This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210215.roa
File:                     AS210215.roa (raw, json)
Hash identifier:          YvbMeigMPdUj4gsv1mm4Mpd2sZ2UrA/FzxuhvpHDdPg=
Subject key identifier:   E3:C1:66:84:B6:67:2B:50:CE:77:2E:58:2F:36:A1:1B:63:C4:6C:68
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       11F9E7BE6BB55E575715412FD3E2CEE1A6576546
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS210215.roa
Signing time:             Mon 10 Nov 2025 05:31:55 +0000
ROA not before:           Mon 10 Nov 2025 05:26:55 +0000
ROA not after:            Mon 09 Nov 2026 05:31:55 +0000
asID:                     210215
IP address blocks:        2a0f:6283:1200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f9:e7:be:6b:b5:5e:57:57:15:41:2f:d3:e2:ce:e1:a6:57:65:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 10 05:26:55 2025 GMT
            Not After : Nov  9 05:31:55 2026 GMT
        Subject: CN=E3C16684B6672B50CE772E582F36A11B63C46C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:cb:da:06:9b:79:a2:72:78:5e:1e:1d:45:
                    7a:d9:9e:7a:95:f7:ad:e6:62:7b:5c:4b:c0:66:51:
                    09:62:81:1a:ed:4f:ae:b5:66:8e:95:57:e2:d9:10:
                    04:61:4b:ec:47:5e:f8:55:01:4b:de:3a:9a:0b:ad:
                    fc:3d:ed:93:33:54:3b:e6:95:f6:da:c6:f6:fb:3f:
                    bd:4e:8f:0e:8d:cd:79:e7:53:c1:dc:1b:9a:c1:36:
                    c1:db:9b:d3:db:c2:4d:a0:a4:42:d4:02:86:58:64:
                    7a:a5:2c:13:b0:10:ee:2a:e7:50:3e:d9:8b:01:f3:
                    8a:67:54:89:98:20:71:43:5f:c8:bd:70:76:c4:a9:
                    02:b0:20:5a:29:98:23:5d:b5:df:48:40:23:7c:f4:
                    14:cd:a2:ee:ff:3a:a0:43:c1:7b:a9:24:4a:78:a8:
                    3c:51:cf:43:f7:f7:8b:fb:61:06:f6:ad:ad:b3:03:
                    20:cd:da:b3:c5:98:9c:49:79:1e:09:30:52:7c:bc:
                    5a:e8:6b:55:17:d9:5b:f8:26:18:0a:f6:ab:87:a6:
                    38:0e:20:c0:ed:92:1b:b3:ab:02:2b:d2:cf:34:f9:
                    70:44:1d:85:bb:81:c7:36:38:85:0c:4d:25:da:34:
                    22:6d:16:c4:2f:89:30:6a:d6:d9:80:06:57:db:39:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:66:84:B6:67:2B:50:CE:77:2E:58:2F:36:A1:1B:63:C4:6C:68
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6283:1200::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:35:d5:f2:03:c2:0e:e9:e5:6d:be:9f:bf:09:de:17:c0:
         ff:f2:68:25:c0:e9:30:a2:82:b3:f6:46:d8:fc:b0:01:bd:5d:
         c5:6f:92:f5:e3:d8:ca:3e:b7:bf:cd:88:5a:ce:95:0b:bd:5c:
         4a:7b:c9:04:56:90:8a:24:8d:9c:f7:e0:7d:52:a5:35:ff:38:
         99:f0:97:9f:9c:91:33:3b:94:6e:37:b0:c9:33:7c:28:72:7a:
         e0:fc:26:70:9d:6d:80:ec:09:05:9b:d5:ac:49:7c:36:aa:97:
         f8:5e:40:a7:de:eb:ac:c3:a5:b2:97:71:14:4f:4a:ec:a4:28:
         7e:fa:35:52:46:2d:c9:92:02:e5:98:e8:4c:2a:69:73:4c:e3:
         62:b5:26:4e:fb:31:57:84:8b:5c:42:a6:87:06:38:06:e5:05:
         72:5a:21:57:6f:96:1a:44:71:21:10:72:b1:95:b7:16:51:69:
         80:cf:5e:d4:8f:75:8f:61:76:d6:c8:74:d3:d9:d3:e9:9e:11:
         92:43:66:a2:48:7b:e7:33:d4:02:ae:57:e5:e2:71:19:29:9d:
         09:5c:b0:4d:98:8f:9b:29:64:e8:80:c8:49:94:36:d0:48:98:
         08:2f:df:91:99:88:ad:7c:ad:66:ab:b1:0b:e7:91:5a:51:01:
         ae:81:e8:2a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUEfnnvmu1XldXFUEv0+LO4aZXZUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTExMTAwNTI2NTVaFw0yNjExMDkwNTMxNTVaMDMxMTAvBgNV
BAMTKEUzQzE2Njg0QjY2NzJCNTBDRTc3MkU1ODJGMzZBMTFCNjNDNDZDNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxscvaBpt5onJ4Xh4dRXrZnnqV
963mYntcS8BmUQligRrtT661Zo6VV+LZEARhS+xHXvhVAUveOpoLrfw97ZMzVDvm
lfbaxvb7P71Ojw6NzXnnU8HcG5rBNsHbm9Pbwk2gpELUAoZYZHqlLBOwEO4q51A+
2YsB84pnVImYIHFDX8i9cHbEqQKwIFopmCNdtd9IQCN89BTNou7/OqBDwXupJEp4
qDxRz0P394v7YQb2ra2zAyDN2rPFmJxJeR4JMFJ8vFroa1UX2Vv4JhgK9quHpjgO
IMDtkhuzqwIr0s80+XBEHYW7gcc2OIUMTSXaNCJtFsQviTBq1tmABlfbOSsxAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQU48FmhLZnK1DOdy5YLzahG2PEbGgwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTAyMTUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
D2KDEgAwDQYJKoZIhvcNAQELBQADggEBAH0DNdXyA8IO6eVtvp+/Cd4XwP/yaCXA
6TCigrP2Rtj8sAG9XcVvkvXj2Mo+t7/NiFrOlQu9XEp7yQRWkIokjZz34H1SpTX/
OJnwl5+ckTM7lG43sMkzfChyeuD8JnCdbYDsCQWb1axJfDaql/heQKfe66zDpbKX
cRRPSuykKH76NVJGLcmSAuWY6EwqaXNM42K1Jk77MVeEi1xCpocGOAblBXJaIVdv
lhpEcSEQcrGVtxZRaYDPXtSPdY9hdtbIdNPZ0+meEZJDZqJIe+cz1AKuV+XicRkp
nQlcsE2Yj5spZOiAyEmUNtBImAgv35GZiK18rWarsQvnkVpRAa6B6Co=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:56:45 2025 by rpki-client