This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215685.roa
File: AS215685.roa (raw, json)
Hash identifier: WIUMtb+Wr9ANJXf7bGIFgb3n4E9lZMNQyHPSS0nVtcg=
Subject key identifier: 3B:CB:63:F7:68:39:46:C0:D4:CB:9D:7F:4C:1E:0B:EC:83:04:19:68
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 4F6BC989C03CAE69584C901BAB4CF898EAAB0E36
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215685.roa
Signing time: Wed 19 Nov 2025 19:59:50 +0000
ROA not before: Wed 19 Nov 2025 19:54:50 +0000
ROA not after: Wed 18 Nov 2026 19:59:50 +0000
asID: 215685
IP address blocks: 2a0f:6283:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6b:c9:89:c0:3c:ae:69:58:4c:90:1b:ab:4c:f8:98:ea:ab:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 19 19:54:50 2025 GMT
Not After : Nov 18 19:59:50 2026 GMT
Subject: CN=3BCB63F7683946C0D4CB9D7F4C1E0BEC83041968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:98:5d:dc:f7:1c:29:64:ef:61:ef:ad:bb:
87:0a:a8:a3:73:31:40:e6:a8:ae:f4:14:df:8f:24:
fa:c0:9b:2a:80:f9:e5:a9:04:98:6d:88:35:62:45:
3b:49:8e:d4:c1:3b:6b:58:4e:75:9d:3f:55:21:5d:
0e:b9:4f:7f:7b:54:f2:45:ef:57:12:56:c9:c7:c2:
be:ea:36:7b:5a:70:d6:7b:f6:b4:b7:9c:c7:3f:d6:
36:18:ba:39:c3:55:f0:bd:2d:26:21:bf:d4:6b:ab:
3f:68:5e:73:9c:ed:26:e3:84:18:71:dd:ac:9b:fa:
20:e1:d5:6c:73:d7:3b:f8:30:f5:e6:88:60:8b:01:
8d:d9:1c:36:3d:20:74:d9:0e:50:a0:8d:b5:2c:88:
61:10:ee:1d:bf:85:4b:34:24:c6:9b:82:91:6d:16:
8b:f8:47:bd:d8:70:b7:72:3b:f2:91:ad:94:56:ae:
c8:12:16:58:08:22:a1:06:78:fc:83:fe:bf:a8:69:
33:41:dd:08:47:42:11:6f:b4:26:f4:84:31:e7:ce:
d1:2d:44:b7:c0:eb:3e:dd:df:48:6a:24:56:f9:d6:
30:10:9b:ad:48:ce:8b:37:f3:14:78:c7:ce:b2:db:
1d:1e:71:55:e2:7f:f3:8c:89:c3:33:45:44:d3:56:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:63:F7:68:39:46:C0:D4:CB:9D:7F:4C:1E:0B:EC:83:04:19:68
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6283:f000::/36
Signature Algorithm: sha256WithRSAEncryption
64:73:33:84:c3:a3:e6:c0:4c:02:83:d5:63:55:7a:67:a5:cb:
23:90:34:86:cb:32:8f:47:c7:8d:d0:a9:54:df:79:ad:43:46:
c1:12:af:c7:50:b8:e9:2a:59:e2:2e:f6:af:d2:6c:10:6b:98:
ed:e4:14:4e:9e:a9:1c:72:ba:23:87:fa:60:26:b8:a2:62:a5:
6a:93:5e:ba:20:c2:aa:56:c9:30:fd:81:83:34:26:1d:c7:9a:
24:73:0c:e5:04:d7:58:60:1e:2e:7b:c2:25:c6:85:4f:33:90:
02:e4:af:24:5e:33:8f:d2:af:cc:2d:b6:3c:50:aa:06:11:b6:
bf:76:52:e2:ba:4d:64:f9:2c:7e:81:dc:5a:a6:ac:49:1f:94:
77:68:30:c6:aa:0c:2e:01:9e:9b:1c:29:a6:d0:b6:38:3f:0c:
17:bf:ae:b4:03:f0:75:8e:cb:f1:4c:be:5a:b2:f4:55:cb:51:
dd:66:2b:74:e3:11:4f:96:9d:cd:05:61:72:97:75:c3:d7:bf:
af:1c:3a:8b:d0:7c:12:8a:4b:95:9a:87:94:18:61:7c:8b:e7:
7f:e6:e6:58:57:ec:56:68:75:10:0a:a3:34:5a:b0:d5:39:21:
3d:b9:49:ca:94:c3:04:5e:c4:56:4a:1c:0d:f6:6f:d3:08:51:
ad:08:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:58 2025 by rpki-client