This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          rQ65scSA+B39acVXPk+Y7LLavaVm/KaHVNyxSi02kjo=
Subject key identifier:   3D:D8:F0:EE:87:C6:B8:1A:C3:50:02:5F:5B:0E:26:F3:C4:E8:F7:5D
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       63FAD830413F57E71C55C78453CC80C897A72168
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa
Signing time:             Tue 13 Jan 2026 05:35:07 +0000
ROA not before:           Tue 13 Jan 2026 05:30:07 +0000
ROA not after:            Tue 12 Jan 2027 05:35:07 +0000
asID:                     14618
IP address blocks:        2a05:dfc3:f740::/44 maxlen: 44
                          2a05:dfc3:f750::/44 maxlen: 48
                          2a0f:6284:41fe::/48 maxlen: 48
                          2a0f:6284:4c00::/44 maxlen: 48
                          2a0f:6284:4c50::/44 maxlen: 48
                          2a0f:6284:4c60::/44 maxlen: 48
                          2a0f:6284:4c70::/44 maxlen: 48
                          2a0f:6284:4c80::/44 maxlen: 48
                          2a0f:6284:4c90::/44 maxlen: 48
                          2a0f:6284:4cd0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:d8:30:41:3f:57:e7:1c:55:c7:84:53:cc:80:c8:97:a7:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 13 05:30:07 2026 GMT
            Not After : Jan 12 05:35:07 2027 GMT
        Subject: CN=3DD8F0EE87C6B81AC350025F5B0E26F3C4E8F75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c0:b5:92:f0:7c:60:f2:27:ec:e3:93:d3:be:
                    61:e8:56:07:c5:af:14:9d:e7:63:a2:14:3a:b1:98:
                    cb:48:eb:90:78:76:cc:bf:4c:d0:67:92:bc:50:7b:
                    e1:36:75:e4:e6:ef:3e:99:17:e7:5e:88:c6:dd:d2:
                    b8:a7:a3:de:83:e6:29:26:d0:fb:cd:a3:8f:7a:96:
                    cb:50:33:87:26:54:56:8b:93:07:6c:a8:4e:cc:29:
                    f9:38:34:d4:4a:64:45:2e:4b:07:19:b4:71:dd:b6:
                    de:4c:ba:12:b3:45:9d:86:5d:64:fa:13:1b:59:26:
                    2b:17:1f:e6:c3:cc:05:5a:8f:d9:10:48:af:b5:41:
                    b1:65:bb:ba:0c:00:24:b9:27:6b:6a:93:4f:c3:4a:
                    b9:0c:53:56:57:2e:3d:d3:4f:6a:4d:5b:87:66:4f:
                    61:60:eb:62:73:89:7c:fc:2b:01:4d:d7:98:4e:81:
                    08:b8:e8:2c:15:95:cc:0b:89:3d:77:56:b0:db:62:
                    0c:9e:dc:e6:b0:67:ee:1e:4d:43:0b:ad:e2:e0:c8:
                    2d:f5:b0:99:25:7b:5b:30:6b:87:d4:d2:af:d9:dc:
                    69:cf:90:1e:99:52:af:26:1d:4b:63:52:4a:22:6a:
                    b6:78:ba:44:26:c2:f1:02:ea:5e:c8:28:18:32:d9:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:F0:EE:87:C6:B8:1A:C3:50:02:5F:5B:0E:26:F3:C4:E8:F7:5D
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f740::/43
                  2a0f:6284:41fe::/48
                  2a0f:6284:4c00::/44
                  2a0f:6284:4c50::-2a0f:6284:4c9f:ffff:ffff:ffff:ffff:ffff
                  2a0f:6284:4cd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:b8:b9:28:6e:93:91:bd:6e:f6:8c:9c:2d:be:8b:95:76:
         2e:87:a6:99:c9:5f:3d:b5:fa:9f:7a:72:72:3c:a1:96:16:cc:
         16:0f:f3:8c:40:d1:01:7a:fd:f1:88:2b:12:dd:4d:76:5d:51:
         0e:29:a2:c1:cc:b1:f6:e2:26:a6:4d:4c:dd:ce:d6:36:02:fa:
         13:c8:82:be:68:fd:8e:44:18:1c:85:30:82:cf:d0:9d:a0:a4:
         71:c3:1b:26:e3:fe:4e:c8:8b:15:b0:bc:84:93:87:3f:37:68:
         ad:85:c2:a7:5c:54:bf:ad:52:1a:f6:c6:df:89:b9:06:61:ec:
         e9:53:44:28:40:22:d2:ae:76:b6:f7:18:a3:78:19:52:29:8a:
         8b:21:60:34:c1:1e:8a:d5:e4:d7:13:2a:8b:20:53:9d:13:60:
         fc:9a:b2:e9:3b:1d:f9:ae:24:ae:91:0c:2e:00:09:7d:15:6e:
         d2:32:6b:3c:08:ca:2f:24:f1:2a:0e:35:8e:56:29:bb:3f:e3:
         fa:69:d7:1f:da:0a:bc:3c:bb:79:e9:c7:bf:d5:32:6e:8e:5e:
         a5:86:01:b1:dc:e8:a3:a6:19:83:65:44:1e:f7:da:a0:98:da:
         42:ab:9d:4e:b4:3b:71:48:c0:f3:22:5a:98:26:81:ea:a7:94:
         73:09:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:43 2026 by rpki-client