This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215522.roa
File:                     AS215522.roa (raw, json)
Hash identifier:          ++821y/9LGsnuAow0/IP14ALvEQwiJTtkI/73i1ZBn4=
Subject key identifier:   D4:7B:97:D3:71:32:22:02:8D:E3:85:77:D5:9B:E7:AD:3D:33:72:6B
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       04C850DC021AEDAB95FB4A1B2EBB1813ABBB38A7
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215522.roa
Signing time:             Mon 17 Nov 2025 21:38:12 +0000
ROA not before:           Mon 17 Nov 2025 21:33:12 +0000
ROA not after:            Mon 16 Nov 2026 21:38:12 +0000
asID:                     215522
IP address blocks:        2a0f:6284:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c8:50:dc:02:1a:ed:ab:95:fb:4a:1b:2e:bb:18:13:ab:bb:38:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 17 21:33:12 2025 GMT
            Not After : Nov 16 21:38:12 2026 GMT
        Subject: CN=D47B97D3713222028DE38577D59BE7AD3D33726B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:aa:9a:a1:a8:98:17:48:65:2b:b0:ea:c7:
                    2a:2a:ba:ca:45:ec:10:80:23:cd:56:d8:8b:78:b6:
                    f1:89:75:3c:3a:09:ec:e8:65:1a:c5:b2:c9:aa:52:
                    50:89:e6:ab:38:14:af:c6:84:6b:7b:06:50:6e:5a:
                    4c:d9:2d:35:3f:e9:38:bc:dd:75:21:24:df:5a:c2:
                    bd:58:56:cf:53:90:ff:18:2e:b3:59:db:9a:91:18:
                    0a:d4:f6:90:2b:18:df:c8:68:e1:ae:43:ac:20:f3:
                    0e:b5:cc:df:87:5b:79:43:7b:46:66:ef:fd:14:fb:
                    77:48:d8:bc:4f:82:fa:60:2f:f8:95:61:46:33:86:
                    27:e7:50:3a:d7:ed:0d:97:a9:f5:0b:a4:86:57:01:
                    c4:a9:0e:00:cc:47:78:5f:be:41:3d:51:a4:04:30:
                    e6:3e:d3:6c:12:79:60:95:b0:12:21:73:e8:6d:f6:
                    d4:d7:2e:c5:7f:f4:45:09:47:2e:9f:9d:d6:6f:a8:
                    14:95:d4:d9:22:44:d8:bf:d9:84:9e:60:42:b7:c8:
                    83:3a:6a:ab:c5:96:7b:3f:53:7a:2e:9d:b3:19:7e:
                    a6:ca:f3:c5:cb:68:88:09:8c:08:47:a0:cb:c5:63:
                    91:54:8b:9a:d8:0c:ff:6d:eb:3e:5c:85:cb:2b:af:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7B:97:D3:71:32:22:02:8D:E3:85:77:D5:9B:E7:AD:3D:33:72:6B
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215522.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:b0:cf:b5:de:f7:c0:8f:52:95:5a:e9:4f:b4:e9:c1:e8:
         fb:4c:d7:d5:b3:7c:a5:27:24:b3:77:f0:2f:f2:98:f5:78:f4:
         f3:c3:84:af:33:4a:25:01:94:38:7e:8d:44:47:fa:fc:45:bb:
         22:0d:b9:6d:1b:a2:d1:13:4e:8e:83:66:2d:00:c7:9c:bf:a5:
         35:b2:3c:e0:3e:a6:7d:58:81:cc:8e:dc:4d:52:e2:95:ad:be:
         f6:37:5c:a6:d4:ce:89:69:13:0b:c6:c6:ff:86:7f:ee:07:7d:
         1b:a5:8f:5c:cb:af:ca:61:ed:28:bf:a9:30:6e:c7:74:d0:a2:
         d7:01:ba:b1:ad:19:7e:f3:10:f0:b1:46:b9:ab:37:1d:92:e2:
         fe:90:2a:1b:9d:32:57:ec:19:fe:59:1d:ea:2c:b6:3d:b0:a0:
         69:54:b3:4f:38:4d:61:51:55:b4:16:e7:a9:a9:61:a7:2f:0d:
         84:f1:4d:c7:94:2a:32:7d:83:02:ff:78:29:a0:8c:78:a6:ae:
         13:41:fc:12:5c:5a:f9:92:c4:27:a0:56:2b:ef:b0:52:4e:28:
         7c:ef:70:7e:85:ef:e3:76:7c:dc:0c:24:e9:30:8c:64:66:ab:
         d9:03:be:d1:94:46:e7:67:7f:f4:b3:f2:6b:80:43:6b:21:64:
         b6:73:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:56:04 2025 by rpki-client