This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202996.roa
File:                     AS202996.roa (raw, json)
Hash identifier:          0eCZwOseb2idcHLvu6KMxD3iI7wSUMKpZN4Clf/ln7g=
Subject key identifier:   04:6F:F6:08:D1:E7:06:A8:2C:82:A7:7F:2E:6D:3A:46:04:FC:B5:6D
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       11380FFB2E358F229A9D9CC2DAA1B36378F4CEE9
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS202996.roa
Signing time:             Tue 23 Dec 2025 11:22:42 +0000
ROA not before:           Tue 23 Dec 2025 11:17:42 +0000
ROA not after:            Tue 22 Dec 2026 11:22:42 +0000
asID:                     202996
IP address blocks:        2a0f:6284:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:0f:fb:2e:35:8f:22:9a:9d:9c:c2:da:a1:b3:63:78:f4:ce:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 23 11:17:42 2025 GMT
            Not After : Dec 22 11:22:42 2026 GMT
        Subject: CN=046FF608D1E706A82C82A77F2E6D3A4604FCB56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:1a:de:e9:d4:ab:52:fc:f8:56:9a:80:fd:
                    1e:ca:85:11:61:73:bc:74:b4:e8:63:83:39:5c:6c:
                    46:f1:7d:75:b8:7c:40:71:d4:43:66:d5:ef:01:8f:
                    46:33:42:d9:e0:4b:7b:75:7c:39:48:42:13:40:d7:
                    69:d1:95:6d:0c:26:4d:d4:90:ab:f5:29:8d:6b:b4:
                    54:56:91:5b:a4:c5:44:9a:f4:93:95:37:de:38:38:
                    1e:e8:bb:b8:d2:7d:a2:60:7f:96:4b:6e:c7:16:78:
                    52:fd:c7:cf:92:6c:17:07:c3:c2:66:8b:b0:49:47:
                    f9:2c:d7:e1:a4:5e:ee:7b:dd:75:ac:26:19:52:73:
                    6e:94:72:26:cd:80:a7:08:e2:93:19:17:db:49:d1:
                    f7:44:34:39:f2:62:13:38:53:c8:20:da:82:ea:74:
                    2c:68:48:e1:3e:89:ee:7c:17:06:ee:24:50:30:65:
                    83:a5:1d:72:94:fa:c9:6f:a8:9f:2a:a9:4e:89:06:
                    59:aa:95:a4:5f:68:33:7a:cf:d5:e9:17:5e:d5:b0:
                    26:bc:a9:a9:c4:fb:72:8a:b1:70:1a:a5:a0:cc:b8:
                    56:59:1e:41:b3:e1:f6:f9:e4:be:82:13:4e:db:98:
                    44:07:3c:6e:b2:e2:0e:c6:e9:b4:10:5a:03:5b:03:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6F:F6:08:D1:E7:06:A8:2C:82:A7:7F:2E:6D:3A:46:04:FC:B5:6D
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:09:a7:88:60:a7:be:c5:3e:41:e5:76:1e:52:75:6f:2b:e8:
         c7:3e:23:b9:6e:fb:7e:c0:04:b2:0a:b6:82:52:aa:76:9d:11:
         27:5d:02:98:00:ca:50:8d:2d:5b:9d:4d:6c:b5:e8:c2:96:f6:
         ad:15:a1:10:a9:62:26:8e:a4:c4:ba:e0:c6:fd:b0:b3:38:1d:
         67:ed:3f:45:5c:9c:6c:6e:77:e1:e7:b1:7a:ab:2f:3c:82:8c:
         ef:9b:84:ab:e4:fa:71:17:25:83:8f:6d:19:11:f2:fc:17:30:
         db:d4:db:f9:4b:c8:91:25:27:d4:4c:e4:e8:1e:26:6d:a1:8f:
         13:af:5f:bc:c1:19:8c:a8:6d:34:f3:94:14:65:2c:8b:af:9d:
         da:cc:47:aa:5a:a8:fb:d7:c0:67:cb:6d:6b:92:5b:7d:0a:1d:
         d9:cb:b6:33:41:7f:41:e2:33:7f:90:1f:db:2c:8a:48:67:36:
         5e:e7:b9:1b:25:7a:4e:9a:1a:20:38:17:6b:95:3e:31:ca:ec:
         db:3b:8e:f1:53:29:66:2d:56:8c:de:56:71:84:da:f1:26:7f:
         20:cf:ed:71:3f:b9:56:33:09:4c:31:d1:de:15:c0:b6:5c:55:
         f4:62:50:7e:41:28:a8:35:6d:98:b0:70:a0:6e:8a:fd:50:71:
         f4:78:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:04 2026 by rpki-client