This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208915.roa
File:                     AS208915.roa (raw, json)
Hash identifier:          dGU6RaexXXtd2hND6znnLec4U9c19vMgSj7ncFG448U=
Subject key identifier:   36:E2:88:3E:C8:14:63:3C:31:C5:54:7E:EE:E9:C9:D3:07:B4:2D:C4
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       2A16B51812F25D162AEA86763241FF70BF65FE73
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa
Signing time:             Sat 13 Dec 2025 16:07:39 +0000
ROA not before:           Sat 13 Dec 2025 16:02:39 +0000
ROA not after:            Sat 12 Dec 2026 16:07:39 +0000
asID:                     208915
IP address blocks:        2a0f:6284:700::/40 maxlen: 40
                          2a0f:6284:701::/48 maxlen: 48
                          2a0f:6284:702::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:16:b5:18:12:f2:5d:16:2a:ea:86:76:32:41:ff:70:bf:65:fe:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 13 16:02:39 2025 GMT
            Not After : Dec 12 16:07:39 2026 GMT
        Subject: CN=36E2883EC814633C31C5547EEEE9C9D307B42DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:ce:55:bf:10:62:3d:ea:0b:f9:69:50:8d:
                    8d:d2:51:30:69:89:ef:24:19:22:9c:65:01:10:01:
                    36:89:9c:0f:ed:38:87:75:e3:ea:95:67:83:af:be:
                    00:3b:54:70:60:b7:67:67:ab:ac:27:d2:51:5d:92:
                    d3:9a:97:74:59:77:5e:31:d3:5f:90:dd:bb:3b:cf:
                    ab:1a:b6:62:2c:0e:c6:0b:b7:8b:4c:2e:a1:48:ea:
                    af:79:c3:67:e3:fd:7a:8b:a6:f2:d3:5f:7f:54:3d:
                    ec:ae:61:ca:43:0a:c1:73:57:b0:39:40:9e:5a:7a:
                    7a:2c:7d:fd:c0:09:6d:0a:c3:28:de:0e:31:0f:fa:
                    bf:eb:5f:35:56:0b:9f:4d:65:5e:b5:a0:81:f2:cd:
                    8a:a2:4b:d1:fd:70:b4:cb:83:40:77:67:7c:b9:1e:
                    e3:f3:3e:34:a1:b7:dc:a1:d3:4c:36:34:5a:b8:4e:
                    6f:91:ed:b4:a7:72:75:7a:d6:ce:24:bd:90:9f:b9:
                    38:e2:b2:89:fa:af:5d:c8:63:36:19:67:dc:ec:6f:
                    c0:1a:32:43:52:e5:70:c4:04:e3:e2:b3:16:45:5f:
                    fe:ab:36:d3:6a:7e:18:26:7b:70:0d:dd:e9:c0:61:
                    e4:7f:32:cd:05:95:01:fe:fa:f4:13:44:8d:27:ff:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:88:3E:C8:14:63:3C:31:C5:54:7E:EE:E9:C9:D3:07:B4:2D:C4
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208915.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:88:fd:83:0a:b2:63:bc:b6:83:80:7f:d6:ba:76:d6:9e:9f:
         d1:28:69:48:48:06:35:be:30:a8:1a:49:32:63:12:e5:b6:ee:
         de:a9:9e:94:42:c9:1d:4e:f3:88:b6:2c:79:1e:06:0c:0f:22:
         ce:8b:e2:54:d2:30:36:f6:00:c7:84:89:8f:2c:82:5f:cd:47:
         67:3b:d4:1a:49:b0:52:91:a0:1b:1d:e8:77:c4:ee:d4:c4:3b:
         40:cd:ed:a2:ef:ff:c9:e4:31:b2:28:c7:ec:42:ff:b8:ab:02:
         54:9b:34:df:60:f5:a1:7d:48:c1:18:04:b8:a3:04:a0:a5:35:
         c5:56:fd:12:81:18:d6:e2:61:83:bd:50:c6:a1:c7:09:50:55:
         aa:57:11:52:16:84:80:32:3b:ec:ef:c9:96:42:b4:2f:cb:2a:
         28:cb:2a:37:9f:ae:b9:8d:9e:bb:4d:72:26:ef:78:0d:6c:a2:
         55:f9:f4:54:19:59:20:99:12:1f:8b:37:a7:97:a8:3e:0b:33:
         cc:25:6e:b8:6d:e9:d3:17:e7:3e:77:2f:1e:4b:96:10:83:ce:
         94:af:7c:84:41:03:ff:ff:a2:75:7e:0f:c5:56:1d:e7:e5:12:
         d9:b3:95:c8:96:6f:b4:a0:37:0a:b0:f6:fb:10:e9:9b:fa:86:
         07:03:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:32:57 2025 by rpki-client