This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215265.roa
File:                     AS215265.roa (raw, json)
Hash identifier:          lhxCMotjXByUr052IUTwVqTeyCAnai8ZukaRb5wpUVA=
Subject key identifier:   39:E2:57:DF:78:7D:C6:2E:9D:BC:28:FF:30:8F:3A:24:2D:16:22:E2
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       432846F3CFA6BB4105BEC39DFD46AA9E09299655
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
Signing time:             Fri 23 Jan 2026 11:32:13 +0000
ROA not before:           Fri 23 Jan 2026 11:27:13 +0000
ROA not after:            Fri 22 Jan 2027 11:32:13 +0000
asID:                     215265
IP address blocks:        2a09:54c4::/32 maxlen: 32
                          2a09:54c5::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:28:46:f3:cf:a6:bb:41:05:be:c3:9d:fd:46:aa:9e:09:29:96:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 23 11:27:13 2026 GMT
            Not After : Jan 22 11:32:13 2027 GMT
        Subject: CN=39E257DF787DC62E9DBC28FF308F3A242D1622E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:e4:04:9e:97:53:90:ca:58:bc:25:f7:4c:
                    69:bb:76:06:9c:a5:2b:b9:30:cc:b1:27:8b:39:a7:
                    69:8f:09:7f:a4:1f:ea:58:d7:18:71:cb:f5:66:42:
                    03:5a:36:83:04:92:1d:c6:58:cc:02:3b:c2:e2:59:
                    27:3e:66:dd:ab:bc:95:44:d8:2e:92:99:fe:2d:34:
                    e5:ec:73:3f:52:7f:a2:60:99:cb:5b:ae:fa:cd:1e:
                    9b:fe:9a:ef:8e:a8:88:f3:1d:88:89:14:62:78:05:
                    15:8c:dc:a2:97:80:13:bc:9d:ff:fb:63:c5:a7:42:
                    46:7b:26:30:b0:1c:36:2b:3a:ec:72:ac:f2:04:00:
                    44:e4:01:e8:56:a3:28:4b:7e:23:fe:bf:8b:a9:4f:
                    a5:ff:64:75:ee:b3:71:69:2f:f9:c7:6c:b6:33:03:
                    5a:a0:f4:d8:ed:de:01:7f:9d:39:9f:5e:0b:b9:86:
                    bf:bb:12:db:26:e1:87:db:f7:1e:66:b0:46:60:a5:
                    18:2a:59:b7:c1:26:28:d9:b0:5b:3f:50:71:70:c4:
                    84:ae:6a:76:ea:9e:ff:2f:69:8d:a4:54:95:0a:10:
                    59:46:ba:c0:7d:0b:65:c5:1f:31:06:73:78:62:b0:
                    49:6e:ed:c6:23:54:d2:7c:ff:40:85:47:39:2f:28:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:57:DF:78:7D:C6:2E:9D:BC:28:FF:30:8F:3A:24:2D:16:22:E2
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c4::/31

    Signature Algorithm: sha256WithRSAEncryption
         65:66:ad:e4:de:b7:0b:4a:47:f9:14:9e:17:65:c0:bb:b9:a9:
         ac:4c:3d:18:c8:6e:e1:c9:c5:b8:70:9b:c9:ac:e2:3a:d2:8c:
         9a:80:d1:e0:89:2c:f0:21:8c:0b:9b:9e:67:31:00:09:e1:a9:
         ed:1d:ee:3a:6e:26:a7:5b:a1:d1:f3:a1:cd:a1:a1:cc:5a:d6:
         14:a1:bc:8e:1a:b8:59:ec:bf:71:14:29:64:da:0c:35:05:c4:
         87:08:78:29:b4:c5:96:17:c1:08:58:af:14:54:73:3a:04:2d:
         38:44:52:dc:84:06:bf:2e:1f:d0:7e:b1:d6:b3:20:ae:6a:05:
         53:d5:34:a0:6c:b4:cd:ce:ad:98:8d:79:f2:44:78:fe:ac:1a:
         7f:39:8a:a4:55:da:26:c1:c2:80:36:db:83:1f:ad:a6:a2:4e:
         23:e3:b5:74:5b:2b:b6:4b:ec:bd:9c:8b:6b:7a:d3:69:69:77:
         19:00:c5:ec:73:b1:7d:8d:b3:d2:52:c6:94:47:52:30:31:af:
         42:c2:19:5c:7c:0c:15:3c:04:3d:f3:00:36:4c:ad:59:81:d7:
         46:73:e8:75:54:6d:a5:f8:11:76:16:03:9c:41:cb:f6:a0:f7:
         02:27:a3:46:0c:76:8d:af:58:25:04:97:f6:3d:4a:21:2e:78:
         55:2d:a8:be
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUQyhG88+mu0EFvsOd/UaqngkpllUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAxMjMxMTI3MTNaFw0yNzAxMjIxMTMyMTNaMDMxMTAvBgNV
BAMTKDM5RTI1N0RGNzg3REM2MkU5REJDMjhGRjMwOEYzQTI0MkQxNjIyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/uQEnpdTkMpYvCX3TGm7dgac
pSu5MMyxJ4s5p2mPCX+kH+pY1xhxy/VmQgNaNoMEkh3GWMwCO8LiWSc+Zt2rvJVE
2C6Smf4tNOXscz9Sf6JgmctbrvrNHpv+mu+OqIjzHYiJFGJ4BRWM3KKXgBO8nf/7
Y8WnQkZ7JjCwHDYrOuxyrPIEAETkAehWoyhLfiP+v4upT6X/ZHXus3FpL/nHbLYz
A1qg9Njt3gF/nTmfXgu5hr+7Etsm4Yfb9x5msEZgpRgqWbfBJijZsFs/UHFwxISu
anbqnv8vaY2kVJUKEFlGusB9C2XFHzEGc3hisElu7cYjVNJ8/0CFRzkvKFWJAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUOeJX33h9xi6dvCj/MI86JC0WIuIwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUyNjUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEq
CVTEMA0GCSqGSIb3DQEBCwUAA4IBAQBlZq3k3rcLSkf5FJ4XZcC7uamsTD0YyG7h
ycW4cJvJrOI60oyagNHgiSzwIYwLm55nMQAJ4antHe46bianW6HR86HNoaHMWtYU
obyOGrhZ7L9xFClk2gw1BcSHCHgptMWWF8EIWK8UVHM6BC04RFLchAa/Lh/QfrHW
syCuagVT1TSgbLTNzq2YjXnyRHj+rBp/OYqkVdomwcKANtuDH62mok4j47V0Wyu2
S+y9nItretNpaXcZAMXsc7F9jbPSUsaUR1IwMa9CwhlcfAwVPAQ98wA2TK1ZgddG
c+h1VG2l+BF2FgOcQcv2oPcCJ6NGDHaNr1glBJf2PUohLnhVLai+
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:39 2026 by rpki-client