This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212128.roa
File:                     AS212128.roa (raw, json)
Hash identifier:          NgLyDs/O25cuQLYv2tvJ+FWejmh2oBqC7mgkh2Wuegg=
Subject key identifier:   5D:AD:D0:AB:3E:B9:E8:56:6A:3A:99:69:9B:84:CF:C6:8C:F1:FB:BB
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       20363336091889E4DE8D31DCECCAADFD5D848C72
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa
Signing time:             Sat 24 Jan 2026 09:54:56 +0000
ROA not before:           Sat 24 Jan 2026 09:49:56 +0000
ROA not after:            Sat 23 Jan 2027 09:54:56 +0000
asID:                     212128
IP address blocks:        2a09:54c6:a000::/36 maxlen: 36
                          2a0f:6284:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:36:33:36:09:18:89:e4:de:8d:31:dc:ec:ca:ad:fd:5d:84:8c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 24 09:49:56 2026 GMT
            Not After : Jan 23 09:54:56 2027 GMT
        Subject: CN=5DADD0AB3EB9E8566A3A99699B84CFC68CF1FBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:16:fd:fe:95:6d:3a:c1:ae:bd:dc:8d:d2:
                    60:eb:34:77:f2:fa:81:7a:fc:5b:99:9f:31:fb:9d:
                    17:af:5e:15:da:f7:e6:46:19:d5:21:05:26:76:2d:
                    05:14:14:21:c0:c4:cb:73:91:8e:7b:a4:df:d3:23:
                    b2:3c:bd:bf:12:43:83:5f:97:9a:37:41:41:dc:2f:
                    5c:7d:7b:60:e7:06:7a:ea:a6:08:c5:74:f7:1c:a5:
                    84:5f:fa:55:82:ea:02:03:fc:6f:85:99:ec:1b:d2:
                    3b:19:f5:6c:aa:92:93:ed:bb:4d:cc:92:1a:cd:27:
                    6e:9e:4c:00:1b:95:96:79:8c:b3:75:60:32:ad:51:
                    aa:df:82:18:0f:1a:96:39:35:ed:d3:88:86:3e:2f:
                    ea:fd:e7:82:fd:1e:81:40:ba:bf:d3:b4:1b:e8:a6:
                    5a:23:d1:7b:2f:7f:af:5f:ed:16:71:42:46:ea:53:
                    38:44:0d:de:f7:ae:ad:47:61:ea:5f:26:5c:5b:44:
                    4a:d7:7d:c0:c7:1d:c2:da:3a:02:4e:ab:6d:8d:ce:
                    9f:e9:87:db:a7:ad:34:b7:96:b5:ff:6b:db:65:6b:
                    5f:d2:b5:02:17:f3:e8:3d:11:41:eb:70:d7:0c:27:
                    91:07:31:6b:bc:00:ed:a2:67:a2:34:cb:5b:b3:52:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:D0:AB:3E:B9:E8:56:6A:3A:99:69:9B:84:CF:C6:8C:F1:FB:BB
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212128.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:a000::/36
                  2a0f:6284:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:ad:3f:6d:70:ba:98:b7:9d:c6:87:7a:aa:dc:ea:bd:18:
         53:2f:01:2e:4f:ba:e8:c0:09:f9:6e:e0:14:89:12:17:e1:1d:
         4a:46:46:36:d0:46:56:9b:52:6a:79:12:00:e7:d4:71:2c:52:
         3b:f1:0d:d2:57:90:60:a2:44:97:f3:fb:97:99:20:c6:5f:02:
         3b:8b:9d:64:7b:6f:e0:30:fc:7e:ac:23:f7:ef:27:82:8d:af:
         be:60:66:17:cd:21:ae:d9:3d:ee:30:a9:f7:f7:a5:a4:ff:a5:
         a3:89:01:70:d2:63:04:8f:5b:c3:22:60:11:6f:56:6c:20:3f:
         6a:95:d1:02:e7:cf:d4:01:32:d3:80:1b:45:87:1a:b5:2c:df:
         3e:21:34:8f:dd:3e:a3:3b:da:a0:65:ae:53:fe:17:b8:f6:d0:
         c0:fb:2c:7d:1f:7d:72:eb:1f:b5:7a:6f:38:80:d6:a8:9d:91:
         b9:d5:77:f4:1f:13:03:17:c1:cf:4b:9d:d3:15:8f:ec:44:1d:
         56:6e:34:cb:9a:31:e5:ce:4c:15:c7:65:e8:bb:57:2b:b9:35:
         d4:a6:23:93:0d:10:80:b2:8b:56:e6:89:2d:a4:f0:67:6b:19:
         6d:58:2b:d1:05:ff:4e:0f:ab:86:ab:68:63:46:e5:40:c5:92:
         5b:bd:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:08:06 2026 by rpki-client