This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          yZWPTbFju8l0Op5n/gT2UCa8MiHc/CugZK1muW475G8=
Subject key identifier:   85:6B:44:D4:B5:1F:60:65:22:04:0F:29:5D:95:18:88:95:70:62:B5
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       7890B16A06A592C54066996B4E04CCF474A8F5BD
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS8075.roa
Signing time:             Tue 30 Dec 2025 14:26:04 +0000
ROA not before:           Tue 30 Dec 2025 14:21:04 +0000
ROA not after:            Tue 29 Dec 2026 14:26:04 +0000
asID:                     8075
IP address blocks:        2a0f:6284:9ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:90:b1:6a:06:a5:92:c5:40:66:99:6b:4e:04:cc:f4:74:a8:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 30 14:21:04 2025 GMT
            Not After : Dec 29 14:26:04 2026 GMT
        Subject: CN=856B44D4B51F606522040F295D951888957062B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:d4:14:bb:8b:4e:ed:d4:23:f9:e8:be:e0:
                    87:35:ff:cb:6c:ca:50:dd:20:87:63:77:cb:f4:ad:
                    cc:4c:d1:c2:6a:76:87:73:f9:d3:ee:67:cf:e3:04:
                    e7:c6:c9:19:ba:fc:b0:a0:f5:15:20:e1:59:be:53:
                    ca:14:91:81:18:c5:bf:a8:da:2e:3c:fc:9e:40:a8:
                    96:70:a0:0d:de:35:84:bd:2b:2b:71:55:aa:4e:ff:
                    12:8e:83:17:07:b8:20:38:68:26:a7:53:c9:67:68:
                    62:1e:5b:11:dd:3e:8d:09:66:13:ac:63:34:06:ee:
                    c3:ca:dc:01:8a:88:48:70:2b:44:81:e4:41:b9:49:
                    20:66:a9:b8:43:67:4f:d9:5f:3b:80:b5:db:a1:65:
                    9e:f5:a4:47:cc:23:9a:61:d0:f8:78:67:9b:7b:4c:
                    f7:8c:d6:3c:72:69:1f:b8:db:2a:69:98:43:9d:3e:
                    04:2a:9d:8d:4c:ac:a6:26:35:93:e7:c2:0f:7d:06:
                    a0:a9:7b:bd:13:db:65:d9:f3:ce:25:6b:88:ac:e0:
                    93:38:c6:df:d8:2b:7d:11:d8:35:84:7f:e0:d6:bf:
                    63:ed:78:6d:c1:7f:4f:07:29:c1:c3:fd:4d:d9:c2:
                    39:d7:3c:ce:d7:5c:a8:9f:95:ee:7c:82:d0:4a:d2:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:44:D4:B5:1F:60:65:22:04:0F:29:5D:95:18:88:95:70:62:B5
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:9ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:fa:05:11:48:85:32:ec:cb:36:26:3d:3e:6e:be:58:21:
         f9:40:df:c3:d3:a2:df:8d:df:44:a0:f4:e3:e4:8d:01:2b:14:
         4d:b1:fa:ea:46:fb:c6:18:79:e8:c5:1d:a3:f1:36:81:92:aa:
         e0:26:0e:cd:3c:f5:d0:79:bd:14:e8:a8:49:85:5f:c4:98:d9:
         a1:08:84:80:26:03:87:ee:26:ed:d3:a6:70:50:1b:f0:e2:70:
         a1:78:e7:b3:5b:b2:d0:75:e6:56:72:89:86:53:42:c7:ee:e6:
         75:d7:1f:d8:e5:c0:3d:6c:78:eb:92:17:7c:fe:30:a0:2a:e3:
         05:40:f4:a6:d8:e2:b4:2c:d5:13:7a:85:d2:15:2f:15:2e:8d:
         b9:80:d6:64:4d:7b:b0:dc:99:06:ca:42:01:46:2d:5f:1d:e1:
         4d:9d:0e:dc:70:54:ef:81:f0:a1:d3:70:4e:bd:74:3a:11:35:
         81:b5:2e:87:fe:e8:10:d0:68:7b:0b:c2:2c:60:9f:82:f6:ee:
         18:13:4a:00:68:34:25:41:fd:1f:f9:41:9e:8e:c5:49:70:6e:
         d3:b0:26:c5:17:6d:f2:61:a7:77:ec:e0:0f:3d:51:96:e0:40:
         9b:07:58:9c:a6:65:75:5b:71:70:60:9a:14:97:4d:7b:2d:63:
         96:d9:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:24:04 2026 by rpki-client