This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215575.roa
File:                     AS215575.roa (raw, json)
Hash identifier:          imCfGV/HdW5Tf+pubLgGGw54YFLRjkn/ZOOaWpzS1Dw=
Subject key identifier:   ED:D6:DA:7F:47:37:C8:BC:34:A6:64:E2:E0:46:9F:11:C6:2C:56:80
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       4F55AD18AE9ECCBFA431C1519F4ACDAC557F910D
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215575.roa
Signing time:             Mon 10 Nov 2025 08:00:38 +0000
ROA not before:           Mon 10 Nov 2025 07:55:38 +0000
ROA not after:            Mon 09 Nov 2026 08:00:38 +0000
asID:                     215575
IP address blocks:        2a0a:6044:ac80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:ad:18:ae:9e:cc:bf:a4:31:c1:51:9f:4a:cd:ac:55:7f:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 10 07:55:38 2025 GMT
            Not After : Nov  9 08:00:38 2026 GMT
        Subject: CN=EDD6DA7F4737C8BC34A664E2E0469F11C62C5680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:23:cc:3a:06:c7:09:da:f7:bb:b3:e5:22:
                    36:c5:6c:28:c3:13:ba:8c:13:e9:6c:03:13:7e:a4:
                    89:6f:82:b9:18:2d:51:d0:9f:15:b6:d8:5e:2c:8a:
                    b5:54:75:dc:94:43:1f:5d:d7:3e:64:92:ae:39:97:
                    c8:bc:d3:99:7d:08:03:21:a4:a8:dd:b8:b1:de:cf:
                    d7:99:15:ba:25:ea:46:12:00:4a:19:8a:ed:eb:35:
                    5f:69:22:c0:16:f8:0b:e3:e9:a7:85:07:68:d6:bc:
                    b3:b6:c9:b5:dd:fd:53:9e:60:be:80:77:c4:a1:95:
                    eb:fe:f0:58:2e:aa:7e:fd:d2:ba:d3:c2:50:59:15:
                    49:9c:07:75:9c:4b:2f:76:bd:fd:ee:2f:0d:1c:66:
                    aa:95:4f:19:70:d6:74:22:a3:23:4f:ba:d0:f6:55:
                    f9:3e:42:16:b6:4f:f5:5b:83:c0:b1:cf:40:8a:b9:
                    82:e4:66:19:73:90:78:6f:8f:1e:64:22:1c:c4:a2:
                    1c:43:f4:80:c4:4d:c4:b5:9f:09:46:fd:18:67:26:
                    a2:45:3f:54:24:03:62:ab:50:a4:ec:e0:34:ab:b7:
                    54:76:9e:a0:f9:fa:dd:40:fb:9d:b0:7b:ee:eb:a2:
                    e2:17:69:23:52:47:f7:20:bd:df:87:d7:a9:5e:ee:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:DA:7F:47:37:C8:BC:34:A6:64:E2:E0:46:9F:11:C6:2C:56:80
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac80::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:33:53:0a:a1:b7:34:bf:92:85:86:61:ed:68:ec:00:bd:
         e7:fa:93:de:36:99:c2:63:05:b6:6a:74:05:1d:fc:d6:e8:ad:
         74:58:c0:04:a1:5e:17:43:ee:25:5f:59:93:07:10:9f:b4:a8:
         7f:5b:2c:d1:4d:5a:f8:f4:ea:2e:4d:fd:ee:c7:14:29:c2:dc:
         76:6c:c1:4c:9c:ed:2d:c2:92:64:27:ed:fc:60:92:15:9c:e4:
         a7:0a:64:07:32:c4:1a:c3:31:4e:41:9e:66:fb:28:72:2b:52:
         6b:31:46:03:3d:f6:cf:04:4c:0b:19:31:40:3e:ed:d6:cf:2e:
         a8:13:57:33:1f:16:56:9e:f0:3b:c3:98:74:b2:04:77:5f:ed:
         a9:36:23:b8:1c:f2:ed:c7:c1:01:6b:cd:07:41:c0:4e:f8:be:
         ca:f0:8e:0a:b3:65:54:ca:41:f6:01:25:ee:8c:7f:38:5b:bc:
         e1:23:45:8a:0a:16:3a:e4:1b:35:99:a2:88:0c:3c:27:a5:9c:
         26:e6:10:8f:25:99:f7:cc:7e:f5:68:d3:6d:77:09:95:1b:27:
         2c:0d:4e:0f:77:4e:48:84:08:3d:f7:eb:b1:11:2f:d5:02:7e:
         39:e9:d1:cf:f3:29:38:da:85:69:39:98:0e:fe:2f:90:10:ac:
         f3:9d:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:56:01 2025 by rpki-client