This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214040.roa
File:                     AS214040.roa (raw, json)
Hash identifier:          0ykGg+sCGPaQz2X5TYj494FZqz3OHqkPAXVQNrUMB/4=
Subject key identifier:   DE:CB:09:2E:8C:68:6D:C7:DD:AD:70:C7:18:2D:C2:FD:A7:FD:E5:B7
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       3130870AB43792C750F05794669BAC7A3B893A42
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
Signing time:             Fri 02 Jan 2026 13:38:34 +0000
ROA not before:           Fri 02 Jan 2026 13:33:34 +0000
ROA not after:            Fri 01 Jan 2027 13:38:34 +0000
asID:                     214040
IP address blocks:        2a06:1281:8000::/36 maxlen: 36
                          2a09:54c6:3000::/36 maxlen: 36
                          2a09:54c6:b000::/36 maxlen: 36
                          2a09:54c6:c000::/36 maxlen: 44
                          2a09:54c6:e000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:30:87:0a:b4:37:92:c7:50:f0:57:94:66:9b:ac:7a:3b:89:3a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan  2 13:33:34 2026 GMT
            Not After : Jan  1 13:38:34 2027 GMT
        Subject: CN=DECB092E8C686DC7DDAD70C7182DC2FDA7FDE5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:99:a2:bc:f4:5e:4b:69:3d:e8:03:a1:38:
                    50:88:28:e9:9d:d6:a2:83:ec:f4:d7:30:e1:ed:d0:
                    d8:50:64:cc:46:74:21:f9:e6:ed:be:30:42:00:8d:
                    ea:59:b4:1f:36:cf:31:d8:9f:0f:87:78:5c:73:d9:
                    76:44:53:83:c2:51:68:63:ed:75:c8:31:c9:93:c6:
                    ad:9a:63:17:2b:5e:44:a3:00:f6:7a:d1:04:bf:e2:
                    6b:1d:dd:08:2a:59:6e:f9:22:79:c7:1d:9e:db:10:
                    87:35:8e:5b:38:c4:f0:29:20:6f:fd:e0:c1:a6:c3:
                    e0:80:14:d9:c1:22:b3:f6:af:01:82:53:50:5f:0d:
                    bf:07:94:de:0b:4c:af:19:08:fa:8d:0c:11:f1:c3:
                    61:78:5c:fb:3c:74:53:e9:25:27:95:7e:38:52:5e:
                    8c:80:2c:cd:48:f8:64:3c:2c:9e:fc:09:61:4a:d2:
                    d4:42:37:ff:ee:50:85:9a:15:0b:97:11:b1:e8:6f:
                    bf:c4:20:6f:5a:ad:0b:e5:fd:26:66:0b:57:b3:e1:
                    f9:6b:6d:7c:b5:af:63:d8:82:cf:75:8c:6a:05:3c:
                    f5:dd:9d:69:e6:ca:eb:5a:04:76:98:19:68:0e:3d:
                    bf:0c:46:d8:7d:56:08:67:c4:43:eb:aa:82:05:9b:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CB:09:2E:8C:68:6D:C7:DD:AD:70:C7:18:2D:C2:FD:A7:FD:E5:B7
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:8000::/36
                  2a09:54c6:3000::/36
                  2a09:54c6:b000::-2a09:54c6:cfff:ffff:ffff:ffff:ffff:ffff
                  2a09:54c6:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:ff:4d:28:5b:f8:ad:a3:07:43:b1:75:a5:ad:35:ed:ff:63:
         b7:90:6d:57:38:61:ce:73:ed:74:c3:90:98:be:56:c9:6e:84:
         60:8a:bf:96:6f:0e:e9:c4:4a:41:a2:92:7a:57:8d:39:61:4e:
         e8:88:15:47:c8:a3:b8:22:2d:97:47:f9:98:49:23:53:16:ac:
         3f:0a:c0:50:01:ca:1d:83:f2:24:98:a4:48:56:5f:a3:24:fe:
         ef:c9:f2:c9:4a:74:12:23:76:80:ee:6e:fc:2b:25:f1:f1:3e:
         1e:cf:66:82:cf:3d:d3:38:bf:38:44:f1:65:d8:ca:a0:ae:a5:
         a4:15:75:d4:2d:af:1d:fe:c9:d9:6f:d1:b7:58:3f:6a:10:65:
         d0:3a:19:7d:9e:83:6f:8b:56:67:de:20:c3:85:da:7e:c0:70:
         e2:f5:0d:85:1b:a9:27:70:5f:a0:3b:55:f8:24:06:af:bf:ce:
         4a:21:c3:90:fe:0a:db:37:d8:58:f7:49:96:1a:ad:7c:18:0b:
         c1:5f:4b:1e:6b:8f:21:67:34:c8:8c:65:ef:85:cd:ac:6b:55:
         8b:a7:5d:43:59:7e:02:a8:ee:dd:54:9e:84:b8:d5:1a:7e:da:
         33:eb:f6:c5:9a:ae:22:a0:91:bc:d2:e5:88:9f:70:e2:ce:a2:
         a8:f7:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:14 2026 by rpki-client