This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS396982.roa
File:                     AS396982.roa (raw, json)
Hash identifier:          bdXhUuHMqsltt1YQ5qcFIQiHY92jwQVIl/Bqret1jfk=
Subject key identifier:   5E:82:B3:28:AB:61:25:EC:22:A0:AE:AA:F1:2C:B6:AF:94:05:AB:7D
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       377F3D7A1696733A125DC7BEE683335F6D80A187
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS396982.roa
Signing time:             Thu 01 Jan 2026 12:58:36 +0000
ROA not before:           Thu 01 Jan 2026 12:53:36 +0000
ROA not after:            Thu 31 Dec 2026 12:58:36 +0000
asID:                     396982
IP address blocks:        2a0f:6284:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7f:3d:7a:16:96:73:3a:12:5d:c7:be:e6:83:33:5f:6d:80:a1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan  1 12:53:36 2026 GMT
            Not After : Dec 31 12:58:36 2026 GMT
        Subject: CN=5E82B328AB6125EC22A0AEAAF12CB6AF9405AB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:f5:f7:e9:3d:5b:fb:a6:00:c7:7d:95:d9:
                    33:da:0c:b7:c5:a7:80:1d:d9:ff:b9:b1:81:3a:d5:
                    a9:17:87:bd:dc:ae:57:64:d7:65:39:f6:06:f5:c7:
                    48:df:e6:f6:74:bb:b8:57:c0:91:25:96:84:e4:7b:
                    6f:83:12:d7:df:63:9c:73:a2:5b:e1:c4:4d:2f:25:
                    ca:63:a8:6e:29:c0:2e:65:92:48:1f:71:34:db:ab:
                    c8:94:45:47:79:17:fb:2e:e4:9c:8c:bb:0d:18:cd:
                    28:74:b8:73:ce:12:75:04:60:aa:c5:c3:74:7e:f5:
                    0c:05:7e:54:29:e1:c1:0a:ee:c6:4a:43:ed:b2:4c:
                    66:1d:ed:c3:d6:f3:6d:31:d4:aa:69:f3:c1:61:e9:
                    7b:a0:1b:21:b7:b3:ef:dc:e3:70:47:09:aa:cb:1d:
                    d4:ac:21:90:44:75:19:57:65:c5:0c:2a:bd:4f:4f:
                    63:48:10:f2:12:0a:bd:c3:77:e0:b5:0d:09:9a:f8:
                    85:ff:b9:06:d4:89:9a:3b:90:67:3d:0d:f0:bd:9c:
                    59:64:b6:53:09:0d:16:7b:eb:81:df:fc:07:8d:36:
                    26:03:a5:91:c9:63:dd:79:4c:89:27:68:0d:77:ac:
                    8b:a8:38:e2:f6:e1:10:17:46:5b:da:f3:b1:dd:a5:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:82:B3:28:AB:61:25:EC:22:A0:AE:AA:F1:2C:B6:AF:94:05:AB:7D
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS396982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:61:fb:46:ab:91:56:2e:5e:74:86:2a:22:c0:4f:1b:78:f6:
         51:33:a5:c4:fc:56:6c:3f:01:23:67:5c:f9:c6:df:af:97:38:
         32:4e:e3:48:09:ca:01:03:76:ad:51:31:ba:f6:b6:71:dd:5c:
         9f:91:a8:c0:1f:2f:42:3e:60:70:d5:cc:1f:53:99:b8:7f:45:
         d4:f1:f2:aa:f7:3c:db:25:0c:13:bd:a8:c6:f3:eb:3d:93:db:
         c7:95:9f:63:e3:09:25:9d:5e:3c:d1:8a:3a:72:5c:36:c7:31:
         3b:66:8c:54:96:1f:ac:87:2d:b5:2a:9a:55:20:c3:d2:23:45:
         2d:16:28:d6:2a:39:8b:49:02:8b:88:e9:2a:25:77:7f:15:ab:
         02:55:69:18:cd:d3:c6:1c:7d:94:12:33:15:cc:52:20:66:3b:
         9d:c5:f0:05:17:29:c6:b4:44:06:ab:a6:ac:92:0c:76:0c:df:
         21:6c:66:e2:6d:61:ed:91:76:c8:02:be:86:91:4b:f9:3f:a9:
         0a:7c:ac:cc:56:ee:d8:b4:a8:d0:f9:8e:e6:37:f7:ca:6e:1f:
         65:47:e2:00:b3:2e:ef:46:e3:c5:fd:83:bd:8f:e4:c6:4e:c3:
         4d:68:af:ad:d5:49:20:7e:7c:c8:0a:05:53:09:b6:20:03:22:
         b7:43:32:2c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUN389ehaWczoSXce+5oMzX22AoYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAxMDExMjUzMzZaFw0yNjEyMzExMjU4MzZaMDMxMTAvBgNV
BAMTKDVFODJCMzI4QUI2MTI1RUMyMkEwQUVBQUYxMkNCNkFGOTQwNUFCN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQofX36T1b+6YAx32V2TPaDLfF
p4Ad2f+5sYE61akXh73crldk12U59gb1x0jf5vZ0u7hXwJElloTke2+DEtffY5xz
olvhxE0vJcpjqG4pwC5lkkgfcTTbq8iURUd5F/su5JyMuw0YzSh0uHPOEnUEYKrF
w3R+9QwFflQp4cEK7sZKQ+2yTGYd7cPW820x1Kpp88Fh6XugGyG3s+/c43BHCarL
HdSsIZBEdRlXZcUMKr1PT2NIEPISCr3Dd+C1DQma+IX/uQbUiZo7kGc9DfC9nFlk
tlMJDRZ764Hf/AeNNiYDpZHJY915TIknaA13rIuoOOL24RAXRlva87Hdpcy7AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUXoKzKKthJewioK6q8Sy2r5QFq30wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMzOTY5ODIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
D2KEAAcwDQYJKoZIhvcNAQELBQADggEBABBh+0arkVYuXnSGKiLATxt49lEzpcT8
Vmw/ASNnXPnG36+XODJO40gJygEDdq1RMbr2tnHdXJ+RqMAfL0I+YHDVzB9Tmbh/
RdTx8qr3PNslDBO9qMbz6z2T28eVn2PjCSWdXjzRijpyXDbHMTtmjFSWH6yHLbUq
mlUgw9IjRS0WKNYqOYtJAouI6Sold38VqwJVaRjN08YcfZQSMxXMUiBmO53F8AUX
Kca0RAarpqySDHYM3yFsZuJtYe2RdsgCvoaRS/k/qQp8rMxW7ti0qND5juY398pu
H2VH4gCzLu9G48X9g72P5MZOw01or63VSSB+fMgKBVMJtiADIrdDMiw=
-----END CERTIFICATE-----
Generated at Fri Jan 9 06:24:38 2026 by rpki-client