This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215265.roa
File: AS215265.roa (raw, json)
Hash identifier: 3+ui4Q5kjAYTr9Y7E/toZbOUgNYEXUlG/vDyXWNTGog=
Subject key identifier: 2B:6F:E9:75:BF:9B:34:59:88:81:84:EC:1E:58:C1:12:C5:79:A2:AE
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 03E68F9225ED7EBFB7F71BE1BCB769A93541CE6B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
Signing time: Tue 25 Nov 2025 14:12:05 +0000
ROA not before: Tue 25 Nov 2025 14:07:05 +0000
ROA not after: Tue 24 Nov 2026 14:12:05 +0000
asID: 215265
IP address blocks: 2a06:1284::/32 maxlen: 32
2a09:54c5::/32 maxlen: 32
2a0f:6284:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e6:8f:92:25:ed:7e:bf:b7:f7:1b:e1:bc:b7:69:a9:35:41:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 25 14:07:05 2025 GMT
Not After : Nov 24 14:12:05 2026 GMT
Subject: CN=2B6FE975BF9B3459888184EC1E58C112C579A2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:49:58:f1:5e:9b:f9:2d:82:74:7d:0f:7c:
31:34:86:d1:b0:68:87:62:5f:52:5f:f6:d2:78:b4:
fa:f3:1b:ed:ef:0b:56:9c:d4:c3:b7:5f:46:0f:7a:
41:26:20:8a:d8:d3:5d:24:c8:90:af:ff:e0:ff:17:
41:db:97:a0:7a:b4:57:9a:f3:39:17:e8:95:31:70:
12:95:fa:9d:16:f0:4d:b2:38:86:76:52:f2:00:f0:
48:9c:77:00:c6:3a:24:84:59:e7:5c:28:27:e6:30:
f0:8a:e2:c4:ed:f5:22:13:35:3e:c8:14:f7:d3:ce:
6e:25:af:3d:cf:a5:81:a4:ab:76:e0:7d:14:f3:85:
e8:82:21:fa:7b:76:95:04:7d:23:73:07:fc:32:8a:
34:5c:d7:0b:e2:b8:88:13:12:38:01:69:ca:89:20:
7b:66:5a:79:7c:31:e4:94:13:ea:e4:d8:83:82:3f:
b0:2e:c5:6c:b6:0a:3e:9b:5e:e4:da:f3:2d:fc:4b:
8b:76:39:46:4f:a8:8e:fe:70:a1:f4:76:9e:07:58:
e1:ab:8c:d0:c7:80:95:41:b6:84:01:63:e1:36:d4:
71:fc:b4:eb:8b:c4:6e:ea:27:d2:0b:06:ae:20:41:
9f:8d:74:97:9f:5d:12:dc:b8:69:cf:05:7c:76:17:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:E9:75:BF:9B:34:59:88:81:84:EC:1E:58:C1:12:C5:79:A2:AE
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/32
2a09:54c5::/32
2a0f:6284:3000::/36
Signature Algorithm: sha256WithRSAEncryption
69:af:d1:c6:95:e9:30:80:b6:fd:65:44:ff:b0:c9:1d:5a:d5:
40:a7:7a:6f:32:51:93:1b:14:13:72:c5:fe:29:68:c0:46:e5:
ea:e3:7a:cc:d9:23:02:3d:cb:38:95:83:6c:5a:0c:a4:d7:90:
4e:92:c0:18:40:79:d5:98:d1:45:99:68:b5:18:91:e2:e5:4f:
78:5a:6d:a2:fc:c2:70:30:4f:8b:e9:f6:3c:6c:a9:b6:ab:9a:
b2:77:29:07:2a:20:ef:6f:eb:5f:3c:5c:b6:e1:68:9a:4c:c3:
87:1d:df:b8:eb:47:3f:01:f3:5b:33:bb:28:74:89:49:a6:6f:
e1:84:88:18:0c:56:5a:f3:04:72:72:79:e7:77:34:3e:f7:b8:
e6:ec:d3:be:cd:2e:cf:4b:4d:e8:86:76:2f:68:a0:15:5e:fe:
d8:fc:cb:b0:9f:9a:cf:be:7e:a5:ee:05:5a:d2:26:b6:9b:fb:
b9:87:ae:ad:e6:df:b8:00:a4:92:07:d2:6c:e5:69:b5:b2:9d:
1b:54:df:7b:df:8e:2a:a3:35:f0:27:ee:eb:4a:94:1e:03:29:
10:2f:c1:b8:dc:14:b6:4c:21:4e:69:31:38:1a:2e:73:c2:be:
bb:40:94:25:4a:3d:75:7d:52:45:eb:91:6e:02:93:2f:2c:b9:
22:b9:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:50 2025 by rpki-client