This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213422.roa
File:                     AS213422.roa (raw, json)
Hash identifier:          iSbC82pC9yB6eqeoMg536Mm6+BaqfY/mzDdVhd3LML4=
Subject key identifier:   30:69:FF:C8:A4:3B:7B:BE:ED:67:05:8B:54:2D:B0:5F:EC:0E:D4:60
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       2A811E08B280C3BD0089BDB7094269D870C39EE7
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa
Signing time:             Fri 26 Dec 2025 13:32:03 +0000
ROA not before:           Fri 26 Dec 2025 13:27:03 +0000
ROA not after:            Fri 25 Dec 2026 13:32:03 +0000
asID:                     213422
IP address blocks:        2a0f:6283:1400::/48 maxlen: 48
                          2a0f:6283:1401::/48 maxlen: 48
                          2a0f:6283:1402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:81:1e:08:b2:80:c3:bd:00:89:bd:b7:09:42:69:d8:70:c3:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 26 13:27:03 2025 GMT
            Not After : Dec 25 13:32:03 2026 GMT
        Subject: CN=3069FFC8A43B7BBEED67058B542DB05FEC0ED460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:d3:05:34:0a:f0:fa:ff:30:a4:59:8b:eb:
                    a8:b0:2c:93:32:3a:ef:e4:0d:9a:a3:b9:11:92:03:
                    c0:6c:df:f0:5d:f8:1e:cf:3d:80:7e:a1:c3:31:f3:
                    50:fb:bd:a4:8e:36:50:49:67:b4:c3:60:32:38:f9:
                    25:fd:60:5c:a5:25:73:b9:2a:10:a8:42:78:fe:ec:
                    7f:ea:49:eb:d3:db:7d:e9:09:63:f0:40:b1:ed:a8:
                    66:20:82:be:2d:8a:06:14:5a:50:3b:81:d1:7d:ba:
                    2b:cb:3b:2e:3b:1c:52:1c:0d:b7:75:01:a9:a8:b7:
                    d5:f0:80:d2:5f:75:05:51:b1:d5:26:61:30:e1:cd:
                    69:48:5a:5e:30:1c:4c:53:3f:1f:f1:d0:43:38:ef:
                    e9:ed:8a:a8:29:1c:48:c2:4c:40:0f:0d:00:4a:b5:
                    bd:2c:b1:f5:4e:c3:6e:7e:65:8d:fc:7d:13:0b:0a:
                    e2:ff:ed:f6:d4:6c:e2:b4:ad:b7:49:b2:84:c3:ef:
                    e2:fb:95:5b:bf:61:64:00:b2:8d:c9:0b:af:ca:ba:
                    38:dc:ef:1d:11:c6:ef:ea:8c:c0:0c:50:4f:9f:91:
                    ef:27:c5:fc:cc:84:b4:b0:12:21:a9:b7:4b:f2:96:
                    e1:32:ff:04:ec:a2:d5:c4:36:20:94:6a:ba:bd:03:
                    9b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:FF:C8:A4:3B:7B:BE:ED:67:05:8B:54:2D:B0:5F:EC:0E:D4:60
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213422.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6283:1400::-2a0f:6283:1402:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:38:cd:55:66:78:3b:b4:f0:d5:71:fb:25:72:5d:65:bb:
         00:46:0b:b6:59:b1:4d:e2:92:48:d8:18:ad:24:59:8c:b9:f9:
         0c:80:95:26:36:fe:d3:67:d6:e5:49:45:8b:bf:ed:31:99:f5:
         c1:d6:1f:aa:af:e2:03:66:1a:02:80:62:3c:1e:7f:6a:9c:08:
         71:c3:c1:cf:1d:73:27:35:d4:4b:f5:7d:02:14:d7:b2:62:8a:
         c5:89:e3:9d:54:f0:9f:c9:b7:30:d7:d4:4b:2f:9e:a3:00:47:
         fb:17:23:05:a0:1e:87:8d:7b:1b:c6:b1:c1:54:1a:0b:9f:e9:
         ab:60:75:a0:47:1e:e4:68:4d:55:07:bb:4d:d8:e0:63:7f:7e:
         9f:0f:e5:3c:a6:5c:62:71:a8:e2:30:19:76:fc:3d:ca:a1:5e:
         d6:47:e4:ef:e4:32:39:a2:84:86:c6:a5:54:40:02:8e:83:ba:
         31:c0:2d:b3:1a:6a:0f:ca:f3:84:7f:39:cf:fc:0d:b8:69:94:
         80:29:5e:7a:c8:31:cd:1b:b8:a6:e5:72:b2:d6:6d:e8:12:ba:
         8f:bc:aa:01:43:19:e6:a4:ee:cb:00:dc:be:f2:76:b2:6a:0b:
         97:d8:51:e4:ca:60:71:19:36:ff:08:e0:e4:22:7d:65:53:75:
         7f:c6:ea:df
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUKoEeCLKAw70Aib23CUJp2HDDnucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTEyMjYxMzI3MDNaFw0yNjEyMjUxMzMyMDNaMDMxMTAvBgNV
BAMTKDMwNjlGRkM4QTQzQjdCQkVFRDY3MDU4QjU0MkRCMDVGRUMwRUQ0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQN9MFNArw+v8wpFmL66iwLJMy
Ou/kDZqjuRGSA8Bs3/Bd+B7PPYB+ocMx81D7vaSONlBJZ7TDYDI4+SX9YFylJXO5
KhCoQnj+7H/qSevT233pCWPwQLHtqGYggr4tigYUWlA7gdF9uivLOy47HFIcDbd1
Aamot9XwgNJfdQVRsdUmYTDhzWlIWl4wHExTPx/x0EM47+ntiqgpHEjCTEAPDQBK
tb0ssfVOw25+ZY38fRMLCuL/7fbUbOK0rbdJsoTD7+L7lVu/YWQAso3JC6/Kujjc
7x0Rxu/qjMAMUE+fke8nxfzMhLSwEiGpt0vyluEy/wTsotXENiCUarq9A5sFAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUMGn/yKQ7e77tZwWLVC2wX+wO1GAwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM0MjIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwLAYIKwYBBQUHAQcBAf8EHTAbMBkEAgACMBMwEQMG
AioPYoMUAwcAKg9igxQCMA0GCSqGSIb3DQEBCwUAA4IBAQBOeTjNVWZ4O7Tw1XH7
JXJdZbsARgu2WbFN4pJI2BitJFmMufkMgJUmNv7TZ9blSUWLv+0xmfXB1h+qr+ID
ZhoCgGI8Hn9qnAhxw8HPHXMnNdRL9X0CFNeyYorFieOdVPCfybcw19RLL56jAEf7
FyMFoB6HjXsbxrHBVBoLn+mrYHWgRx7kaE1VB7tN2OBjf36fD+U8plxicajiMBl2
/D3KoV7WR+Tv5DI5ooSGxqVUQAKOg7oxwC2zGmoPyvOEfznP/A24aZSAKV56yDHN
G7im5XKy1m3oErqPvKoBQxnmpO7LANy+8nayaguX2FHkymBxGTb/CODkIn1lU3V/
xurf
-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:14 2026 by rpki-client