2025 GMT
Not After : Dec 2 23:09:01 2026 GMT
Subject: CN=083FE3A5E992B52A09D9BA770B5AC618FEB273CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:db:5e:80:28:d4:42:4d:7d:4f:40:6d:85:
83:d3:59:84:28:ab:a8:cd:11:13:ac:35:02:0e:b7:
8a:3c:55:11:3c:52:28:b1:3a:68:df:50:25:48:53:
8c:ca:70:32:b4:32:ba:c4:c1:89:8b:b7:56:e7:77:
9d:ff:f2:d6:7c:8c:fa:f7:bf:b6:8f:6e:5c:e8:6a:
27:c3:39:0f:70:57:6a:b4:9e:33:be:d3:2c:9c:1c:
87:33:81:f1:d9:d7:8d:48:16:63:f1:7b:fc:b1:b5:
d6:e1:b2:08:76:ba:0d:ff:d7:e5:8d:6e:50:b8:89:
d4:3c:6e:a4:47:b7:c0:c6:e4:1d:99:88:b0:ff:f0:
fc:03:0c:9f:49:96:cb:ae:6f:ba:95:ae:cb:92:61:
79:9e:c8:94:af:4e:43:ca:db:cd:d8:d9:a9:51:9b:
14:0c:e1:19:3e:dd:65:b1:c0:9b:f7:73:74:b8:dd:
1e:b2:87:4e:7a:54:57:8c:25:96:9c:bb:65:7f:2f:
37:d0:ee:b0:66:cd:70:bf:fd:85:fa:df:cd:b7:72:
6e:90:74:b0:09:3d:d4:ed:c0:72:68:0d:03:69:86:
bf:7d:c8:81:9f:6e:db:40:02:9b:7d:2d:09:a7:17:
5a:2d:29:b5:36:db:d5:64:11:5a:12:19:ca:b3:ea:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:E3:A5:E9:92:B5:2A:09:D9:BA:77:0B:5A:C6:18:FE:B2:73:CE
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:a00::/40
Signature Algorithm: sha256WithRSAEncryption
84:0c:ff:75:66:17:c0:eb:01:3a:c3:93:0a:f5:82:93:96:3a:
a2:cb:56:10:42:7f:4d:98:dd:fc:bc:33:58:0f:27:02:2b:5f:
c0:74:4c:41:23:4d:40:e1:e6:0c:e2:30:6b:24:2d:c6:09:a7:
bd:5e:61:a6:fb:6d:e2:0d:9c:24:6f:a4:9c:d4:ce:47:d9:9a:
c0:78:d4:1f:f0:5c:1d:33:90:20:ae:96:8b:34:85:ae:0c:90:
05:d6:51:f9:e5:6e:9b:ec:54:bf:6e:f0:68:36:a8:3b:2f:d1:
8b:71:1a:28:39:87:eb:dc:e2:5e:67:78:5a:0d:95:ce:9c:29:
18:e4:82:77:06:84:aa:06:af:5f:94:4b:30:be:e5:9c:e0:2b:
9f:58:85:d6:82:83:8b:b6:14:cf:b4:f2:6c:b7:e6:cc:77:e1:
56:ae:f4:db:6e:ca:94:4c:a6:cf:7d:67:b0:64:67:e6:a5:bd:
71:d8:31:75:d0:91:71:50:55:0c:6c:ec:61:1d:fe:54:b0:2b:
f5:5b:0d:3e:4d:36:45:e1:ad:49:4c:ea:94:b0:1e:24:fd:f2:
c2:e9:87:a5:8c:57:93:66:e1:0c:47:5d:92:eb:c6:2d:0a:6e:
e9:38:db:04:8a:96:cf:0b:32:8f:29:8b:42:46:1b:14:c9:2b:
2b:3e:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:59 2025 by rpki-client