This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS64515.roa
File:                     AS64515.roa (raw, json)
Hash identifier:          nyWhFwr2U+/vSBIMjkBtqTUXyO7e73HCNW/UWZPaB+8=
Subject key identifier:   AA:DC:74:D2:E5:F6:ED:39:68:34:5F:EE:BE:D8:89:DE:1B:8C:AA:59
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       0F1C4B2F0FE02E3A6674436D82C5D3175352AB87
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS64515.roa
Signing time:             Fri 24 Oct 2025 09:45:27 +0000
ROA not before:           Fri 24 Oct 2025 09:40:27 +0000
ROA not after:            Fri 23 Oct 2026 09:45:27 +0000
asID:                     64515
IP address blocks:        2a06:1281:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 11:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1c:4b:2f:0f:e0:2e:3a:66:74:43:6d:82:c5:d3:17:53:52:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 24 09:40:27 2025 GMT
            Not After : Oct 23 09:45:27 2026 GMT
        Subject: CN=AADC74D2E5F6ED3968345FEEBED889DE1B8CAA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:0c:67:d1:08:30:bd:48:c2:b2:8e:90:29:
                    4c:c4:55:46:48:23:80:46:2c:4f:e2:b1:10:48:dc:
                    fb:68:70:3f:8b:d3:62:80:3a:16:b2:77:b1:e1:72:
                    ed:52:a9:55:6a:e0:d5:49:85:64:55:90:af:17:83:
                    de:76:e3:ec:ef:f9:40:64:ee:96:9f:46:0b:b1:53:
                    60:18:bf:75:d3:48:9e:83:60:c2:9d:cc:92:a3:a5:
                    7d:47:e0:2c:73:2f:e4:ee:f4:56:e3:b4:51:3f:3e:
                    90:8b:2b:c4:f5:15:f1:83:eb:57:e4:b4:31:88:d5:
                    72:d3:ee:b2:24:d7:66:34:3e:74:b8:05:3c:09:8b:
                    5e:c2:00:f3:8f:88:dc:b5:06:45:f2:ea:1a:4f:48:
                    d8:d4:0d:2f:57:00:1e:9c:87:74:4f:d1:27:79:df:
                    69:50:81:5c:d9:0a:81:84:c0:18:2f:36:f0:d6:f6:
                    b9:eb:f7:46:39:20:de:c2:54:50:2d:20:2e:df:c8:
                    5b:fa:c4:c7:c5:c9:d9:18:28:15:dd:3d:ad:47:2c:
                    1b:07:2d:4a:2e:db:2f:25:4f:cc:3f:73:ce:48:54:
                    4e:bd:06:99:6f:1f:52:b9:cc:92:7c:66:ad:5c:16:
                    2f:24:de:86:ae:ac:b0:db:2c:de:25:b1:7c:62:25:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:74:D2:E5:F6:ED:39:68:34:5F:EE:BE:D8:89:DE:1B:8C:AA:59
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS64515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:8c:50:cb:6c:db:a1:d7:6e:3a:fa:81:68:d3:d3:db:37:
         b7:57:ff:84:e5:d9:7f:3e:12:0c:7d:df:14:a9:d0:28:7e:0b:
         86:83:96:a7:5c:57:1f:0b:99:3c:1f:15:92:4b:62:6d:d2:bb:
         7b:03:d9:c4:26:8e:74:5a:88:59:fe:83:b6:6e:85:1f:f5:91:
         f4:6b:c2:c2:6f:6c:9f:d2:34:fc:e6:af:51:01:c0:ee:09:c5:
         e4:f2:d7:7c:50:9d:84:2f:ab:f5:b0:68:31:0b:91:71:18:b2:
         ba:8b:91:a7:15:33:b2:59:51:34:f0:68:98:2b:a3:85:c0:e4:
         13:a9:89:a6:89:b0:80:7d:a8:75:9b:22:fd:93:37:bd:41:7a:
         3c:59:23:9e:2b:9d:44:5c:a7:49:55:9e:e1:2f:58:d6:30:c2:
         57:24:a4:57:30:87:4c:18:c0:83:83:3d:66:de:39:f2:8e:f8:
         c3:1a:19:ad:3b:de:d1:e8:37:db:fc:61:df:b9:44:ca:9a:45:
         b0:e3:fb:6e:43:10:54:45:63:81:be:b2:51:80:71:9e:1a:c4:
         a5:2f:81:fd:07:d0:32:86:88:98:dc:b7:04:5e:64:30:cd:85:
         6f:07:7a:ef:aa:b7:4a:a7:a5:da:04:ee:6f:38:bd:0a:01:c3:
         34:a5:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:31 2025 by rpki-client