This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215265.roa
File:                     AS215265.roa (raw, json)
Hash identifier:          3+ui4Q5kjAYTr9Y7E/toZbOUgNYEXUlG/vDyXWNTGog=
Subject key identifier:   2B:6F:E9:75:BF:9B:34:59:88:81:84:EC:1E:58:C1:12:C5:79:A2:AE
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       03E68F9225ED7EBFB7F71BE1BCB769A93541CE6B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa
Signing time:             Tue 25 Nov 2025 14:12:05 +0000
ROA not before:           Tue 25 Nov 2025 14:07:05 +0000
ROA not after:            Tue 24 Nov 2026 14:12:05 +0000
asID:                     215265
IP address blocks:        2a06:1284::/32 maxlen: 32
                          2a09:54c5::/32 maxlen: 32
                          2a0f:6284:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:8f:92:25:ed:7e:bf:b7:f7:1b:e1:bc:b7:69:a9:35:41:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov 25 14:07:05 2025 GMT
            Not After : Nov 24 14:12:05 2026 GMT
        Subject: CN=2B6FE975BF9B3459888184EC1E58C112C579A2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:49:58:f1:5e:9b:f9:2d:82:74:7d:0f:7c:
                    31:34:86:d1:b0:68:87:62:5f:52:5f:f6:d2:78:b4:
                    fa:f3:1b:ed:ef:0b:56:9c:d4:c3:b7:5f:46:0f:7a:
                    41:26:20:8a:d8:d3:5d:24:c8:90:af:ff:e0:ff:17:
                    41:db:97:a0:7a:b4:57:9a:f3:39:17:e8:95:31:70:
                    12:95:fa:9d:16:f0:4d:b2:38:86:76:52:f2:00:f0:
                    48:9c:77:00:c6:3a:24:84:59:e7:5c:28:27:e6:30:
                    f0:8a:e2:c4:ed:f5:22:13:35:3e:c8:14:f7:d3:ce:
                    6e:25:af:3d:cf:a5:81:a4:ab:76:e0:7d:14:f3:85:
                    e8:82:21:fa:7b:76:95:04:7d:23:73:07:fc:32:8a:
                    34:5c:d7:0b:e2:b8:88:13:12:38:01:69:ca:89:20:
                    7b:66:5a:79:7c:31:e4:94:13:ea:e4:d8:83:82:3f:
                    b0:2e:c5:6c:b6:0a:3e:9b:5e:e4:da:f3:2d:fc:4b:
                    8b:76:39:46:4f:a8:8e:fe:70:a1:f4:76:9e:07:58:
                    e1:ab:8c:d0:c7:80:95:41:b6:84:01:63:e1:36:d4:
                    71:fc:b4:eb:8b:c4:6e:ea:27:d2:0b:06:ae:20:41:
                    9f:8d:74:97:9f:5d:12:dc:b8:69:cf:05:7c:76:17:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6F:E9:75:BF:9B:34:59:88:81:84:EC:1E:58:C1:12:C5:79:A2:AE
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1284::/32
                  2a09:54c5::/32
                  2a0f:6284:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:af:d1:c6:95:e9:30:80:b6:fd:65:44:ff:b0:c9:1d:5a:d5:
         40:a7:7a:6f:32:51:93:1b:14:13:72:c5:fe:29:68:c0:46:e5:
         ea:e3:7a:cc:d9:23:02:3d:cb:38:95:83:6c:5a:0c:a4:d7:90:
         4e:92:c0:18:40:79:d5:98:d1:45:99:68:b5:18:91:e2:e5:4f:
         78:5a:6d:a2:fc:c2:70:30:4f:8b:e9:f6:3c:6c:a9:b6:ab:9a:
         b2:77:29:07:2a:20:ef:6f:eb:5f:3c:5c:b6:e1:68:9a:4c:c3:
         87:1d:df:b8:eb:47:3f:01:f3:5b:33:bb:28:74:89:49:a6:6f:
         e1:84:88:18:0c:56:5a:f3:04:72:72:79:e7:77:34:3e:f7:b8:
         e6:ec:d3:be:cd:2e:cf:4b:4d:e8:86:76:2f:68:a0:15:5e:fe:
         d8:fc:cb:b0:9f:9a:cf:be:7e:a5:ee:05:5a:d2:26:b6:9b:fb:
         b9:87:ae:ad:e6:df:b8:00:a4:92:07:d2:6c:e5:69:b5:b2:9d:
         1b:54:df:7b:df:8e:2a:a3:35:f0:27:ee:eb:4a:94:1e:03:29:
         10:2f:c1:b8:dc:14:b6:4c:21:4e:69:31:38:1a:2e:73:c2:be:
         bb:40:94:25:4a:3d:75:7d:52:45:eb:91:6e:02:93:2f:2c:b9:
         22:b9:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:50 2025 by rpki-client