Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS135120.roa
File: AS135120.roa (raw, json)
Hash identifier: 4BasrOaSMjDGrOkDu+loVDukkKBx3/7SRjJTEvpvi6U=
Subject key identifier: 12:AF:38:7E:23:1A:3D:8E:B5:8C:6F:E7:CF:98:BB:CA:C4:EA:1F:E6
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 0683B9AE0DA94BE5CC29915B59DEE551DCD33A39
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
Signing time: Sun 28 Jun 2026 18:58:04 +0000
ROA not before: Sun 28 Jun 2026 18:53:04 +0000
ROA not after: Sun 27 Jun 2027 18:58:04 +0000
asID: 135120
IP address blocks: 2a0f:6284:e::/48 maxlen: 48
2a0f:6284:3300::/40 maxlen: 40
2a0f:6284:3300::/48 maxlen: 48
2a0f:6284:3301::/48 maxlen: 48
2a0f:6284:3302::/48 maxlen: 48
2a0f:6284:3303::/48 maxlen: 48
2a0f:6284:3304::/48 maxlen: 48
2a0f:6284:3305::/48 maxlen: 48
2a0f:6284:3306::/48 maxlen: 48
2a0f:6284:3307::/48 maxlen: 48
2a0f:6284:3308::/48 maxlen: 48
2a0f:6284:3320::/48 maxlen: 48
2a0f:6284:3321::/48 maxlen: 48
2a0f:6284:3322::/48 maxlen: 48
2a0f:6284:33fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:83:b9:ae:0d:a9:4b:e5:cc:29:91:5b:59:de:e5:51:dc:d3:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 28 18:53:04 2026 GMT
Not After : Jun 27 18:58:04 2027 GMT
Subject: CN=12AF387E231A3D8EB58C6FE7CF98BBCAC4EA1FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:db:94:20:88:66:bb:89:9c:4d:bd:5d:92:
3d:7f:7f:81:05:9e:17:d3:ae:d3:33:03:d4:23:c2:
52:a3:0f:18:84:65:7f:22:a3:7a:2a:4f:c2:3a:73:
e6:c8:31:fa:77:30:18:aa:b5:e7:5b:71:d6:48:bf:
87:c1:8a:4f:5b:ff:df:4c:ae:07:4c:bc:35:3f:f3:
17:7c:82:e2:dc:02:2e:cd:3e:e8:8e:9c:84:3c:2c:
c5:64:83:b3:bc:03:de:d8:2e:2b:2d:4f:b3:1c:80:
7d:e5:36:62:cf:15:ae:53:08:eb:ab:aa:c8:0c:e6:
ea:00:1d:a4:ce:1b:e6:c4:7d:8f:7d:b5:b3:8e:a0:
84:88:70:1e:03:09:80:9c:22:13:3c:d4:e3:14:1c:
5e:6a:a1:2e:15:11:64:93:0c:6d:c3:e0:6a:6e:da:
37:dc:f5:01:7c:92:cb:3c:66:d4:f2:29:32:6f:42:
61:38:38:87:f2:b4:36:b2:58:12:cd:8d:b1:22:e1:
00:6d:bf:94:b2:94:ae:22:2a:36:19:51:65:f3:dd:
63:4d:c9:85:b3:08:43:74:82:6c:ab:02:06:57:04:
c4:55:fc:01:c2:db:f9:4c:8d:12:13:d8:a7:a7:e6:
11:0f:5b:64:89:ff:dc:5e:4d:cd:fd:99:c2:08:70:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:38:7E:23:1A:3D:8E:B5:8C:6F:E7:CF:98:BB:CA:C4:EA:1F:E6
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:e::/48
2a0f:6284:3300::/40
Signature Algorithm: sha256WithRSAEncryption
24:d0:3b:84:dc:c8:00:82:f7:e6:c9:57:a1:41:9b:1e:95:6b:
d8:eb:c0:5d:38:73:ea:4a:96:85:a5:99:88:d5:b3:22:ce:45:
e0:7a:f0:00:71:24:d4:be:6d:fc:76:77:0d:fd:13:72:9a:5b:
9e:5b:e4:cb:b5:cb:4f:c8:f0:02:c5:9f:cd:78:a6:76:23:3b:
91:3f:79:37:c1:5e:db:5e:cc:3a:88:6d:fb:3a:4d:ef:33:29:
64:16:b5:d0:f9:7e:1f:96:cf:d3:e6:93:0a:10:ee:33:51:61:
d8:ea:c5:dc:b8:2d:4c:2a:2e:5d:69:bc:7a:75:a2:a2:24:bd:
97:e9:9f:22:15:5d:77:d9:4d:8b:43:0b:dd:ba:9d:1c:18:7e:
e8:6f:3c:9d:70:d7:a5:66:db:f0:63:2a:34:57:96:d3:3a:22:
ed:a7:6b:e6:2a:e3:6f:19:25:b2:47:b7:05:cc:a1:aa:67:fc:
c9:2c:50:13:49:5e:f9:f4:95:94:da:34:47:3e:20:b6:4f:de:
72:4f:e5:3c:d6:9e:ae:65:7f:19:b2:22:48:2a:ba:5f:f0:36:
03:c3:f4:56:04:41:16:65:44:49:ad:5e:d4:1e:a7:25:00:54:
10:0e:e6:6c:44:80:51:e4:9c:82:40:1b:8b:43:5b:02:6c:47:
09:4c:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:14:16 2026 by rpki-client