This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214610.roa
File:                     AS214610.roa (raw, json)
Hash identifier:          tJv0vCE3QIAGYKmVCWU5uNcp2ClrZXCdEXMm1JhdU1Q=
Subject key identifier:   16:EF:5E:E9:1F:6F:B2:6E:E3:E9:C6:74:D7:0D:CF:39:13:FE:A6:13
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       1D4B05439FCB38B2C7645934E52680D73C419348
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214610.roa
Signing time:             Thu 06 Nov 2025 18:36:49 +0000
ROA not before:           Thu 06 Nov 2025 18:31:49 +0000
ROA not after:            Thu 05 Nov 2026 18:36:49 +0000
asID:                     214610
IP address blocks:        2a0f:6284:300::/40 maxlen: 40
                          2a0f:6284:400::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4b:05:43:9f:cb:38:b2:c7:64:59:34:e5:26:80:d7:3c:41:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov  6 18:31:49 2025 GMT
            Not After : Nov  5 18:36:49 2026 GMT
        Subject: CN=16EF5EE91F6FB26EE3E9C674D70DCF3913FEA613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:70:48:b2:16:6d:60:83:3a:a5:a6:92:d8:
                    53:2c:1e:4e:8c:ff:f6:4b:8e:32:83:60:e3:13:fa:
                    73:02:55:19:17:e6:2e:ab:a3:75:ae:9b:97:0d:6d:
                    dd:94:94:35:00:e1:7a:69:ab:47:ef:a3:5a:36:cd:
                    66:f8:91:df:3d:8e:61:12:9c:25:78:4d:78:20:f3:
                    86:e0:4a:e7:b2:d9:51:23:02:6e:ff:ce:77:d6:66:
                    ea:87:ea:8f:fd:e9:5e:cc:7c:f4:1b:3f:8f:a9:2b:
                    10:68:4a:f8:59:0c:5d:bd:44:b7:d3:55:4e:df:c3:
                    14:51:83:1a:7d:18:a1:20:a8:cc:dd:d4:b0:53:48:
                    23:2c:de:43:52:1b:49:d8:a2:d4:79:bc:e7:14:3b:
                    86:df:06:dc:e2:52:51:ab:4f:7c:0e:d8:95:15:e8:
                    64:22:22:f8:92:1b:d7:94:5d:00:66:9e:0e:84:b2:
                    90:c2:b6:5c:d1:1e:20:e4:76:33:ca:dc:da:18:cc:
                    08:f8:8a:09:ed:af:1c:3e:91:84:f0:49:98:7c:fe:
                    e4:0b:1a:22:e3:60:a0:b0:f8:16:54:26:92:6f:66:
                    78:fc:c8:f8:51:c6:b7:06:a6:c8:0f:49:d5:57:cc:
                    b3:8f:c8:e1:13:11:63:ae:e4:0e:c9:35:25:22:71:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:5E:E9:1F:6F:B2:6E:E3:E9:C6:74:D7:0D:CF:39:13:FE:A6:13
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214610.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:300::-2a0f:6284:4ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         63:74:d3:b5:b7:34:8c:1a:84:a7:bd:d5:e1:b4:f4:ae:5f:3a:
         38:02:d6:02:42:d6:da:b5:4a:94:e1:0f:46:2c:29:5e:33:46:
         5a:80:6c:b0:9c:09:87:df:b9:23:a8:e0:c2:31:e4:ae:1a:35:
         3b:5f:d5:5b:9c:20:ca:d1:e3:25:f4:e9:8d:e8:d4:70:19:da:
         75:85:06:a4:3a:75:e7:95:4d:19:50:c3:60:d0:b7:cd:14:8f:
         0e:d7:02:c1:73:07:47:bd:3f:81:c6:f8:15:7f:15:3d:a3:e7:
         25:0c:cd:46:0b:c7:3b:f5:8c:72:d3:f2:20:f2:0b:90:45:b8:
         33:70:ef:b4:75:8d:e0:01:35:bc:26:b3:3f:5a:48:92:05:f4:
         f2:84:5c:46:27:f7:d7:d8:1a:22:e8:8b:bf:32:6e:ed:aa:ca:
         09:60:a1:8d:f9:d4:aa:65:18:42:b8:75:cc:e8:09:72:6b:70:
         99:7d:20:0e:59:fe:ab:c2:68:7b:5d:96:b8:a5:ca:b0:78:1e:
         cc:49:eb:88:f0:38:df:14:7c:a3:78:33:ad:6e:9a:f5:e6:3c:
         6a:c0:5d:87:a3:83:64:2b:3e:58:aa:b2:b6:53:ee:c4:ea:d4:
         98:e3:87:31:e0:7f:90:38:a9:55:e0:d9:4c:26:2c:ab:df:0d:
         74:86:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:19 2025 by rpki-client