This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          m+YMKK8jM+U4K4O4yAaDYfdg1y1LVg3LcgwHYvvHprk=
Subject key identifier:   69:B7:32:7E:49:F1:5D:32:B9:E4:AB:BA:4D:64:D2:A8:1B:3E:A2:B3
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       10124D432D367AF89112D0E1C284CAC9C6F9F22A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa
Signing time:             Fri 26 Dec 2025 17:41:28 +0000
ROA not before:           Fri 26 Dec 2025 17:36:28 +0000
ROA not after:            Fri 25 Dec 2026 17:41:28 +0000
asID:                     14618
IP address blocks:        2a05:dfc3:f740::/44 maxlen: 44
                          2a05:dfc3:f750::/44 maxlen: 48
                          2a0f:6284:41fe::/48 maxlen: 48
                          2a0f:6284:4c00::/44 maxlen: 48
                          2a0f:6284:4c50::/44 maxlen: 48
                          2a0f:6284:4c60::/44 maxlen: 48
                          2a0f:6284:4c80::/44 maxlen: 48
                          2a0f:6284:4c90::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:4d:43:2d:36:7a:f8:91:12:d0:e1:c2:84:ca:c9:c6:f9:f2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 26 17:36:28 2025 GMT
            Not After : Dec 25 17:41:28 2026 GMT
        Subject: CN=69B7327E49F15D32B9E4ABBA4D64D2A81B3EA2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:fc:97:7c:47:61:89:e7:da:7d:00:d1:3d:
                    77:e7:85:f0:64:82:24:44:23:36:0c:ca:82:e9:e7:
                    9d:1a:86:b6:bc:94:b7:3c:61:4d:6d:cb:b6:9d:49:
                    df:0e:45:c5:95:18:29:38:18:ab:4f:1f:21:66:88:
                    e5:d3:b4:29:71:8f:b8:79:d7:42:49:37:ec:b9:7d:
                    14:ed:b2:97:94:2a:58:ca:b9:de:b3:bd:4e:18:bc:
                    5e:6c:45:2d:32:6c:1e:27:d2:9a:4b:1f:5c:85:76:
                    77:1c:5a:97:6d:0e:e1:99:38:82:5a:31:d3:5f:5d:
                    1f:bd:20:78:3d:28:b0:8b:02:e7:0f:8c:d8:59:85:
                    91:04:69:2f:62:6c:e1:fc:ba:a8:7f:8c:82:2c:9c:
                    04:a7:05:0a:63:9e:3b:71:56:fe:ba:a9:48:a8:3b:
                    98:df:3b:e5:0d:e7:25:28:fa:58:09:c1:24:d2:73:
                    b2:e9:81:47:31:4e:7b:af:cb:d4:ac:f7:6b:d2:d9:
                    24:ad:c1:b5:2b:a4:1f:66:ea:7f:33:b1:a9:69:85:
                    53:99:30:b3:28:f9:6f:3b:ca:49:42:cf:1d:4a:8c:
                    a8:68:41:ad:a2:07:57:bc:ea:48:5b:11:fc:64:9a:
                    72:3f:4b:b7:06:99:f0:8c:21:4a:82:95:32:0a:50:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B7:32:7E:49:F1:5D:32:B9:E4:AB:BA:4D:64:D2:A8:1B:3E:A2:B3
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f740::/43
                  2a0f:6284:41fe::/48
                  2a0f:6284:4c00::/44
                  2a0f:6284:4c50::-2a0f:6284:4c6f:ffff:ffff:ffff:ffff:ffff
                  2a0f:6284:4c80::/43

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:20:37:de:17:50:5b:06:9f:27:5c:33:dd:1f:34:cb:11:
         85:c3:87:6b:df:5e:29:0a:fc:23:53:31:b5:cc:b3:22:bd:5f:
         01:61:46:51:c5:de:f8:21:ba:fc:07:9c:1e:6d:a5:6b:a1:99:
         e9:29:7d:a6:d3:57:ce:55:61:73:80:75:ad:f0:b4:ca:23:d3:
         dc:2d:ef:1d:fb:5c:ae:88:9f:e4:10:e2:87:05:ef:61:6b:4b:
         5b:c5:68:25:88:db:db:84:e1:c5:8d:75:4b:59:e6:81:0f:6c:
         2b:dc:dc:8e:a9:3f:e3:ab:90:82:2f:ef:61:3e:61:41:f4:d0:
         26:d6:aa:2f:8a:b4:f5:95:6b:d0:3e:6c:8d:c7:3d:75:96:65:
         05:0e:97:d1:78:0e:c2:ab:cc:cd:8e:2f:ac:b5:34:13:80:c8:
         e6:ee:f7:bd:17:1f:85:2b:fc:3f:94:19:db:6f:71:ef:8d:5d:
         04:1d:24:10:7f:1a:13:f1:36:3e:1f:ba:1a:f1:ae:fc:76:eb:
         e8:0c:d2:bc:a1:a3:90:a8:4a:cf:c6:3e:e6:42:ad:63:58:4a:
         5d:da:2b:cc:16:69:c3:83:9f:7d:0c:7e:41:10:e1:68:f1:c0:
         dc:4a:0d:db:5d:34:42:6c:87:20:33:7f:65:9c:db:05:ab:b6:
         20:c6:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:21 2026 by rpki-client