This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          sGpR5ZasEWdsU4P7Wnh4QKqs6ogXD3k+6sDAcHlkzMU=
Subject key identifier:   58:96:BF:FD:2A:56:E2:26:8E:62:04:73:BB:C8:D5:3A:D7:04:F9:AF
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       1B26D343E2311D8132C9D2CE748020B93DD4046F
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa
Signing time:             Wed 07 Jan 2026 17:50:50 +0000
ROA not before:           Wed 07 Jan 2026 17:45:50 +0000
ROA not after:            Wed 06 Jan 2027 17:50:50 +0000
asID:                     40676
IP address blocks:        2a0f:6284:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:26:d3:43:e2:31:1d:81:32:c9:d2:ce:74:80:20:b9:3d:d4:04:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan  7 17:45:50 2026 GMT
            Not After : Jan  6 17:50:50 2027 GMT
        Subject: CN=5896BFFD2A56E2268E620473BBC8D53AD704F9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:12:6f:ff:fb:05:69:61:fa:2e:15:59:3b:
                    23:87:5f:04:08:51:0a:99:7b:3b:c9:af:4d:a6:5d:
                    e1:c5:e3:52:86:6e:93:92:b1:c8:76:a4:dd:a0:2d:
                    f2:30:ae:f3:4d:ca:62:3d:21:46:59:d3:78:7e:5f:
                    db:f0:fd:34:ae:91:b6:2e:b0:e2:8e:32:ed:11:ff:
                    e7:04:d9:13:6a:8e:5d:96:61:90:c8:c7:af:27:80:
                    02:28:50:b5:74:a8:8d:0c:35:67:c5:cc:9b:ca:91:
                    85:19:88:98:87:33:95:8d:19:46:1e:02:cf:aa:59:
                    7c:96:63:8b:a2:5d:bd:a4:b8:86:aa:62:93:57:bf:
                    d6:66:13:e5:88:18:82:96:66:9f:3c:13:5e:85:fb:
                    8c:e8:c6:97:b8:a9:17:85:e8:79:b8:f0:56:4c:99:
                    91:a3:48:be:cd:6f:aa:7b:80:e5:11:de:7c:f5:36:
                    af:8b:0c:da:4c:5d:d9:05:46:7c:7a:8a:f0:b1:f3:
                    5c:19:08:41:87:3b:1e:1e:68:ac:4f:8e:8d:4c:ce:
                    02:46:30:35:1a:b7:da:12:26:a3:ac:57:d9:8c:d6:
                    21:11:ad:53:be:38:f3:8c:db:dd:24:72:b8:f4:5d:
                    6b:6a:06:7c:52:4b:fc:5f:f6:c5:6b:79:d9:89:94:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:BF:FD:2A:56:E2:26:8E:62:04:73:BB:C8:D5:3A:D7:04:F9:AF
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:78:23:d5:a0:e5:79:62:a7:43:9e:74:3e:4e:75:f4:2c:d2:
         0d:e9:5e:7c:a4:08:a8:35:90:45:f2:73:cf:95:3d:f9:33:67:
         0c:f7:25:a0:c8:b3:32:04:30:ad:fd:f0:d6:2d:fe:a8:a4:91:
         d6:1d:72:a0:8c:56:32:86:d4:48:a1:e0:3a:e1:4e:73:ed:21:
         e6:b9:60:39:7f:a9:33:4c:84:8d:8a:ec:aa:39:5d:ac:59:49:
         f8:8b:56:1d:aa:d2:53:40:d7:e5:9f:ac:22:0e:ab:64:45:17:
         b4:aa:83:9c:25:4c:cb:47:97:b4:d6:42:18:52:e5:1c:8c:0d:
         c1:37:33:b4:8b:56:ed:64:63:6e:54:de:4e:5b:c2:23:97:10:
         aa:a8:47:86:be:94:a0:a1:be:e6:d2:ca:f2:1a:0c:d9:56:dc:
         ae:3d:e6:ef:d8:7d:81:0f:a6:f4:c6:88:2b:a0:05:1d:f0:73:
         e1:fb:cc:b9:4d:20:c4:56:74:da:6d:0c:72:fe:83:4f:6f:fd:
         67:af:3e:46:18:c8:31:ae:5d:6f:5b:18:11:8c:3c:df:51:d0:
         81:d7:59:2a:3c:15:a1:bb:0b:6c:30:dc:9e:5d:7c:2f:e1:6c:
         9d:c1:f1:33:fe:42:a9:fe:ac:65:2e:6d:3f:92:ea:c7:59:b6:
         1b:4b:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:04 2026 by rpki-client