This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214989.roa
File:                     AS214989.roa (raw, json)
Hash identifier:          sVe31Kq8JOFqwcNt3WwwgOJ+THIK8XGs1iCBQr64nAc=
Subject key identifier:   D9:A0:04:40:EA:AB:AE:83:86:38:21:7F:C5:69:CD:E6:A0:B9:77:6A
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       4208039FADB8EE1695C783EEF9DD1D07C8A5A965
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa
Signing time:             Sun 25 Jan 2026 16:12:49 +0000
ROA not before:           Sun 25 Jan 2026 16:07:49 +0000
ROA not after:            Sun 24 Jan 2027 16:12:49 +0000
asID:                     214989
IP address blocks:        2a0f:6284:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:08:03:9f:ad:b8:ee:16:95:c7:83:ee:f9:dd:1d:07:c8:a5:a9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 25 16:07:49 2026 GMT
            Not After : Jan 24 16:12:49 2027 GMT
        Subject: CN=D9A00440EAABAE838638217FC569CDE6A0B9776A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:80:5d:b5:a0:fa:13:fd:81:b3:cb:4e:ab:
                    4d:27:fd:0e:7d:35:64:12:3d:6c:61:33:10:c0:ed:
                    cc:a4:0c:77:8a:2a:80:9a:ef:c6:14:68:fc:6d:6c:
                    b9:48:dc:5f:d6:d4:fd:78:06:01:30:a3:19:ea:eb:
                    90:48:05:cb:ab:b8:79:92:ab:39:f3:51:07:22:10:
                    8e:2c:cc:cd:af:33:50:e3:f0:c5:a4:68:41:27:f8:
                    0b:94:e6:c8:7e:54:51:8d:8f:03:7d:cb:6d:2c:7b:
                    45:8a:01:06:db:8d:11:73:f2:5c:8a:58:f1:38:06:
                    30:de:05:91:85:0b:b9:3a:41:cc:97:e4:dc:38:00:
                    ed:cf:10:af:6d:2a:f8:30:a5:05:ee:ff:42:49:66:
                    da:46:2e:3c:77:0c:b6:5d:3e:67:49:da:56:d2:0b:
                    9e:c9:ba:e4:08:5f:12:f8:c2:81:2f:bc:23:06:4c:
                    a4:d8:a8:6c:8c:44:47:0d:fb:d8:43:af:df:87:d1:
                    23:4b:e1:c7:77:40:e1:6f:f6:4a:5d:e5:5d:68:13:
                    4c:44:1b:90:5e:94:5a:37:15:60:74:88:65:92:c1:
                    2c:76:69:a2:af:a3:17:26:62:50:08:d5:2b:ba:ba:
                    af:20:2f:68:45:f4:aa:00:5d:75:fc:d9:b3:a8:9b:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A0:04:40:EA:AB:AE:83:86:38:21:7F:C5:69:CD:E6:A0:B9:77:6A
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214989.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:30:2a:a9:de:65:67:da:a6:53:ab:c8:1c:08:27:72:7b:5a:
         be:b1:d8:be:96:ca:e6:2b:68:60:4c:f0:59:cb:2a:5b:5d:96:
         5b:1d:61:77:bf:ff:21:de:32:41:51:f2:6e:f0:43:69:00:d9:
         27:d8:34:ef:3e:a7:1d:3e:d1:79:bd:1e:aa:4b:99:56:30:ae:
         fc:5d:d0:97:76:86:8c:a3:05:44:6a:44:8c:22:f0:1d:51:ad:
         d5:70:0d:61:e5:80:8a:6f:0d:87:62:c2:06:cc:27:1a:20:84:
         7c:e4:4b:25:c7:75:ce:a2:30:e4:9a:c8:75:47:4e:f4:27:db:
         f6:f2:80:6f:4b:b7:79:63:be:84:ae:df:58:06:77:5f:e3:25:
         bd:ca:1c:74:f8:35:d1:2c:d2:f0:58:35:c8:04:ca:eb:5b:47:
         c0:de:6d:9b:8a:02:a4:b6:26:cd:1d:13:14:c7:fe:ca:01:6b:
         e7:78:a9:40:72:ca:72:ee:c2:3a:37:f9:7b:4e:75:2f:b2:05:
         34:f2:3c:2a:35:e9:32:cb:d0:57:df:7b:33:28:fa:99:23:38:
         0f:2d:ed:e2:c5:65:7f:d4:2d:e7:71:5e:d4:a6:bb:61:88:ef:
         39:69:28:5e:ae:f7:59:e7:f5:30:ae:80:66:39:8a:b1:f5:ac:
         53:d0:ae:50
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUQggDn6247haVx4Pu+d0dB8ilqWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAxMjUxNjA3NDlaFw0yNzAxMjQxNjEyNDlaMDMxMTAvBgNV
BAMTKEQ5QTAwNDQwRUFBQkFFODM4NjM4MjE3RkM1NjlDREU2QTBCOTc3NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L4BdtaD6E/2Bs8tOq00n/Q59
NWQSPWxhMxDA7cykDHeKKoCa78YUaPxtbLlI3F/W1P14BgEwoxnq65BIBcuruHmS
qznzUQciEI4szM2vM1Dj8MWkaEEn+AuU5sh+VFGNjwN9y20se0WKAQbbjRFz8lyK
WPE4BjDeBZGFC7k6QcyX5Nw4AO3PEK9tKvgwpQXu/0JJZtpGLjx3DLZdPmdJ2lbS
C57JuuQIXxL4woEvvCMGTKTYqGyMREcN+9hDr9+H0SNL4cd3QOFv9kpd5V1oE0xE
G5BelFo3FWB0iGWSwSx2aaKvoxcmYlAI1Su6uq8gL2hF9KoAXXX82bOom0UZAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQU2aAEQOqrroOGOCF/xWnN5qC5d2owHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ5ODkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq
D2KEYDANBgkqhkiG9w0BAQsFAAOCAQEAODAqqd5lZ9qmU6vIHAgncntavrHYvpbK
5itoYEzwWcsqW12WWx1hd7//Id4yQVHybvBDaQDZJ9g07z6nHT7Reb0eqkuZVjCu
/F3Ql3aGjKMFRGpEjCLwHVGt1XANYeWAim8Nh2LCBswnGiCEfORLJcd1zqIw5JrI
dUdO9Cfb9vKAb0u3eWO+hK7fWAZ3X+MlvcocdPg10SzS8Fg1yATK61tHwN5tm4oC
pLYmzR0TFMf+ygFr53ipQHLKcu7COjf5e051L7IFNPI8KjXpMsvQV997Myj6mSM4
Dy3t4sVlf9Qt53Fe1Ka7YYjvOWkoXq73Wef1MK6AZjmKsfWsU9CuUA==
-----END CERTIFICATE-----
Generated at Wed Feb 11 09:20:42 2026 by rpki-client