This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214749.roa
File:                     AS214749.roa (raw, json)
Hash identifier:          5GO5EPdpPmNWyGM5EeV8gjd24K9PJrtzMUzWyZYSO4o=
Subject key identifier:   08:3F:E3:A5:E9:92:B5:2A:09:D9:BA:77:0B:5A:C6:18:FE:B2:73:CE
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       413CB7C6D4560A45D76DEFE936BD80FC4AB6DF10
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa
Signing time:             Wed 03 Dec 2025 23:09:01 +0000
ROA not before:           Wed 03 Dec 2025 23:04:01 +0000
ROA not after:            Wed 02 Dec 2026 23:09:01 +0000
asID:                     214749
IP address blocks:        2a0f:6284:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3c:b7:c6:d4:56:0a:45:d7:6d:ef:e9:36:bd:80:fc:4a:b6:df:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec  3 23:04:01 2025 GMT
            Not After : Dec  2 23:09:01 2026 GMT
        Subject: CN=083FE3A5E992B52A09D9BA770B5AC618FEB273CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:db:5e:80:28:d4:42:4d:7d:4f:40:6d:85:
                    83:d3:59:84:28:ab:a8:cd:11:13:ac:35:02:0e:b7:
                    8a:3c:55:11:3c:52:28:b1:3a:68:df:50:25:48:53:
                    8c:ca:70:32:b4:32:ba:c4:c1:89:8b:b7:56:e7:77:
                    9d:ff:f2:d6:7c:8c:fa:f7:bf:b6:8f:6e:5c:e8:6a:
                    27:c3:39:0f:70:57:6a:b4:9e:33:be:d3:2c:9c:1c:
                    87:33:81:f1:d9:d7:8d:48:16:63:f1:7b:fc:b1:b5:
                    d6:e1:b2:08:76:ba:0d:ff:d7:e5:8d:6e:50:b8:89:
                    d4:3c:6e:a4:47:b7:c0:c6:e4:1d:99:88:b0:ff:f0:
                    fc:03:0c:9f:49:96:cb:ae:6f:ba:95:ae:cb:92:61:
                    79:9e:c8:94:af:4e:43:ca:db:cd:d8:d9:a9:51:9b:
                    14:0c:e1:19:3e:dd:65:b1:c0:9b:f7:73:74:b8:dd:
                    1e:b2:87:4e:7a:54:57:8c:25:96:9c:bb:65:7f:2f:
                    37:d0:ee:b0:66:cd:70:bf:fd:85:fa:df:cd:b7:72:
                    6e:90:74:b0:09:3d:d4:ed:c0:72:68:0d:03:69:86:
                    bf:7d:c8:81:9f:6e:db:40:02:9b:7d:2d:09:a7:17:
                    5a:2d:29:b5:36:db:d5:64:11:5a:12:19:ca:b3:ea:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:E3:A5:E9:92:B5:2A:09:D9:BA:77:0B:5A:C6:18:FE:B2:73:CE
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:ff:75:66:17:c0:eb:01:3a:c3:93:0a:f5:82:93:96:3a:
         a2:cb:56:10:42:7f:4d:98:dd:fc:bc:33:58:0f:27:02:2b:5f:
         c0:74:4c:41:23:4d:40:e1:e6:0c:e2:30:6b:24:2d:c6:09:a7:
         bd:5e:61:a6:fb:6d:e2:0d:9c:24:6f:a4:9c:d4:ce:47:d9:9a:
         c0:78:d4:1f:f0:5c:1d:33:90:20:ae:96:8b:34:85:ae:0c:90:
         05:d6:51:f9:e5:6e:9b:ec:54:bf:6e:f0:68:36:a8:3b:2f:d1:
         8b:71:1a:28:39:87:eb:dc:e2:5e:67:78:5a:0d:95:ce:9c:29:
         18:e4:82:77:06:84:aa:06:af:5f:94:4b:30:be:e5:9c:e0:2b:
         9f:58:85:d6:82:83:8b:b6:14:cf:b4:f2:6c:b7:e6:cc:77:e1:
         56:ae:f4:db:6e:ca:94:4c:a6:cf:7d:67:b0:64:67:e6:a5:bd:
         71:d8:31:75:d0:91:71:50:55:0c:6c:ec:61:1d:fe:54:b0:2b:
         f5:5b:0d:3e:4d:36:45:e1:ad:49:4c:ea:94:b0:1e:24:fd:f2:
         c2:e9:87:a5:8c:57:93:66:e1:0c:47:5d:92:eb:c6:2d:0a:6e:
         e9:38:db:04:8a:96:cf:0b:32:8f:29:8b:42:46:1b:14:c9:2b:
         2b:3e:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:59 2025 by rpki-client