This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208790.roa
File:                     AS208790.roa (raw, json)
Hash identifier:          B28216AyNOqcLZxYdP2kxpnSVwJdh5hWteRz5gpqMGw=
Subject key identifier:   94:15:F8:02:8E:EC:16:5C:F8:3B:A3:42:96:F3:92:57:B8:B0:E8:AC
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       5C3407EE89A9B91A8705AB562B1B20E68C1851A8
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS208790.roa
Signing time:             Sun 09 Nov 2025 16:14:18 +0000
ROA not before:           Sun 09 Nov 2025 16:09:18 +0000
ROA not after:            Sun 08 Nov 2026 16:14:18 +0000
asID:                     208790
IP address blocks:        2a0f:6284:510::/44 maxlen: 44
                          2a0f:6284:520::/44 maxlen: 44
                          2a0f:6284:600::/40 maxlen: 48
                          2a0f:6284:620::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:34:07:ee:89:a9:b9:1a:87:05:ab:56:2b:1b:20:e6:8c:18:51:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov  9 16:09:18 2025 GMT
            Not After : Nov  8 16:14:18 2026 GMT
        Subject: CN=9415F8028EEC165CF83BA34296F39257B8B0E8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:d6:8c:db:5c:60:dc:fe:4b:38:ef:a8:08:
                    78:1e:e6:d0:dc:d0:a6:bc:85:1c:5f:ba:b4:1f:1d:
                    87:4b:23:45:7a:d3:c2:b6:b6:25:60:cf:eb:c8:66:
                    fb:e8:33:a0:d2:5b:10:a2:c6:59:20:d7:29:f5:79:
                    0b:e5:08:4a:31:3a:77:d4:5e:20:cb:c1:91:e1:e9:
                    d3:40:2d:fc:ab:c2:b9:a3:26:d6:94:ec:fe:82:37:
                    6d:30:30:6f:68:9a:cd:e0:6a:f5:07:97:00:51:05:
                    12:c2:71:5d:f9:8b:b4:5d:a1:20:49:12:ed:8d:6f:
                    4c:c4:4a:dd:36:2f:2d:38:83:20:f6:6f:19:20:1f:
                    cd:6a:e1:e2:19:09:1a:c6:32:bd:28:23:7e:b3:45:
                    61:d4:0c:e2:c4:18:7b:66:4a:87:16:55:a6:75:2c:
                    03:c4:83:39:0e:42:52:26:c8:23:4e:4c:b3:17:39:
                    55:21:32:6a:33:17:a0:19:79:55:c9:be:6f:7c:24:
                    7b:ca:c6:16:33:7d:19:a8:86:56:d0:69:bf:94:48:
                    c4:05:e4:90:55:d5:93:d5:40:51:b6:a9:ff:61:f9:
                    11:be:b5:fe:45:fa:c2:36:90:08:1e:d3:ea:5a:de:
                    7e:17:e0:18:9c:7e:9b:34:0d:48:95:00:47:40:ac:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:15:F8:02:8E:EC:16:5C:F8:3B:A3:42:96:F3:92:57:B8:B0:E8:AC
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208790.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:510::-2a0f:6284:52f:ffff:ffff:ffff:ffff:ffff
                  2a0f:6284:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:63:f6:1e:60:da:74:80:65:02:9b:42:4c:7e:77:fd:a8:2e:
         d4:ad:ab:58:41:b0:54:8a:2a:00:b5:07:7d:b8:97:89:9b:a9:
         ed:83:b0:1d:39:6e:c4:dc:c5:00:6a:63:eb:26:4a:94:96:c5:
         0d:49:03:9e:d5:c6:20:04:27:17:8e:4a:b3:77:eb:1b:21:c9:
         31:66:49:39:e0:71:11:9f:8a:b4:f3:5c:ac:69:e6:7e:a0:20:
         d8:90:e4:28:73:58:95:cd:75:3d:c2:e0:6b:43:d4:3d:ad:ec:
         5c:1a:07:0c:c6:26:f4:ff:8e:35:a1:e1:bb:ad:ef:d0:4b:0a:
         0f:77:cf:f0:f1:83:43:7f:34:07:93:63:99:aa:62:69:1a:22:
         4a:51:09:47:8c:b1:03:da:72:db:5c:5d:0f:97:a7:83:fd:50:
         ea:f1:c2:e5:06:7e:63:0b:5f:d1:c6:e1:72:8b:56:01:e5:83:
         5e:48:6f:2f:0f:91:08:02:fd:2e:69:8d:b7:e3:c1:8c:50:6a:
         13:a7:3c:86:cc:1f:a9:b8:9e:68:f2:d1:15:2d:9a:7b:26:e5:
         94:fd:3e:53:2b:13:b4:f5:78:10:d2:05:57:3c:1b:1a:f6:fb:
         98:fa:b7:cc:e6:45:aa:a8:6c:3b:a4:ab:9c:ce:cd:3d:3c:30:
         31:dc:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:30 2025 by rpki-client