This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209693.roa
File:                     AS209693.roa (raw, json)
Hash identifier:          bl1Rz01c/MRBvaqJXvP/nSRaMAXGe3wnMj9e2UHPbEQ=
Subject key identifier:   53:3D:C9:F7:73:08:15:06:BC:4F:16:E8:C8:C7:83:BC:22:4A:DA:E4
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       1AC7CE22014A04094B077B87799D62A522E38542
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa
Signing time:             Sat 31 Jan 2026 00:24:36 +0000
ROA not before:           Sat 31 Jan 2026 00:19:36 +0000
ROA not after:            Sat 30 Jan 2027 00:24:36 +0000
asID:                     209693
IP address blocks:        2a0f:6284:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c7:ce:22:01:4a:04:09:4b:07:7b:87:79:9d:62:a5:22:e3:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 31 00:19:36 2026 GMT
            Not After : Jan 30 00:24:36 2027 GMT
        Subject: CN=533DC9F773081506BC4F16E8C8C783BC224ADAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:4b:59:73:2e:e5:1c:7a:e6:cc:94:c3:f7:
                    84:f2:ff:54:2a:6e:29:4b:f6:0c:87:67:b0:5d:0d:
                    85:33:d6:bd:37:a5:c1:7f:c0:4e:fb:e5:e1:b6:a6:
                    0c:e2:cd:36:34:90:ca:47:06:37:02:77:f6:3e:3c:
                    4a:70:56:f5:b6:20:e9:2a:3d:2c:33:91:a4:b3:e6:
                    55:81:2d:24:73:7c:75:4a:19:c2:8f:33:67:0e:af:
                    46:da:7f:ee:a2:5f:2b:27:f0:55:fe:fe:6a:2f:e5:
                    97:3c:0b:dc:96:4c:07:b9:13:c6:a5:de:28:c8:23:
                    1c:98:60:44:a5:37:3b:1b:ab:3e:3f:42:5c:c7:da:
                    68:e6:f7:a7:37:b9:6a:79:9c:15:ea:25:0a:e4:0b:
                    e6:ae:3b:ac:e3:db:31:fb:eb:43:76:27:6a:b9:2a:
                    3a:fa:90:e9:48:c8:f8:df:d6:d5:8b:ae:8a:77:7d:
                    42:61:b7:1a:9f:69:3e:61:dc:92:95:d9:87:98:54:
                    0e:6f:a0:b1:73:cb:96:8c:a3:75:5a:40:97:81:34:
                    db:be:40:59:a5:ee:f3:8c:25:62:43:7a:37:28:76:
                    28:39:1f:16:db:1f:8d:83:00:b1:80:50:d0:b9:e8:
                    57:03:6b:7b:23:86:e9:f5:47:0e:4d:9d:b3:07:3a:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:C9:F7:73:08:15:06:BC:4F:16:E8:C8:C7:83:BC:22:4A:DA:E4
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:56:1e:fe:ed:31:41:e5:6b:e6:f8:ab:7d:16:eb:0f:a7:
         ce:d8:dd:f9:80:24:c4:09:4d:50:ba:30:0e:33:b4:a6:06:85:
         5f:b3:c2:78:b5:5f:3f:ed:4d:2d:8a:e5:c5:49:f8:b8:ee:66:
         37:2e:e8:13:04:d7:76:ca:c8:74:9d:02:89:44:58:28:80:e9:
         11:78:d0:25:4c:2c:79:5d:ee:bd:3c:79:94:6a:34:fc:0c:b6:
         11:f4:e1:c8:03:de:97:db:43:fe:cb:ff:01:c5:ce:6c:df:3b:
         14:04:44:d9:36:02:ed:45:cb:70:90:f9:90:3a:fb:ff:e0:a9:
         c7:fa:a9:39:27:7b:d0:9f:d9:8b:d9:3e:e1:81:40:a3:ff:1d:
         c1:9a:37:ff:b5:e0:2e:5a:9c:d9:8c:dc:11:d6:35:c4:c1:79:
         ce:7d:1d:ba:43:27:05:09:85:56:fb:41:60:39:82:5e:0b:50:
         e5:88:97:43:4a:af:08:d7:d6:4a:ed:8e:cb:f3:b0:f3:80:02:
         ae:15:1c:49:39:4c:3b:75:b0:ca:bc:12:2b:66:b9:7e:59:90:
         a3:ae:88:7e:ba:22:37:36:b8:18:d3:87:a6:bf:75:00:78:77:
         92:e4:49:19:6e:c6:b9:3a:83:72:2a:db:9c:f8:89:b3:e6:21:
         5a:46:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:10:47 2026 by rpki-client