This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215760.roa
File:                     AS215760.roa (raw, json)
Hash identifier:          PnrFlF5fA/Q1kC7v5kx3LzJDWvj9dXmLrfE+bdWJTBo=
Subject key identifier:   DD:32:D7:D3:98:C2:12:A3:2C:A1:66:F9:D9:B2:5D:1B:10:B2:4C:35
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       5D29C55D21948FE29450B676F0A0A8EEC590D42D
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215760.roa
Signing time:             Sat 24 Jan 2026 22:28:07 +0000
ROA not before:           Sat 24 Jan 2026 22:23:07 +0000
ROA not after:            Sat 23 Jan 2027 22:28:07 +0000
asID:                     215760
IP address blocks:        2a0f:6284:a::/48 maxlen: 48
                          2a0f:6284:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:c5:5d:21:94:8f:e2:94:50:b6:76:f0:a0:a8:ee:c5:90:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 24 22:23:07 2026 GMT
            Not After : Jan 23 22:28:07 2027 GMT
        Subject: CN=DD32D7D398C212A32CA166F9D9B25D1B10B24C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:ba:9c:9e:f3:8a:f8:34:a6:5e:ca:b5:9d:
                    a4:1e:18:b0:82:45:0f:c4:dc:ed:16:ca:8f:8a:56:
                    fb:a8:31:58:ce:ad:a4:ff:73:87:85:c5:ea:f2:43:
                    d9:52:85:7f:b3:1a:63:48:30:f7:03:34:4c:68:1f:
                    33:e3:e7:b1:51:58:3f:62:44:48:ab:da:54:49:86:
                    30:d7:7d:6a:98:fb:1c:bd:f8:3c:b2:fc:77:3f:c6:
                    06:8d:26:78:3d:3a:36:89:84:e8:c3:0a:0c:c8:e1:
                    7b:f4:2c:d8:fb:f5:22:a0:24:0a:fe:1b:1f:73:84:
                    f0:f3:fa:4c:8b:ba:2f:3b:eb:6c:5b:e5:c5:b7:8e:
                    5d:64:6c:75:ce:bc:83:38:b7:7f:d0:8b:15:58:46:
                    8e:b8:bc:92:a8:5c:39:72:b6:23:b0:8a:be:38:7c:
                    f3:5e:21:b7:83:85:59:2b:f4:71:78:ca:73:a6:c3:
                    7d:75:ec:65:66:2b:fc:26:5a:d0:29:88:34:cc:81:
                    44:f8:11:8e:0c:ae:71:ee:f6:99:db:ec:c2:4f:23:
                    f0:8f:79:cb:f5:be:4d:01:2c:31:bc:23:27:84:12:
                    85:48:c8:43:27:23:01:4f:3f:46:c2:26:02:96:cb:
                    30:92:6f:46:03:c9:bd:90:3a:f3:15:c5:43:06:ca:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:32:D7:D3:98:C2:12:A3:2C:A1:66:F9:D9:B2:5D:1B:10:B2:4C:35
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215760.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:a::/48
                  2a0f:6284:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:29:a7:c5:2f:ae:bb:4b:e0:9e:2d:0c:85:2f:d9:f1:43:ba:
         3a:80:ea:55:c1:b3:1c:ea:4a:c7:b3:cd:dc:d7:18:da:c4:07:
         b4:a3:2d:dd:fa:5f:e1:d6:94:ed:30:b9:4b:4d:3e:7c:ec:10:
         bd:fd:a2:89:1c:ca:1f:50:58:92:bc:aa:1d:a5:da:4a:b5:e2:
         f2:2d:a8:b2:91:26:03:0e:14:e9:72:8c:16:35:c9:5f:1c:4c:
         72:8c:78:2e:fd:8d:d6:47:fe:45:57:a2:be:2d:72:10:3e:93:
         85:15:78:f0:52:80:bc:78:62:16:69:9d:5b:0b:ef:d7:05:cc:
         1e:97:cf:1e:17:fb:b9:a8:ed:7a:13:a3:5c:35:36:8f:3d:d2:
         00:da:31:8e:80:34:1a:03:ab:89:a4:fb:7e:04:86:47:61:94:
         1c:85:21:b1:f3:ef:1e:e4:ae:97:b1:60:3a:9b:9d:f6:d3:16:
         8a:ea:b4:ba:4d:9e:55:43:6e:fe:d9:af:0e:52:49:64:ae:1b:
         93:53:8b:16:88:bc:79:37:13:a2:b5:98:12:0a:1d:a1:4d:9a:
         01:f6:66:d9:0f:51:b9:4b:ee:25:f7:99:e0:28:66:f4:da:8a:
         31:e4:8d:f6:ab:cf:a3:f2:23:0d:6e:25:35:16:a7:fb:b0:aa:
         f5:07:cb:bf
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUXSnFXSGUj+KUULZ28KCo7sWQ1C0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAxMjQyMjIzMDdaFw0yNzAxMjMyMjI4MDdaMDMxMTAvBgNV
BAMTKEREMzJEN0QzOThDMjEyQTMyQ0ExNjZGOUQ5QjI1RDFCMTBCMjRDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8LqcnvOK+DSmXsq1naQeGLCC
RQ/E3O0Wyo+KVvuoMVjOraT/c4eFxeryQ9lShX+zGmNIMPcDNExoHzPj57FRWD9i
REir2lRJhjDXfWqY+xy9+Dyy/Hc/xgaNJng9OjaJhOjDCgzI4Xv0LNj79SKgJAr+
Gx9zhPDz+kyLui8762xb5cW3jl1kbHXOvIM4t3/QixVYRo64vJKoXDlytiOwir44
fPNeIbeDhVkr9HF4ynOmw3117GVmK/wmWtApiDTMgUT4EY4MrnHu9pnb7MJPI/CP
ecv1vk0BLDG8IyeEEoVIyEMnIwFPP0bCJgKWyzCSb0YDyb2QOvMVxUMGyt33AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQU3TLX05jCEqMsoWb52bJdGxCyTDUwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU3NjAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq
D2KEAAoDBwQqD2KEADAwDQYJKoZIhvcNAQELBQADggEBAEYpp8UvrrtL4J4tDIUv
2fFDujqA6lXBsxzqSsezzdzXGNrEB7SjLd36X+HWlO0wuUtNPnzsEL39ookcyh9Q
WJK8qh2l2kq14vItqLKRJgMOFOlyjBY1yV8cTHKMeC79jdZH/kVXor4tchA+k4UV
ePBSgLx4YhZpnVsL79cFzB6Xzx4X+7mo7XoTo1w1No890gDaMY6ANBoDq4mk+34E
hkdhlByFIbHz7x7krpexYDqbnfbTForqtLpNnlVDbv7Zrw5SSWSuG5NTixaIvHk3
E6K1mBIKHaFNmgH2ZtkPUblL7iX3meAoZvTaijHkjfarz6PyIw1uJTUWp/uwqvUH
y78=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:08:07 2026 by rpki-client