This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207113.roa
File:                     AS207113.roa (raw, json)
Hash identifier:          hjEBDcX0FEw9wJZ0dLTa39LnEKuV+kOpjK6Egt+8Yw0=
Subject key identifier:   FF:8D:D0:BA:50:8E:3B:10:2D:76:D3:13:51:96:75:E8:6F:78:A9:BB
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       0C7A52E6CB4BB831BBB246CFD4C0CED34892ADE9
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa
Signing time:             Wed 26 Nov 2025 15:12:24 +0000
ROA not before:           Wed 26 Nov 2025 15:07:24 +0000
ROA not after:            Wed 25 Nov 2026 15:12:24 +0000
asID:                     207113
IP address blocks:        2a06:1281::/44 maxlen: 48
                          2a06:1281::/48 maxlen: 48
                          2a06:1281:1::/48 maxlen: 48
                          2a0f:6284:100::/40 maxlen: 40
                          2a0f:6284:100::/40 maxlen: 48
                          2a0f:6284:4200::/44 maxlen: 48
                          2a0f:6284:420f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7a:52:e6:cb:4b:b8:31:bb:b2:46:cf:d4:c0:ce:d3:48:92:ad:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 26 15:07:24 2025 GMT
            Not After : Nov 25 15:12:24 2026 GMT
        Subject: CN=FF8DD0BA508E3B102D76D313519675E86F78A9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:bc:fc:a8:c8:e2:f2:82:7c:06:73:ef:d1:
                    b8:29:22:7e:da:ff:ea:1b:7a:43:a4:aa:80:d1:22:
                    3e:31:69:8f:1c:d7:aa:83:bb:95:6d:3d:99:3f:c1:
                    9f:7e:ec:00:4b:aa:d9:85:22:5a:9c:f8:02:44:6c:
                    02:af:04:71:de:30:04:f8:d9:9d:91:44:80:7e:1c:
                    86:76:85:18:3b:c0:ff:db:8e:a2:ed:f5:0c:a1:7e:
                    a3:d7:d6:d9:29:ef:69:f7:ca:8e:da:4b:1b:81:b4:
                    f8:cc:a2:6e:a5:8d:b7:ff:c7:b4:a3:19:9a:94:ae:
                    69:3e:10:fa:0e:6b:43:37:a3:4f:cd:79:55:2e:78:
                    43:d5:9b:76:be:4b:dc:6a:82:a5:d9:fd:4a:0c:55:
                    bc:4d:13:eb:15:75:49:ab:ab:4d:e6:7a:61:2b:ef:
                    df:d1:dd:b0:d2:8e:69:3a:f9:ff:55:3c:83:47:bd:
                    4b:6e:9f:b4:e6:57:8d:54:7a:b7:3d:1c:a2:9c:d6:
                    20:d4:96:26:47:0a:8d:89:3e:d5:76:8b:42:91:52:
                    7f:01:7a:90:7e:d6:46:71:d5:b6:0a:32:4d:2d:74:
                    2b:e9:9e:05:87:f1:b7:07:39:de:c4:99:59:be:13:
                    e5:49:52:a2:00:aa:d7:c3:d2:e7:5a:ed:b0:54:e1:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:D0:BA:50:8E:3B:10:2D:76:D3:13:51:96:75:E8:6F:78:A9:BB
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281::/44
                  2a0f:6284:100::/40
                  2a0f:6284:4200::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:c8:f6:50:41:a4:e5:f6:55:49:d2:16:22:83:fe:e4:cc:
         d6:89:f9:d2:f2:d4:64:26:76:c6:b4:83:3b:ac:ff:ac:fb:19:
         b0:88:ba:66:b9:af:9d:eb:0c:81:6c:38:c2:a2:8b:99:70:2e:
         e0:b1:6e:c6:f5:41:ca:a9:a3:71:de:c1:74:21:38:13:83:e4:
         45:79:61:b0:a5:f4:59:a4:6c:f4:58:c4:13:d3:63:0a:1e:13:
         cd:55:21:81:8c:78:92:8a:90:45:2a:43:60:e4:e1:14:81:91:
         cc:96:00:b2:fa:c1:8a:0f:3d:4c:68:bd:3c:54:78:74:12:29:
         9a:9d:1a:2a:dc:a3:a8:97:8a:74:c5:ca:f9:71:28:34:09:b8:
         1b:9d:f7:53:95:53:53:b5:a8:ed:34:23:d2:81:a8:26:eb:33:
         6b:bf:04:dd:b4:52:d4:f2:02:6a:ae:2e:9f:fe:b9:b8:a2:3e:
         19:87:8c:a5:c1:46:3a:ea:31:d9:0a:af:06:0e:f7:78:08:ec:
         62:ca:95:82:ab:8a:8c:e2:86:6c:9e:4d:79:ee:f9:16:43:e6:
         1d:c7:66:2f:21:c9:d7:48:52:3f:8d:36:5d:cf:5f:f9:71:c9:
         fd:19:af:e4:4a:29:6f:73:b9:5d:59:62:f6:c1:10:7a:3f:44:
         a2:2e:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:22:51 2025 by rpki-client