This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: nyVCFL88+GGC2K01izXrZY/T9vtSzKJdg1Hsi5m2hZc= Subject key identifier: 09:5F:C8:A6:3F:67:0D:39:92:40:38:A0:70:AE:50:C8:F3:B8:DC:55 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 15836698FDAEDA3556F017DDA5B2A54E71209A87 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Wed 21 Jan 2026 22:20:01 +0000 ROA not before: Wed 21 Jan 2026 22:15:01 +0000 ROA not after: Wed 20 Jan 2027 22:20:01 +0000 asID: 40676 IP address blocks: 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:83:66:98:fd:ae:da:35:56:f0:17:dd:a5:b2:a5:4e:71:20:9a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jan 21 22:15:01 2026 GMT Not After : Jan 20 22:20:01 2027 GMT Subject: CN=095FC8A63F670D39924038A070AE50C8F3B8DC55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:f2:f3:c6:aa:43:54:19:44:fb:28:57:25: 90:dc:28:a1:58:d2:d3:69:c1:28:fb:1f:28:fa:b1: 28:68:da:f2:c3:da:0d:08:b5:0a:96:4e:e4:59:0f: 2a:46:97:2c:12:08:94:5c:0e:e1:a9:4b:cc:e9:45: 2f:99:fc:cb:22:69:cb:1b:49:2d:58:05:68:10:c1: 32:32:6b:e0:8f:e2:a0:8f:ab:9e:22:68:65:d6:1f: 46:a0:91:89:4f:af:71:7c:a4:bf:86:69:a7:ba:f6: 84:87:ed:72:13:d3:9d:d9:d0:f2:fa:b9:06:cc:cf: 96:5c:a7:b9:a9:f6:cd:96:21:7c:6d:a1:a7:41:79: 3f:0c:97:26:6b:29:68:8e:04:a3:2b:b3:6e:f6:45: 04:78:6a:15:70:1f:be:94:4a:bd:23:af:ed:6d:f0: 5b:ec:b4:c7:d0:26:82:0b:47:d9:c8:47:ec:a1:c9: cd:b9:bb:2f:8e:ab:4f:01:f6:fe:ca:89:2d:d3:74: 7b:b6:40:9b:fa:a3:e8:46:63:6b:a1:ea:08:54:df: 92:0c:aa:fc:2c:b2:2c:ca:a9:de:f5:a4:0c:cb:2f: 17:ca:30:36:5a:68:da:45:98:29:f3:25:e3:63:b9: 0c:bd:aa:88:fb:9e:a5:58:da:ec:7a:ca:47:8d:9a: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:C8:A6:3F:67:0D:39:92:40:38:A0:70:AE:50:C8:F3:B8:DC:55 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 0d:f5:fb:88:6a:a2:64:c1:16:8e:88:32:78:49:c0:32:4e:ff: ed:ad:c9:1c:07:5a:4c:a7:6b:1c:08:76:6f:94:79:67:f7:7a: ae:75:ec:62:cc:65:45:1b:10:7c:6d:29:27:df:e0:78:10:3d: d4:57:2f:98:fb:6a:a9:8c:8a:69:a2:f3:9f:92:64:32:9f:3c: cf:73:13:fa:93:e6:6e:d4:c3:0f:a4:1a:6f:53:ed:62:5a:48: d1:c0:51:06:b1:1c:05:58:01:27:7c:de:da:01:a2:d9:a4:da: 75:8d:58:3b:a1:0c:a5:76:e6:be:61:d9:57:29:e4:a6:ad:4a: b7:cf:cb:ee:c1:50:1a:b6:a7:26:33:1c:43:61:47:c8:c9:6e: 85:04:87:70:56:af:7d:f8:ff:0f:f4:67:80:d1:61:16:84:ed: 98:df:47:f4:fb:11:d3:30:ec:51:95:dc:98:0e:7e:83:4a:4d: 0d:b6:5e:b5:13:c6:86:38:4f:21:8c:97:bf:9d:8c:e9:4c:1f: 94:ac:0e:a4:8d:01:6b:75:28:f8:ea:e3:13:50:34:ae:b6:33: d8:52:a5:d2:f5:e9:48:36:c8:90:41:e4:f0:4a:f5:bc:11:e5: 62:4e:96:bf:62:1c:e3:22:6b:c1:e7:46:f1:01:c5:18:8f:f4: c1:39:cd:40 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUFYNmmP2u2jVW8BfdpbKlTnEgmocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAxMjEyMjE1MDFaFw0yNzAxMjAyMjIwMDFaMDMxMTAvBgNV BAMTKDA5NUZDOEE2M0Y2NzBEMzk5MjQwMzhBMDcwQUU1MEM4RjNCOERDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KfLzxqpDVBlE+yhXJZDcKKFY 0tNpwSj7Hyj6sSho2vLD2g0ItQqWTuRZDypGlywSCJRcDuGpS8zpRS+Z/Msiacsb SS1YBWgQwTIya+CP4qCPq54iaGXWH0agkYlPr3F8pL+Gaae69oSH7XIT053Z0PL6 uQbMz5Zcp7mp9s2WIXxtoadBeT8MlyZrKWiOBKMrs272RQR4ahVwH76USr0jr+1t 8FvstMfQJoILR9nIR+yhyc25uy+Oq08B9v7KiS3TdHu2QJv6o+hGY2uh6ghU35IM qvwssizKqd71pAzLLxfKMDZaaNpFmCnzJeNjuQy9qoj7nqVY2ux6ykeNmmVNAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUCV/Ipj9nDTmSQDigcK5QyPO43FUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGBCoP YoTAAwYEKg9ihzAwDQYJKoZIhvcNAQELBQADggEBAA31+4hqomTBFo6IMnhJwDJO /+2tyRwHWkynaxwIdm+UeWf3eq517GLMZUUbEHxtKSff4HgQPdRXL5j7aqmMimmi 85+SZDKfPM9zE/qT5m7Uww+kGm9T7WJaSNHAUQaxHAVYASd83toBotmk2nWNWDuh DKV25r5h2Vcp5KatSrfPy+7BUBq2pyYzHENhR8jJboUEh3BWr334/w/0Z4DRYRaE 7ZjfR/T7EdMw7FGV3JgOfoNKTQ22XrUTxoY4TyGMl7+djOlMH5SsDqSNAWt1KPjq 4xNQNK62M9hSpdL16Ug2yJBB5PBK9bwR5WJOlr9iHOMia8HnRvEBxRiP9ME5zUA= -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:37 2026 by rpki-client