This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214749.roa
File:                     AS214749.roa (raw, json)
Hash identifier:          rZ8CwwweweeouVjQ1Bd/PHl6dA47UxAkUhRRijIx2bw=
Subject key identifier:   C9:F9:6C:03:F9:7F:75:78:95:45:87:8F:C3:33:70:F9:04:C6:3C:FC
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       2B37D092CECC763CD1BFDC4A143CEF9C0132D749
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa
Signing time:             Sun 11 Jan 2026 10:23:24 +0000
ROA not before:           Sun 11 Jan 2026 10:18:24 +0000
ROA not after:            Sun 10 Jan 2027 10:23:24 +0000
asID:                     214749
IP address blocks:        2a0f:6284:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:d0:92:ce:cc:76:3c:d1:bf:dc:4a:14:3c:ef:9c:01:32:d7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 11 10:18:24 2026 GMT
            Not After : Jan 10 10:23:24 2027 GMT
        Subject: CN=C9F96C03F97F75789545878FC33370F904C63CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:c0:15:3c:17:eb:11:65:93:6e:e1:46:fd:
                    c1:42:11:9e:ae:a2:3f:36:21:17:2b:fe:1e:14:4b:
                    eb:28:90:eb:bc:56:dc:75:d4:fb:c8:e0:59:ee:a4:
                    67:c8:fe:d7:b9:47:9d:b4:51:4e:f1:e1:30:09:c0:
                    28:5a:f6:b7:81:ce:a4:72:8f:ef:26:c6:41:d9:1d:
                    8b:58:bf:32:9d:b2:b9:24:89:be:10:e5:f4:2b:cf:
                    07:cc:6b:d7:71:eb:6b:5c:e8:bf:87:62:e8:c1:39:
                    cc:25:ce:d4:59:9a:5d:fc:7e:5b:45:22:60:56:9e:
                    d9:9e:b2:ff:8b:02:30:c0:ec:ee:4a:a1:ff:98:c3:
                    a7:29:43:09:7e:a1:63:66:ac:00:e8:ef:f3:ae:f6:
                    44:94:88:da:5e:44:49:3f:99:7a:19:d8:18:75:93:
                    db:92:b2:7c:86:ee:98:c2:2a:c9:d5:55:b0:4f:5c:
                    49:96:10:81:ea:72:a8:12:9d:7f:61:fd:fd:09:13:
                    35:20:81:50:d2:33:0c:0a:61:a5:c7:6a:1c:40:f2:
                    67:69:ca:82:7e:c2:65:ba:c6:9f:64:2a:47:4a:99:
                    5b:21:6b:5c:d5:78:08:7a:0d:36:1f:8f:9d:8e:fb:
                    06:80:3e:67:ef:05:65:dc:de:0d:7b:06:e4:57:8f:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:6C:03:F9:7F:75:78:95:45:87:8F:C3:33:70:F9:04:C6:3C:FC
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:65:63:db:da:d9:4d:b4:15:7f:4b:2d:21:f7:2c:c8:13:f6:
         4a:9b:7a:c1:13:b0:fb:b2:4e:4c:70:fe:24:ce:68:90:07:45:
         60:4e:62:41:27:4c:4d:76:d8:28:3a:8f:da:05:c7:cd:37:dd:
         81:c9:ac:95:26:52:68:7f:c5:f0:79:f2:cf:68:45:a6:aa:06:
         b1:9a:ab:bd:15:af:81:b6:4a:72:3c:8f:22:6c:9b:8f:e0:cd:
         1b:d8:bc:a3:8a:ea:ed:4a:ad:48:c5:04:03:1a:99:39:38:38:
         d2:ab:17:1e:7c:c2:c9:f4:91:d2:c3:92:5a:89:a4:5c:ad:09:
         fc:42:8f:54:42:10:26:49:12:dd:08:b8:6a:83:c1:25:1b:f9:
         74:83:8e:2f:dd:d8:a1:d9:cf:51:fb:3c:c3:08:3e:66:8b:14:
         1e:a7:8e:9f:cc:f6:a6:02:d4:b1:67:9d:8f:12:2a:02:68:e1:
         d2:47:3c:b3:2e:cc:0c:aa:66:5a:e5:0a:0f:c1:78:f5:19:95:
         69:28:13:b7:e1:ba:78:dc:5e:b5:5d:24:44:26:84:e5:c4:44:
         3c:2d:e4:cb:cf:a4:fa:53:e6:28:22:c5:52:02:bc:45:12:49:
         e6:4d:39:74:a0:86:f8:8d:8c:9b:0d:9e:32:5f:48:20:74:e6:
         26:30:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:29 2026 by rpki-client