This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206000.roa
File:                     AS206000.roa (raw, json)
Hash identifier:          95LW9WSXF19KtKGiRmM8lEnh7Dkv4jtwM9cGIhWslpo=
Subject key identifier:   AF:92:6A:62:7D:C9:81:12:A9:07:F1:7F:61:79:DD:C1:14:E3:3D:9C
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       393B4EC8228AAD9E5A3BE8A612F9675705D676A0
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS206000.roa
Signing time:             Thu 27 Nov 2025 21:39:08 +0000
ROA not before:           Thu 27 Nov 2025 21:34:08 +0000
ROA not after:            Thu 26 Nov 2026 21:39:08 +0000
asID:                     206000
IP address blocks:        2a0f:6284:4::/48 maxlen: 48
                          2a0f:6284:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3b:4e:c8:22:8a:ad:9e:5a:3b:e8:a6:12:f9:67:57:05:d6:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 27 21:34:08 2025 GMT
            Not After : Nov 26 21:39:08 2026 GMT
        Subject: CN=AF926A627DC98112A907F17F6179DDC114E33D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6d:e0:3e:4d:f2:14:12:c5:66:59:93:ed:fe:
                    a4:9c:48:c3:0e:22:ac:5d:f1:3f:3b:46:c2:8d:23:
                    01:c9:f2:4c:17:c9:02:d6:d3:e3:8e:79:07:8c:44:
                    4f:20:a5:68:48:0c:eb:38:85:a7:f2:e8:91:be:64:
                    25:13:33:b8:3f:78:08:08:c0:5e:84:a4:f4:64:71:
                    2f:cf:b2:54:9a:71:56:6e:36:00:16:4e:a4:2a:88:
                    f2:de:70:51:36:88:26:9e:ed:15:22:8a:4e:a0:14:
                    50:d1:3a:0a:4b:20:da:94:f1:d5:f9:1b:14:25:e2:
                    ee:34:88:cf:b8:e4:15:2d:84:93:13:6b:8e:35:0b:
                    31:cf:f3:65:ca:1e:d8:23:c9:8d:cf:c3:49:0e:e0:
                    3f:bc:23:07:99:b8:57:57:d3:35:d3:c7:e1:d8:ab:
                    14:db:9d:c0:15:fc:0a:cd:38:41:ba:53:3e:5e:08:
                    3e:5f:82:be:0b:c7:4b:3a:50:03:ac:a9:e2:a9:50:
                    3f:69:11:a0:09:01:cf:08:c6:ee:c2:96:30:de:a2:
                    a1:01:2d:4a:50:95:fd:e0:71:ba:f1:7f:a3:68:3f:
                    33:7b:a3:39:16:3e:a8:32:80:2a:15:e0:fd:4e:ad:
                    b4:3e:63:2c:57:64:42:fd:70:8f:c2:7b:f1:1f:5b:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:6A:62:7D:C9:81:12:A9:07:F1:7F:61:79:DD:C1:14:E3:3D:9C
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206000.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:4::/48
                  2a0f:6284:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:70:21:04:65:27:67:2b:63:80:e6:3c:18:dd:b2:1c:de:96:
         a1:f3:c1:b4:0a:16:9c:f1:82:9a:8e:4a:9d:81:c5:c7:bb:b2:
         f9:8c:d2:33:29:e6:e2:14:8d:c7:00:0c:9d:95:66:c1:8f:e9:
         f2:7b:b4:ad:22:6d:d9:d5:8c:5c:18:a4:8c:33:cb:9a:2e:15:
         ed:c8:89:f7:55:9e:2e:78:f0:9d:48:30:4c:21:0f:89:63:3d:
         70:9b:07:32:53:31:b8:9f:7c:9f:6c:cc:b7:cb:d8:fd:95:e7:
         2e:dd:5d:68:3d:11:24:2d:85:9a:dc:1f:07:bd:56:42:da:bc:
         db:2c:0c:de:62:a7:47:3c:d4:a2:13:c2:b3:c7:2d:9c:a8:4b:
         77:68:23:25:4b:bb:14:bc:4a:d1:af:94:df:1b:3c:53:8b:7c:
         be:4d:6e:cb:74:c9:ed:f5:19:94:5c:44:e6:3d:9c:d2:96:79:
         5e:a3:cd:08:24:0e:d7:de:bf:fc:fb:42:a3:13:b7:e8:ae:49:
         04:c1:5b:55:43:e3:3c:80:81:46:39:5e:f2:d1:01:8f:b9:ed:
         53:be:aa:c9:92:2a:97:54:71:b8:f7:52:f6:1a:a6:a6:f4:92:
         cd:2c:a9:71:28:e9:32:e1:63:82:38:e5:c1:5a:84:c1:93:a8:
         4d:32:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:11:53 2025 by rpki-client