This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202941.roa
File:                     AS202941.roa (raw, json)
Hash identifier:          CsRSqPXt7beKV4LFRpdCmpaqmUr3CsYqyzScgFx6eJg=
Subject key identifier:   6E:E3:A8:09:A5:15:05:C2:10:B5:1F:46:9D:7C:50:3E:F7:B7:B3:57
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       04F1B06CC48450DB000055B39B7D48B9EDBF0AE0
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa
Signing time:             Sat 15 Nov 2025 16:57:24 +0000
ROA not before:           Sat 15 Nov 2025 16:52:24 +0000
ROA not after:            Sat 14 Nov 2026 16:57:24 +0000
asID:                     202941
IP address blocks:        2a0f:6284:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f1:b0:6c:c4:84:50:db:00:00:55:b3:9b:7d:48:b9:ed:bf:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 15 16:52:24 2025 GMT
            Not After : Nov 14 16:57:24 2026 GMT
        Subject: CN=6EE3A809A51505C210B51F469D7C503EF7B7B357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:fa:85:bd:19:ab:7f:8b:16:86:83:01:63:
                    d5:e7:a1:aa:90:26:6a:58:98:56:66:af:bd:7e:fe:
                    71:a5:6f:c3:02:f1:5b:05:a9:58:4e:ef:e0:75:5d:
                    68:bb:d5:3d:b9:2e:4a:6d:61:8e:68:1e:6c:2d:d2:
                    e9:99:f0:86:36:ed:86:9b:86:55:19:90:67:40:7c:
                    b2:d1:79:54:78:6b:4f:36:7f:bf:cf:03:50:74:6f:
                    cf:b1:42:c3:e8:87:d8:1c:5f:f1:4e:16:78:3f:5f:
                    e6:2d:d2:6b:e5:c1:a6:e1:b3:67:7a:b9:59:75:b1:
                    57:95:34:b7:89:3b:0d:17:4f:96:1c:44:2d:2c:7c:
                    ff:3d:44:c4:f1:40:af:72:c6:92:ac:9c:eb:19:fc:
                    f2:25:c8:38:28:82:94:01:64:1a:4d:15:24:2d:ea:
                    b7:2e:e2:fa:8e:e5:19:2a:ea:ad:72:d3:6b:eb:fa:
                    a0:eb:53:24:1d:54:e5:25:4f:20:98:d7:39:3f:5b:
                    0c:e6:10:4f:b1:34:81:94:e4:9f:07:9a:bf:1f:fb:
                    cd:bb:02:da:40:3a:f9:c6:93:d3:75:1c:65:a5:cf:
                    60:08:a0:5f:13:5b:9b:77:27:a4:46:ca:97:3b:39:
                    01:f3:1f:fa:b2:13:45:22:03:32:e1:38:ee:17:12:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:A8:09:A5:15:05:C2:10:B5:1F:46:9D:7C:50:3E:F7:B7:B3:57
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:c8:92:66:7c:5f:d2:a1:4c:43:2c:29:1e:9f:04:10:76:
         64:fe:e3:22:14:ce:2b:51:95:1a:e0:98:98:85:d5:6d:47:16:
         1b:64:60:70:ab:ab:2c:18:0a:5d:d7:b3:09:92:8b:2c:46:58:
         7a:2f:9c:f8:85:6c:d8:c2:e6:88:76:05:f1:a1:f5:dc:ab:2f:
         d5:1b:c2:77:26:31:f0:c3:6f:a7:9b:5e:85:78:fb:e6:4d:de:
         af:ce:57:ef:23:cf:ac:2e:ee:a0:b7:5a:be:78:d1:89:5b:73:
         24:e7:55:0b:2d:25:20:2f:57:fa:02:d3:a9:30:cc:bc:d5:f6:
         41:c6:a7:c8:5b:32:46:5b:35:ff:1e:84:37:ec:20:bc:5d:6b:
         15:6f:55:85:b8:a1:3b:e3:56:d5:86:b5:34:0b:b2:44:75:7e:
         aa:ae:c4:1c:92:49:a9:f7:e5:85:0c:5a:cc:f5:25:90:1e:d1:
         3a:96:e2:17:d2:35:a7:1a:2f:47:ed:39:1e:de:f6:2f:50:80:
         9c:0d:b0:f6:0e:49:53:33:3f:ae:03:d8:0c:8c:d7:a2:9b:96:
         67:bd:15:61:63:31:49:32:9c:1a:b8:94:ae:6a:d2:97:b4:ca:
         8f:1a:56:47:9d:68:f0:08:cd:f4:7a:27:26:44:be:f6:4f:6a:
         11:9f:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:31 2025 by rpki-client