This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213866.roa
File:                     AS213866.roa (raw, json)
Hash identifier:          XKHQsimEbLxsQwwSJbytR48dgpXREojU2/YCT2ppriY=
Subject key identifier:   3C:87:09:10:A3:68:2B:B6:DD:59:C5:92:D3:D5:01:86:EB:DA:A4:B8
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       5DCBBE2E4DF3782A36F8E2C69E724201E4ECEBC6
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS213866.roa
Signing time:             Thu 08 Jan 2026 06:15:38 +0000
ROA not before:           Thu 08 Jan 2026 06:10:38 +0000
ROA not after:            Thu 07 Jan 2027 06:15:38 +0000
asID:                     213866
IP address blocks:        2a06:1281:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:be:2e:4d:f3:78:2a:36:f8:e2:c6:9e:72:42:01:e4:ec:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan  8 06:10:38 2026 GMT
            Not After : Jan  7 06:15:38 2027 GMT
        Subject: CN=3C870910A3682BB6DD59C592D3D50186EBDAA4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ff:45:4d:db:0a:3d:54:5a:19:e3:9e:2a:70:
                    04:83:ef:a5:ab:1a:84:25:19:0b:3a:0e:8a:c3:bc:
                    7b:51:9a:1c:8a:05:22:67:3c:39:39:04:b1:d1:34:
                    4c:15:47:ea:2c:09:e0:1c:c7:45:1a:1e:bc:65:49:
                    4a:f7:fd:bf:64:d8:64:e8:a7:85:ff:3d:65:20:09:
                    65:28:4e:a9:ac:c3:2f:89:dd:a7:b1:43:ea:cc:4d:
                    9a:cf:ff:a1:53:26:17:79:df:22:22:67:57:9c:44:
                    b6:00:0b:61:74:11:dd:a2:15:53:23:9b:f7:7b:63:
                    ad:e4:11:18:3c:92:91:11:f9:fe:35:2e:85:84:67:
                    a4:1c:8d:fd:31:12:fb:77:70:e5:44:9b:e8:a3:fb:
                    97:55:be:cd:fe:4f:d3:48:7c:b8:a2:1d:9d:c6:45:
                    d1:b4:44:ec:3a:ab:8e:67:ad:09:51:07:b7:17:ff:
                    a9:4a:7f:6a:d5:8e:9c:03:09:4f:6d:30:62:b4:4c:
                    f1:c4:42:9e:c5:7e:4b:5a:76:9c:5f:88:25:f5:b9:
                    17:d0:ba:af:44:47:1a:46:0d:59:d9:8b:74:9d:32:
                    c8:d3:43:b2:40:36:f9:f4:a3:a0:e2:0b:d9:f0:f1:
                    48:46:07:dd:7f:82:20:30:a9:44:ea:c7:c7:de:06:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:87:09:10:A3:68:2B:B6:DD:59:C5:92:D3:D5:01:86:EB:DA:A4:B8
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:c9:e5:3f:23:e0:51:2c:97:4f:d5:c9:cc:a9:23:e1:f5:
         2c:14:60:b4:df:b0:b1:8a:ca:61:fb:3c:2f:3b:0e:b2:73:1d:
         d6:f8:7a:c3:6d:c8:87:28:e6:51:69:a7:3c:da:3e:2c:49:87:
         e1:84:8d:8b:35:38:e0:ba:a3:f0:13:7c:1c:3b:5e:1f:49:66:
         8a:78:0e:df:5c:4d:27:14:bd:33:27:28:10:df:69:cc:e0:76:
         ca:3e:92:56:8e:9f:a7:ee:97:68:f9:22:82:2c:33:96:f9:9d:
         37:55:b7:01:1b:c4:7a:c2:19:1f:d7:80:5f:a0:5a:4a:26:ae:
         55:93:33:40:ed:50:c7:61:dd:29:22:58:18:15:2d:c1:4f:31:
         87:fc:d5:06:12:56:be:18:64:25:b2:5c:82:ee:14:0b:15:c6:
         e5:0d:05:69:1c:0f:ba:eb:6d:81:e5:61:5d:1b:d1:80:c3:3b:
         00:47:d4:98:c3:e7:d0:ef:2a:17:02:97:00:b1:1e:53:f5:5a:
         99:52:7e:6b:26:21:34:13:53:93:36:52:db:61:5f:ee:77:be:
         3f:16:c1:8e:92:30:f4:a4:d3:04:1d:a1:3a:47:59:96:7f:59:
         d3:a2:6f:a1:72:ef:c3:27:8d:4f:d2:69:fc:b6:23:2f:ac:8a:
         73:e8:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:13 2026 by rpki-client