This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          9PD/6zjPGi3JXJo3Ybp7XqMWOvr7DrYI0FQor758k+c=
Subject key identifier:   03:43:66:5B:F6:31:D6:00:B1:68:31:86:09:29:C9:14:8B:67:FB:B4
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       73B0D9A6DC28171E2E955212C15A39F349152DD4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa
Signing time:             Fri 19 Dec 2025 05:17:36 +0000
ROA not before:           Fri 19 Dec 2025 05:12:36 +0000
ROA not after:            Fri 18 Dec 2026 05:17:36 +0000
asID:                     215607
IP address blocks:        2a0f:6284:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b0:d9:a6:dc:28:17:1e:2e:95:52:12:c1:5a:39:f3:49:15:2d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Dec 19 05:12:36 2025 GMT
            Not After : Dec 18 05:17:36 2026 GMT
        Subject: CN=0343665BF631D600B16831860929C9148B67FBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:aa:fd:8d:3e:ae:7e:71:97:6d:be:84:ef:
                    da:b2:a5:8a:7c:d2:7e:aa:b4:40:99:6b:03:77:57:
                    4b:7f:0b:b2:5c:e0:8c:98:bf:07:76:b0:c3:ea:e8:
                    be:f6:fa:7f:a2:09:9d:57:62:8f:0a:6f:ab:bc:3b:
                    75:94:e8:7f:5b:7d:50:76:bf:aa:33:9b:e7:7b:f5:
                    c4:36:01:c8:7c:fd:b5:6a:fb:52:c7:9c:47:dd:cb:
                    3a:07:ee:26:2b:5c:b0:b8:62:86:12:bd:b3:64:d8:
                    96:23:c9:a4:dd:d8:84:a1:eb:cb:88:a1:33:0d:e6:
                    84:7e:c8:96:1a:88:1f:f4:97:9c:65:bc:b5:1c:61:
                    97:12:46:eb:22:29:e0:79:27:7f:bd:d0:39:94:94:
                    2f:75:4e:53:86:c6:82:2f:ee:6b:cc:3a:a4:6d:8b:
                    07:c3:71:2f:8c:dd:be:bd:f7:3d:00:c6:ae:f9:86:
                    56:a4:aa:db:79:48:88:c1:4a:e6:40:9f:d1:a2:6b:
                    7b:2e:1d:02:1d:10:27:f2:74:ef:62:e3:cc:ac:70:
                    9b:b2:da:69:d4:0c:82:e2:dd:d8:f1:bc:f5:f7:e7:
                    55:fb:f8:66:48:f4:81:57:aa:21:75:bc:88:3d:33:
                    9d:62:15:82:00:96:c3:28:c8:13:6c:c5:66:3e:e3:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:66:5B:F6:31:D6:00:B1:68:31:86:09:29:C9:14:8B:67:FB:B4
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:c3:75:07:4e:4e:a1:1f:07:ee:ea:c5:75:44:4b:cb:af:
         70:28:4a:9b:51:25:b2:bb:47:59:66:1d:f8:97:b6:f5:17:51:
         f9:70:d7:63:f7:c2:19:37:10:d5:a4:ef:fb:b3:db:b7:68:97:
         a4:21:4a:d0:d1:8d:14:77:fa:be:f1:aa:92:4a:dc:6c:02:2c:
         32:cb:29:e3:83:b2:b9:ac:b4:09:d8:fd:b8:3c:24:cc:59:cb:
         5e:ab:e3:7b:4a:68:48:4d:e8:46:ab:28:6a:ee:76:fa:a2:62:
         29:16:f1:06:1e:a6:77:80:d0:67:df:15:49:5b:a0:bf:c8:1e:
         56:90:00:61:62:e7:f5:e8:09:b0:7b:b2:c7:ab:d5:da:d7:7c:
         1c:d8:95:e7:25:d1:e8:50:b9:45:96:d9:f3:97:6b:98:1d:3f:
         63:67:4c:b1:0d:97:be:c7:9c:a5:64:9a:0d:3b:ee:4d:13:8b:
         f9:22:e2:51:77:28:e4:c1:e6:d7:1c:c2:5f:c3:55:2c:7d:1f:
         2d:56:fd:36:92:24:76:bc:4e:7e:5d:15:25:b2:40:95:cd:40:
         2d:b7:f2:98:56:ea:42:0e:b8:f7:2c:e6:df:22:64:c8:8d:cd:
         8b:b4:7e:3a:66:82:02:39:11:a7:0d:30:9c:fe:97:ca:df:6e:
         5d:af:3c:71
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUc7DZptwoFx4ulVISwVo580kVLdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNTEyMTkwNTEyMzZaFw0yNjEyMTgwNTE3MzZaMDMxMTAvBgNV
BAMTKDAzNDM2NjVCRjYzMUQ2MDBCMTY4MzE4NjA5MjlDOTE0OEI2N0ZCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDar9jT6ufnGXbb6E79qypYp8
0n6qtECZawN3V0t/C7Jc4IyYvwd2sMPq6L72+n+iCZ1XYo8Kb6u8O3WU6H9bfVB2
v6ozm+d79cQ2Ach8/bVq+1LHnEfdyzoH7iYrXLC4YoYSvbNk2JYjyaTd2ISh68uI
oTMN5oR+yJYaiB/0l5xlvLUcYZcSRusiKeB5J3+90DmUlC91TlOGxoIv7mvMOqRt
iwfDcS+M3b699z0Axq75hlakqtt5SIjBSuZAn9Gia3suHQIdECfydO9i48yscJuy
2mnUDILi3djxvPX351X7+GZI9IFXqiF1vIg9M51iFYIAlsMoyBNsxWY+45OXAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUA0NmW/Yx1gCxaDGGCSnJFItn+7QwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU2MDcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
D2KEAAIwDQYJKoZIhvcNAQELBQADggEBAI3cw3UHTk6hHwfu6sV1REvLr3AoSptR
JbK7R1lmHfiXtvUXUflw12P3whk3ENWk7/uz27dol6QhStDRjRR3+r7xqpJK3GwC
LDLLKeODsrmstAnY/bg8JMxZy16r43tKaEhN6EarKGrudvqiYikW8QYepneA0Gff
FUlboL/IHlaQAGFi5/XoCbB7sser1drXfBzYlecl0ehQuUWW2fOXa5gdP2NnTLEN
l77HnKVkmg077k0Ti/ki4lF3KOTB5tccwl/DVSx9Hy1W/TaSJHa8Tn5dFSWyQJXN
QC238phW6kIOuPcs5t8iZMiNzYu0fjpmggI5EacNMJz+l8rfbl2vPHE=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:38 2025 by rpki-client