This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212234.roa
File:                     AS212234.roa (raw, json)
Hash identifier:          R5jAtIzOmojstPZ9XT5W6+CHJ7vad8Hggsz5M/tSb9M=
Subject key identifier:   C4:50:31:1E:86:B1:64:ED:07:BE:5D:0D:95:F0:1A:93:0D:E8:BD:6E
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       12F4CBD6FB5AB3B0670B530E1820CCC2C5B93801
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
Signing time:             Tue 23 Dec 2025 07:26:54 +0000
ROA not before:           Tue 23 Dec 2025 07:21:54 +0000
ROA not after:            Tue 22 Dec 2026 07:26:54 +0000
asID:                     212234
IP address blocks:        2a0f:6284:5::/48 maxlen: 48
                          2a0f:6284:10::/44 maxlen: 44
                          2a0f:6284:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f4:cb:d6:fb:5a:b3:b0:67:0b:53:0e:18:20:cc:c2:c5:b9:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 23 07:21:54 2025 GMT
            Not After : Dec 22 07:26:54 2026 GMT
        Subject: CN=C450311E86B164ED07BE5D0D95F01A930DE8BD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:29:93:44:09:ea:a8:30:bb:a7:80:a9:d2:
                    a2:d8:85:96:b9:6e:8d:b5:83:0d:a7:c4:2e:e6:40:
                    fa:46:fd:a5:8b:9f:61:95:72:17:bf:8e:22:12:b7:
                    10:7b:f8:c9:ba:52:73:4b:4c:97:26:98:3c:b5:2c:
                    cb:f4:a9:40:58:ff:d9:13:61:38:3e:bb:6f:df:ba:
                    42:52:e0:5e:33:52:12:8c:2c:c6:a1:08:92:1e:d7:
                    9a:e6:23:0d:8f:25:4b:87:84:8f:a0:b8:3e:6a:53:
                    6b:6d:5c:6a:b1:76:11:58:ed:92:a8:ec:dd:4a:5a:
                    33:4b:c1:16:8c:c9:27:31:09:2b:24:6f:a4:6f:f3:
                    18:b9:e9:b2:a9:95:65:e6:d3:a0:43:a2:8a:01:cf:
                    7c:79:75:af:25:2b:97:1d:20:74:54:4e:f3:c9:66:
                    43:36:a6:b2:47:4d:d3:7f:92:ea:f7:1b:a2:9d:57:
                    64:1f:78:61:3a:37:30:ae:7f:14:5e:31:6e:50:c4:
                    e0:76:11:12:e6:a3:0c:a5:7c:2b:51:3a:14:e3:3d:
                    22:c5:70:e8:4b:34:5b:95:69:84:9a:31:c0:8a:00:
                    91:e7:fe:3d:06:3f:99:74:1a:81:a6:1a:21:a1:7b:
                    1b:8a:e3:75:08:c3:20:1b:d1:94:3c:4f:37:e5:a0:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:50:31:1E:86:B1:64:ED:07:BE:5D:0D:95:F0:1A:93:0D:E8:BD:6E
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:5::/48
                  2a0f:6284:10::/44
                  2a0f:6284:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:43:37:c9:66:56:7e:d2:bf:61:d4:9d:82:bf:48:96:db:
         fd:78:75:b8:a4:e9:2d:63:4a:1c:0d:8d:6b:cc:8e:09:f7:33:
         a3:ca:15:66:fd:0a:2e:95:02:3c:a1:cc:e3:73:f8:d2:94:77:
         68:08:96:f5:9a:f5:5f:09:ba:86:4f:5c:82:ba:8c:cd:ab:f3:
         5a:45:38:97:d4:72:db:de:74:36:bb:b0:6e:a1:a1:85:25:88:
         97:d3:24:32:80:9f:c6:63:53:ab:fd:e4:66:96:cb:7f:a7:82:
         1b:3d:08:04:2c:14:7d:03:13:c7:78:02:5c:be:f6:11:46:d9:
         92:1d:d5:3e:98:33:20:b7:03:0d:6c:de:cc:ea:4b:d8:48:d9:
         0e:86:15:6d:87:0a:96:db:4f:7e:d8:47:5b:13:56:a4:c7:8b:
         4c:f3:ba:f2:37:da:12:8e:be:d6:c2:1c:35:10:4d:07:d6:53:
         b9:8e:73:09:e7:51:00:6f:ea:cb:8c:f8:e9:11:77:9d:1e:f8:
         74:4a:eb:8e:f4:bc:18:f6:06:bb:23:73:20:e8:d6:7d:34:85:
         1f:8c:7b:0b:23:0c:9a:13:48:d0:1a:5d:d0:69:6c:05:a6:a6:
         f3:90:13:b6:02:70:ad:c5:95:b7:f4:f2:e6:2b:47:9b:46:81:
         4a:14:38:cd
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUEvTL1vtas7BnC1MOGCDMwsW5OAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTEyMjMwNzIxNTRaFw0yNjEyMjIwNzI2NTRaMDMxMTAvBgNV
BAMTKEM0NTAzMTFFODZCMTY0RUQwN0JFNUQwRDk1RjAxQTkzMERFOEJENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/CmTRAnqqDC7p4Cp0qLYhZa5
bo21gw2nxC7mQPpG/aWLn2GVche/jiIStxB7+Mm6UnNLTJcmmDy1LMv0qUBY/9kT
YTg+u2/fukJS4F4zUhKMLMahCJIe15rmIw2PJUuHhI+guD5qU2ttXGqxdhFY7ZKo
7N1KWjNLwRaMyScxCSskb6Rv8xi56bKplWXm06BDoooBz3x5da8lK5cdIHRUTvPJ
ZkM2prJHTdN/kur3G6KdV2QfeGE6NzCufxReMW5QxOB2ERLmowylfCtROhTjPSLF
cOhLNFuVaYSaMcCKAJHn/j0GP5l0GoGmGiGhexuK43UIwyAb0ZQ8TzfloINbAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUxFAxHoaxZO0Hvl0NlfAakw3ovW4wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIyMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBwAq
D2KEAAUDBwQqD2KEABADBgAqD2KEDTANBgkqhkiG9w0BAQsFAAOCAQEAcfJDN8lm
Vn7Sv2HUnYK/SJbb/Xh1uKTpLWNKHA2Na8yOCfczo8oVZv0KLpUCPKHM43P40pR3
aAiW9Zr1Xwm6hk9cgrqMzavzWkU4l9Ry2950NruwbqGhhSWIl9MkMoCfxmNTq/3k
ZpbLf6eCGz0IBCwUfQMTx3gCXL72EUbZkh3VPpgzILcDDWzezOpL2EjZDoYVbYcK
lttPfthHWxNWpMeLTPO68jfaEo6+1sIcNRBNB9ZTuY5zCedRAG/qy4z46RF3nR74
dErrjvS8GPYGuyNzIOjWfTSFH4x7CyMMmhNI0Bpd0GlsBaam85ATtgJwrcWVt/Ty
5itHm0aBShQ4zQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:08:06 2026 by rpki-client