This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215760.roa
File: AS215760.roa (raw, json)
Hash identifier: PnrFlF5fA/Q1kC7v5kx3LzJDWvj9dXmLrfE+bdWJTBo=
Subject key identifier: DD:32:D7:D3:98:C2:12:A3:2C:A1:66:F9:D9:B2:5D:1B:10:B2:4C:35
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 5D29C55D21948FE29450B676F0A0A8EEC590D42D
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215760.roa
Signing time: Sat 24 Jan 2026 22:28:07 +0000
ROA not before: Sat 24 Jan 2026 22:23:07 +0000
ROA not after: Sat 23 Jan 2027 22:28:07 +0000
asID: 215760
IP address blocks: 2a0f:6284:a::/48 maxlen: 48
2a0f:6284:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:29:c5:5d:21:94:8f:e2:94:50:b6:76:f0:a0:a8:ee:c5:90:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jan 24 22:23:07 2026 GMT
Not After : Jan 23 22:28:07 2027 GMT
Subject: CN=DD32D7D398C212A32CA166F9D9B25D1B10B24C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:ba:9c:9e:f3:8a:f8:34:a6:5e:ca:b5:9d:
a4:1e:18:b0:82:45:0f:c4:dc:ed:16:ca:8f:8a:56:
fb:a8:31:58:ce:ad:a4:ff:73:87:85:c5:ea:f2:43:
d9:52:85:7f:b3:1a:63:48:30:f7:03:34:4c:68:1f:
33:e3:e7:b1:51:58:3f:62:44:48:ab:da:54:49:86:
30:d7:7d:6a:98:fb:1c:bd:f8:3c:b2:fc:77:3f:c6:
06:8d:26:78:3d:3a:36:89:84:e8:c3:0a:0c:c8:e1:
7b:f4:2c:d8:fb:f5:22:a0:24:0a:fe:1b:1f:73:84:
f0:f3:fa:4c:8b:ba:2f:3b:eb:6c:5b:e5:c5:b7:8e:
5d:64:6c:75:ce:bc:83:38:b7:7f:d0:8b:15:58:46:
8e:b8:bc:92:a8:5c:39:72:b6:23:b0:8a:be:38:7c:
f3:5e:21:b7:83:85:59:2b:f4:71:78:ca:73:a6:c3:
7d:75:ec:65:66:2b:fc:26:5a:d0:29:88:34:cc:81:
44:f8:11:8e:0c:ae:71:ee:f6:99:db:ec:c2:4f:23:
f0:8f:79:cb:f5:be:4d:01:2c:31:bc:23:27:84:12:
85:48:c8:43:27:23:01:4f:3f:46:c2:26:02:96:cb:
30:92:6f:46:03:c9:bd:90:3a:f3:15:c5:43:06:ca:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:D7:D3:98:C2:12:A3:2C:A1:66:F9:D9:B2:5D:1B:10:B2:4C:35
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:a::/48
2a0f:6284:30::/44
Signature Algorithm: sha256WithRSAEncryption
46:29:a7:c5:2f:ae:bb:4b:e0:9e:2d:0c:85:2f:d9:f1:43:ba:
3a:80:ea:55:c1:b3:1c:ea:4a:c7:b3:cd:dc:d7:18:da:c4:07:
b4:a3:2d:dd:fa:5f:e1:d6:94:ed:30:b9:4b:4d:3e:7c:ec:10:
bd:fd:a2:89:1c:ca:1f:50:58:92:bc:aa:1d:a5:da:4a:b5:e2:
f2:2d:a8:b2:91:26:03:0e:14:e9:72:8c:16:35:c9:5f:1c:4c:
72:8c:78:2e:fd:8d:d6:47:fe:45:57:a2:be:2d:72:10:3e:93:
85:15:78:f0:52:80:bc:78:62:16:69:9d:5b:0b:ef:d7:05:cc:
1e:97:cf:1e:17:fb:b9:a8:ed:7a:13:a3:5c:35:36:8f:3d:d2:
00:da:31:8e:80:34:1a:03:ab:89:a4:fb:7e:04:86:47:61:94:
1c:85:21:b1:f3:ef:1e:e4:ae:97:b1:60:3a:9b:9d:f6:d3:16:
8a:ea:b4:ba:4d:9e:55:43:6e:fe:d9:af:0e:52:49:64:ae:1b:
93:53:8b:16:88:bc:79:37:13:a2:b5:98:12:0a:1d:a1:4d:9a:
01:f6:66:d9:0f:51:b9:4b:ee:25:f7:99:e0:28:66:f4:da:8a:
31:e4:8d:f6:ab:cf:a3:f2:23:0d:6e:25:35:16:a7:fb:b0:aa:
f5:07:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:08:07 2026 by rpki-client