This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          t1p2NmmT59QRSVVJ6wmIxdgB95X0YfFYs+4GtRQTohM=
Subject key identifier:   CD:16:1A:00:6A:40:29:E2:26:06:BF:00:2F:66:91:9A:F1:FD:58:9C
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       643FFFF88D3049180CC80CA2C73A54E2F026688A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time:             Wed 07 Jan 2026 08:00:20 +0000
ROA not before:           Wed 07 Jan 2026 07:55:20 +0000
ROA not after:            Wed 06 Jan 2027 08:00:20 +0000
asID:                     0
IP address blocks:        2a0f:6284:f00::/40 maxlen: 40
Validation:               Failed, certificate revoked on Wed 07 Jan 2026 14:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3f:ff:f8:8d:30:49:18:0c:c8:0c:a2:c7:3a:54:e2:f0:26:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan  7 07:55:20 2026 GMT
            Not After : Jan  6 08:00:20 2027 GMT
        Subject: CN=CD161A006A4029E22606BF002F66919AF1FD589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:4c:06:ff:f5:f3:00:80:10:1b:63:b2:57:
                    d6:38:fa:22:b7:ea:5a:82:35:fc:34:a1:e9:f6:50:
                    89:79:a8:96:e0:68:45:ec:b8:a6:04:0a:8e:a2:47:
                    2d:42:f5:24:d4:60:dc:fc:66:3f:4e:0d:d6:e1:31:
                    e0:04:63:3b:99:9f:ef:3c:db:79:55:be:30:a6:34:
                    1e:a4:ea:27:06:46:f1:f3:ed:ff:19:b0:53:15:c8:
                    c6:fe:fd:08:58:bd:97:2a:a2:7e:2d:46:d4:e2:5a:
                    cd:0c:fd:bd:d5:59:9b:80:ea:12:79:8b:c3:35:85:
                    8f:87:42:e4:47:3d:94:df:10:d4:f6:34:98:07:28:
                    45:9e:cf:94:3c:d5:a6:0a:e4:3f:ed:47:3b:19:95:
                    ec:17:f8:1b:a2:d9:26:8b:1e:92:81:c3:af:c9:28:
                    d4:d5:79:48:a5:81:09:4e:2d:ed:2d:55:93:13:cc:
                    85:af:e9:95:1d:eb:c2:d2:bf:e3:f4:47:d5:07:df:
                    05:18:ea:cd:65:cd:56:47:50:a9:23:bb:25:bf:fc:
                    00:5f:f2:7c:ab:c2:1c:14:c4:56:e4:ec:06:64:b4:
                    84:5a:54:c6:1d:3e:9a:8f:eb:68:e7:b3:e3:f6:91:
                    b3:b4:2e:ac:74:b8:ab:7f:7a:d8:ad:f1:46:b4:e7:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:16:1A:00:6A:40:29:E2:26:06:BF:00:2F:66:91:9A:F1:FD:58:9C
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:4a:63:1b:d9:6f:65:4c:e4:8c:42:7a:af:9c:52:59:07:da:
         be:65:3d:60:21:8a:e7:e4:4d:18:9b:39:5d:b7:8e:35:e2:ff:
         56:2e:a4:fd:fb:71:23:1a:aa:bd:95:82:e6:4b:dd:c0:84:a2:
         3e:c1:21:10:f4:b4:7e:c9:48:4a:eb:86:11:29:51:28:7c:cf:
         c7:22:04:38:92:cf:f7:5e:37:c8:28:0d:1a:c9:e2:5e:73:3e:
         08:fa:34:2c:e4:95:96:c5:a9:7c:7f:9f:fa:37:49:7b:93:29:
         bc:22:2d:0a:38:46:39:30:c0:5e:69:08:f7:b4:2f:1c:78:46:
         ca:96:c9:3d:c1:56:56:33:c8:39:ed:67:67:2f:26:a3:51:04:
         8c:05:10:24:b2:e4:52:84:d3:13:e3:3a:7f:b9:80:75:ce:58:
         61:f1:e5:f7:ef:05:b0:6f:4a:54:90:52:8c:ad:5f:6e:06:21:
         4f:f0:38:97:b2:d3:93:90:34:e5:fb:46:98:7a:4a:f5:51:b6:
         3e:1f:c0:09:cc:53:67:db:43:30:d2:86:11:81:50:c7:66:e4:
         7c:00:ab:42:12:39:ec:71:c0:35:78:93:28:4e:2f:cf:9a:9e:
         f0:e9:4d:35:b3:cf:ad:66:27:92:d2:2d:65:69:fb:75:1d:ae:
         83:05:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:10:34 2026 by rpki-client