This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216079.roa
File:                     AS216079.roa (raw, json)
Hash identifier:          /W2BrFirAuFq/HxUFe9bOieFrC8ZnfJDgfGrzJls/4M=
Subject key identifier:   47:FF:5E:9C:E2:59:DF:84:19:FB:C7:08:2C:E1:92:E2:BD:7E:70:CD
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       01411717B6502161A3369B8C0F8A261647001BC4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS216079.roa
Signing time:             Sat 06 Dec 2025 00:36:20 +0000
ROA not before:           Sat 06 Dec 2025 00:31:20 +0000
ROA not after:            Sat 05 Dec 2026 00:36:20 +0000
asID:                     216079
IP address blocks:        2a0f:6284:b00::/40 maxlen: 40
                          2a0f:6284:b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:17:17:b6:50:21:61:a3:36:9b:8c:0f:8a:26:16:47:00:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec  6 00:31:20 2025 GMT
            Not After : Dec  5 00:36:20 2026 GMT
        Subject: CN=47FF5E9CE259DF8419FBC7082CE192E2BD7E70CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:a6:5f:6a:4a:70:89:7d:ce:bc:f6:55:0e:
                    56:0e:78:46:a4:9b:3f:69:24:50:69:ba:71:b9:76:
                    0c:1c:50:61:7e:b3:cb:1a:b3:ac:5b:3a:62:b5:40:
                    65:86:06:6f:54:fd:1e:8b:d2:01:10:aa:a2:34:51:
                    d6:38:db:26:14:c6:51:50:4a:72:58:16:ed:33:e7:
                    0b:bf:06:82:fc:7f:c0:7d:a2:88:c3:8f:84:8e:44:
                    32:97:da:08:c9:ae:9d:7f:d3:a9:47:d1:2d:e8:2d:
                    4b:17:d9:15:19:70:8b:c2:9e:11:a8:2a:57:82:69:
                    f1:6b:f1:be:8e:0c:02:de:1a:da:b1:0a:94:a2:10:
                    bd:54:4b:68:07:06:e8:12:e0:1c:58:de:40:96:f6:
                    11:fd:73:c3:a0:0e:e1:e7:1e:58:ea:32:7a:68:b8:
                    80:e5:48:5e:b6:19:1d:64:eb:57:e7:65:bd:ce:d7:
                    4b:95:db:a7:71:14:22:d1:d0:15:74:99:fc:37:94:
                    7a:6f:46:cd:cf:51:6a:80:32:79:83:86:59:5f:2e:
                    4d:26:de:c3:af:09:ba:cf:6c:e3:49:ec:0a:a9:28:
                    a8:0e:5b:9c:7a:05:d2:a9:c1:22:e4:2e:3c:af:d7:
                    36:18:9c:fd:df:31:48:dd:b7:9b:8a:38:13:d4:fc:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FF:5E:9C:E2:59:DF:84:19:FB:C7:08:2C:E1:92:E2:BD:7E:70:CD
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:16:56:ed:49:49:da:59:ee:54:fd:ab:0a:2f:1c:8e:16:df:
         b1:84:68:df:28:33:88:70:8a:fc:b5:a8:2f:73:89:8e:f2:76:
         8c:14:bf:ed:df:fb:6e:a5:75:6f:6e:18:da:67:ce:a6:73:f6:
         b0:ca:d5:25:34:22:1e:f8:6b:25:ad:4a:17:39:66:bb:39:b3:
         81:14:08:82:de:e5:b6:26:41:d5:0e:64:84:03:16:ff:ee:b1:
         ab:98:b4:60:e2:ec:c4:67:0b:bb:ad:8d:25:d2:f0:5d:48:d2:
         46:09:7f:88:ce:13:77:36:08:51:be:26:fc:ae:87:3c:06:32:
         b7:ce:08:04:ff:49:4e:5a:38:af:a9:6b:e3:35:01:79:93:f9:
         33:c0:3e:70:11:3c:e4:6d:80:b9:49:b2:a6:a2:a0:0c:9d:be:
         9b:5d:ce:a8:33:80:93:fa:10:07:b6:9e:53:33:2c:2d:96:11:
         5a:da:de:86:c4:4a:f1:13:f9:29:74:a4:8b:8e:ef:59:5b:ab:
         db:af:a2:a8:16:ba:0f:63:90:ef:6f:f1:b3:71:27:fd:f1:f5:
         cc:b7:14:3b:7d:5a:22:eb:32:16:cd:a4:1b:0b:a5:39:ef:5b:
         ad:48:4c:90:01:1e:1d:b6:a1:d9:14:2f:b8:cd:d8:5e:ac:77:
         ed:c7:40:00
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUAUEXF7ZQIWGjNpuMD4omFkcAG8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTEyMDYwMDMxMjBaFw0yNjEyMDUwMDM2MjBaMDMxMTAvBgNV
BAMTKDQ3RkY1RTlDRTI1OURGODQxOUZCQzcwODJDRTE5MkUyQkQ3RTcwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOn6ZfakpwiX3OvPZVDlYOeEak
mz9pJFBpunG5dgwcUGF+s8sas6xbOmK1QGWGBm9U/R6L0gEQqqI0UdY42yYUxlFQ
SnJYFu0z5wu/BoL8f8B9oojDj4SORDKX2gjJrp1/06lH0S3oLUsX2RUZcIvCnhGo
KleCafFr8b6ODALeGtqxCpSiEL1US2gHBugS4BxY3kCW9hH9c8OgDuHnHljqMnpo
uIDlSF62GR1k61fnZb3O10uV26dxFCLR0BV0mfw3lHpvRs3PUWqAMnmDhllfLk0m
3sOvCbrPbONJ7AqpKKgOW5x6BdKpwSLkLjyv1zYYnP3fMUjdt5uKOBPU/FeNAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUR/9enOJZ34QZ+8cILOGS4r1+cM0wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYwNzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq
D2KECzANBgkqhkiG9w0BAQsFAAOCAQEAOBZW7UlJ2lnuVP2rCi8cjhbfsYRo3ygz
iHCK/LWoL3OJjvJ2jBS/7d/7bqV1b24Y2mfOpnP2sMrVJTQiHvhrJa1KFzlmuzmz
gRQIgt7ltiZB1Q5khAMW/+6xq5i0YOLsxGcLu62NJdLwXUjSRgl/iM4TdzYIUb4m
/K6HPAYyt84IBP9JTlo4r6lr4zUBeZP5M8A+cBE85G2AuUmypqKgDJ2+m13OqDOA
k/oQB7aeUzMsLZYRWtrehsRK8RP5KXSki47vWVur26+iqBa6D2OQ72/xs3En/fH1
zLcUO31aIusyFs2kGwulOe9brUhMkAEeHbah2RQvuM3YXqx37cdAAA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:58:11 2025 by rpki-client