This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214299.roa
File:                     AS214299.roa (raw, json)
Hash identifier:          M7JpzRv0AQHSJtgfPBE4tBLRHV0GFvmRp2uY1iuaqnk=
Subject key identifier:   67:FD:83:A2:31:82:E8:F7:05:62:44:0F:45:A1:E6:06:12:7C:E2:A9
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       08E4DBE08376BB5184227BC6932BE792DF5C8A17
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa
Signing time:             Sat 20 Dec 2025 19:48:06 +0000
ROA not before:           Sat 20 Dec 2025 19:43:06 +0000
ROA not after:            Sat 19 Dec 2026 19:48:06 +0000
asID:                     214299
IP address blocks:        2a05:dfc3:fd40::/44 maxlen: 52
                          2a05:dfc3:fd40::/48 maxlen: 48
                          2a09:54c7:1000::/48 maxlen: 48
                          2a0f:6284:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:db:e0:83:76:bb:51:84:22:7b:c6:93:2b:e7:92:df:5c:8a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 20 19:43:06 2025 GMT
            Not After : Dec 19 19:48:06 2026 GMT
        Subject: CN=67FD83A23182E8F70562440F45A1E606127CE2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:aa:0c:05:c0:fd:86:c1:11:14:aa:ef:bc:
                    55:15:b2:5c:b3:4c:1c:c0:1f:55:e3:55:26:29:5c:
                    68:e5:e2:40:b2:6d:1c:58:dc:88:22:35:df:af:35:
                    c1:2a:32:16:6a:49:ae:6b:90:36:bf:ba:5e:b9:79:
                    ea:63:26:69:d5:0d:5b:28:6e:a3:22:1c:a9:4a:ce:
                    b7:48:5a:64:a0:0b:52:c3:10:19:ca:a4:2b:fc:b3:
                    4a:88:ba:05:40:08:47:d2:ba:5f:14:f0:1e:fd:4a:
                    80:1b:97:66:62:40:1d:2f:03:6a:bd:fb:54:d0:15:
                    87:f6:f7:c5:39:78:55:64:cb:d3:85:04:9f:7a:3d:
                    81:59:8b:49:37:3f:62:d0:90:cb:bb:20:7b:33:09:
                    46:a2:39:68:73:ab:bf:78:79:a8:25:31:df:65:ef:
                    f5:d3:53:16:12:ff:a1:19:18:09:2d:de:f6:a6:68:
                    f1:1d:27:84:80:2b:71:4c:b3:b0:28:a5:e9:fb:36:
                    86:7e:2b:6f:9a:f7:26:f7:61:95:37:e6:13:9b:80:
                    fc:81:13:2b:db:63:63:89:3f:d3:a7:ac:76:48:b0:
                    aa:fa:d9:91:15:3f:ba:b7:5e:09:2d:3a:ac:2d:f7:
                    d8:ef:c7:13:43:ad:22:8f:38:6d:1c:ae:ab:79:84:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:83:A2:31:82:E8:F7:05:62:44:0F:45:A1:E6:06:12:7C:E2:A9
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd40::/44
                  2a09:54c7:1000::/48
                  2a0f:6284:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:5f:f7:f8:cf:26:64:c5:c9:1c:33:b0:c3:08:64:36:99:
         0e:17:bb:f0:bc:af:2e:37:09:b6:f8:ab:25:ec:ac:c9:ca:c1:
         f8:32:9f:24:07:68:4c:de:f2:01:1d:9d:87:14:79:94:ca:04:
         c5:64:8f:85:19:d0:f5:13:89:b1:36:8d:a8:28:8e:b5:8c:d8:
         99:1c:7d:e0:c4:c2:c9:09:ea:bf:d7:8b:2a:b5:45:fc:8d:bd:
         b4:47:c6:e9:9d:24:7c:1f:8d:00:0a:a5:aa:05:80:cc:ce:4c:
         7b:68:e6:a9:c1:11:bf:fa:ba:cf:a8:13:3e:c9:b5:ee:8f:4e:
         69:2d:bd:44:f9:dd:4e:b9:e0:a5:04:6b:9f:41:c9:a6:14:79:
         c1:d1:fd:a6:c8:35:9b:af:88:07:5c:57:17:58:ec:5a:1b:d1:
         09:18:4d:e7:56:b2:e9:e3:4f:f5:1c:cb:c8:ab:83:9f:88:e3:
         bc:25:0d:c8:39:88:61:49:5e:9e:55:b6:2e:af:29:af:be:85:
         c0:e3:59:63:73:06:c2:51:5d:c9:0a:b4:55:6c:17:4b:71:47:
         81:42:03:2d:e1:7f:d5:59:2b:f9:4b:6f:9c:c5:34:43:6d:f3:
         c6:3c:e6:7a:7f:26:0d:e7:de:91:3a:4f:69:da:7f:13:ff:6b:
         e4:64:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:45 2025 by rpki-client