This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS47272.roa File: AS47272.roa (raw, json) Hash identifier: WWTMSsB5pEryRtHTv0S9yZEDTQaR+pCjUOUZqmMjWz8= Subject key identifier: 39:DC:91:CA:74:03:02:43:67:8A:CD:68:12:79:36:BA:18:20:9D:B0 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 75DB9E7FD5DBFFCD950CCF5C71BF042ED965C515 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa Signing time: Wed 03 Dec 2025 12:50:04 +0000 ROA not before: Wed 03 Dec 2025 12:45:04 +0000 ROA not after: Wed 02 Dec 2026 12:50:04 +0000 asID: 47272 IP address blocks: 199.47.240.0/24 maxlen: 32 2a05:dfc3:f500::/40 maxlen: 48 2a05:dfc3:fd24::/48 maxlen: 48 2a06:1281:40::/44 maxlen: 44 2a06:1281:1000::/36 maxlen: 36 2a09:54c6::/36 maxlen: 36 2a0f:6280:a::/48 maxlen: 128 2a0f:6280:10::/48 maxlen: 128 2a0f:6280:11::/48 maxlen: 128 2a0f:6280:12::/48 maxlen: 128 2a0f:6280:13::/48 maxlen: 128 2a0f:6280:14::/48 maxlen: 48 2a0f:6280:15::/48 maxlen: 128 2a0f:6280:16::/48 maxlen: 128 2a0f:6280:17::/48 maxlen: 128 2a0f:6280:18::/48 maxlen: 128 2a0f:6280:1a::/48 maxlen: 128 2a0f:6280:1b::/48 maxlen: 128 2a0f:6280:1c::/48 maxlen: 48 2a0f:6280:1d::/48 maxlen: 128 2a0f:6280:1f::/48 maxlen: 128 2a0f:6283:1130::/44 maxlen: 44 2a0f:6283:1140::/44 maxlen: 44 2a0f:6283:1150::/44 maxlen: 44 2a0f:6283:6000::/36 maxlen: 36 2a0f:6284:4700::/40 maxlen: 40 2a0f:6284:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:db:9e:7f:d5:db:ff:cd:95:0c:cf:5c:71:bf:04:2e:d9:65:c5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Dec 3 12:45:04 2025 GMT Not After : Dec 2 12:50:04 2026 GMT Subject: CN=39DC91CA74030243678ACD68127936BA18209DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:14:6d:6b:63:8e:d7:d3:0d:7a:cb:e1:1c: 6f:71:8e:cd:fb:34:47:22:01:2a:41:5a:71:5e:a6: 71:54:e5:74:d8:80:4b:b5:04:ad:51:b6:10:da:be: cf:da:4c:7e:52:86:18:b9:55:15:46:8b:18:5e:66: 0d:ff:60:c3:5f:ee:c7:df:7c:9c:70:9d:5e:af:ba: 9d:1d:d5:f0:2c:1c:c5:3d:f7:78:c8:ed:f0:d9:02: 8f:6f:87:d2:b2:9c:56:37:3c:1b:6d:5a:a7:ea:3b: c7:91:24:7d:56:d4:23:f5:f6:41:a6:5f:63:10:77: f6:fb:64:d4:a4:e7:f4:6e:98:b5:d8:08:a8:1c:40: 1f:de:9a:22:20:ea:6d:2a:2e:29:4c:17:e4:dd:21: 24:20:3b:79:03:58:a7:8c:54:4f:64:b5:82:76:23: ea:b5:65:4b:f4:d0:cd:f9:40:d0:5a:be:94:87:3f: 19:8e:50:da:48:68:3e:09:35:df:27:8c:ab:a4:18: f2:6e:9a:ff:4b:39:45:8a:8c:1d:f8:18:84:f8:b8: 8b:2c:ce:8e:54:77:66:57:1d:78:19:f6:32:10:6d: c2:4a:07:3c:c3:dc:90:a0:0d:c5:0d:73:40:8a:e2: 75:97:55:d4:64:44:c8:d3:cd:2e:58:e6:a2:26:42: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DC:91:CA:74:03:02:43:67:8A:CD:68:12:79:36:BA:18:20:9D:B0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.47.240.0/24 IPv6: 2a05:dfc3:f500::/40 2a05:dfc3:fd24::/48 2a06:1281:40::/44 2a06:1281:1000::/36 2a09:54c6::/36 2a0f:6280:a::/48 2a0f:6280:10::-2a0f:6280:18:ffff:ffff:ffff:ffff:ffff 2a0f:6280:1a::-2a0f:6280:1d:ffff:ffff:ffff:ffff:ffff 2a0f:6280:1f::/48 2a0f:6283:1130::-2a0f:6283:115f:ffff:ffff:ffff:ffff:ffff 2a0f:6283:6000::/36 2a0f:6284:4700::/40 2a0f:6284:9000::/36 Signature Algorithm: sha256WithRSAEncryption 93:53:23:b4:19:b3:2e:d1:cc:4c:00:00:b7:8b:1e:4a:22:4f: e0:9d:7e:05:5f:9a:cd:b6:da:34:a6:dd:a7:b5:89:d9:ea:29: 08:72:d2:12:b3:e5:87:f0:37:f5:1b:4b:2a:cc:5f:80:76:e7: 2c:2a:74:39:51:9a:00:a5:ce:5e:e5:cf:ae:dc:92:d3:52:6b: a6:a1:7c:1c:5f:86:1d:60:e7:ff:6f:e3:ad:91:4f:cf:14:39: 39:0c:0a:8f:ce:10:b2:db:af:5c:bb:f1:73:24:79:2b:43:9a: 6e:dc:99:02:e7:88:e3:9e:9a:d3:80:57:db:68:19:a6:ed:53: 2f:b5:40:6c:18:7b:a3:39:83:91:00:02:56:ab:f4:63:5e:f8: 23:b1:58:de:34:f3:59:27:6b:ab:de:75:c6:bd:60:b2:22:10: 99:bb:26:4c:0a:ed:28:e3:85:7d:4a:58:43:42:c7:5d:17:51: 49:0f:b9:73:36:dc:f0:de:e0:3b:ed:6a:e7:78:1d:f8:92:90: 80:1c:12:8f:f2:47:4e:b7:66:b4:c1:1b:0b:f5:40:74:09:82: f8:6e:16:68:cb:2b:b9:da:58:1a:a3:d0:d2:0f:a1:6e:3f:3b: e2:a4:60:3d:28:44:1a:9a:3d:0b:46:b1:42:21:b0:40:19:33: 5f:87:00:d1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdduef9Xb/82VDM9ccb8ELtllxRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEyMDMxMjQ1MDRaFw0yNjEyMDIxMjUwMDRaMDMxMTAvBgNV BAMTKDM5REM5MUNBNzQwMzAyNDM2NzhBQ0Q2ODEyNzkzNkJBMTgyMDlEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsRRta2OO19MNesvhHG9xjs37 NEciASpBWnFepnFU5XTYgEu1BK1RthDavs/aTH5Shhi5VRVGixheZg3/YMNf7sff fJxwnV6vup0d1fAsHMU993jI7fDZAo9vh9KynFY3PBttWqfqO8eRJH1W1CP19kGm X2MQd/b7ZNSk5/RumLXYCKgcQB/emiIg6m0qLilMF+TdISQgO3kDWKeMVE9ktYJ2 I+q1ZUv00M35QNBavpSHPxmOUNpIaD4JNd8njKukGPJumv9LOUWKjB34GIT4uIss zo5Ud2ZXHXgZ9jIQbcJKBzzD3JCgDcUNc0CK4nWXVdRkRMjTzS5Y5qImQro7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOdyRynQDAkNnis1oEnk2uhggnbAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0NzI3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjCBuwYIKwYBBQUHAQcBAf8EgaswgagwDAQCAAEwBgME AMcv8DCBlwQCAAIwgZADBgAqBd/D9QMHACoF38P9JAMHBCoGEoEAQAMGBCoGEoEQ AwYEKglUxgADBwAqD2KAAAowEgMHBCoPYoAAEAMHACoPYoAAGDASAwcBKg9igAAa AwcBKg9igAAcAwcAKg9igAAfMBIDBwQqD2KDETADBwUqD2KDEUADBgQqD2KDYAMG ACoPYoRHAwYEKg9ihJAwDQYJKoZIhvcNAQELBQADggEBAJNTI7QZsy7RzEwAALeL HkoiT+CdfgVfms222jSm3ae1idnqKQhy0hKz5YfwN/UbSyrMX4B25ywqdDlRmgCl zl7lz67cktNSa6ahfBxfhh1g5/9v462RT88UOTkMCo/OELLbr1y78XMkeStDmm7c mQLniOOemtOAV9toGabtUy+1QGwYe6M5g5EAAlar9GNe+COxWN4081kna6vedca9 YLIiEJm7JkwK7SjjhX1KWENCx10XUUkPuXM23PDe4Dvtaud4HfiSkIAcEo/yR063 ZrTBGwv1QHQJgvhuFmjLK7naWBqj0NIPoW4/O+KkYD0oRBqaPQtGsUIhsEAZM1+H ANE= -----END CERTIFICATE-----Generated at Sat Dec 6 05:51:15 2025 by rpki-client