Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202294.roa
File: AS202294.roa (raw, json)
Hash identifier: sTmH4kkNrwdPkNP23el6w7UR+1wZmgjcN0vqGDsA8AA=
Subject key identifier: DE:C7:1B:45:F4:22:C4:32:77:C3:2C:2D:F2:02:DF:D7:64:7C:EB:D9
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3B5ED1CAEDE48DEBA3448EB03194DE67F4396818
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa
Signing time: Sun 05 Jul 2026 20:49:08 +0000
ROA not before: Sun 05 Jul 2026 20:44:08 +0000
ROA not after: Sun 04 Jul 2027 20:49:08 +0000
asID: 202294
IP address blocks: 2a0f:6280:8000::/34 maxlen: 34
2a0f:6280:8888::/48 maxlen: 48
2a0f:6280:8ace::/48 maxlen: 48
2a0f:6280:8bad::/48 maxlen: 48
2a0f:6280:8bee::/48 maxlen: 48
2a0f:6280:8dad::/48 maxlen: 48
2a0f:6280:9111::/48 maxlen: 48
2a0f:6280:9ace::/48 maxlen: 48
2a0f:6280:9bad::/48 maxlen: 48
2a0f:6280:9bee::/48 maxlen: 48
2a0f:6280:9dad::/48 maxlen: 48
2a0f:6280:a0a0::/48 maxlen: 48
2a0f:6280:a1a1::/48 maxlen: 48
2a0f:6280:a2a2::/48 maxlen: 48
2a0f:6280:a5a5::/48 maxlen: 48
2a0f:6280:b00b::/48 maxlen: 48
2a0f:6280:b0b0::/48 maxlen: 48
2a0f:6280:b111::/48 maxlen: 48
2a0f:6280:ba5e::/48 maxlen: 48
2a0f:6280:babe::/48 maxlen: 48
2a0f:6280:bada::/48 maxlen: 48
2a0f:6280:beef::/48 maxlen: 48
2a0f:6284:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5e:d1:ca:ed:e4:8d:eb:a3:44:8e:b0:31:94:de:67:f4:39:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 5 20:44:08 2026 GMT
Not After : Jul 4 20:49:08 2027 GMT
Subject: CN=DEC71B45F422C43277C32C2DF202DFD7647CEBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:e5:5f:ed:63:58:dd:4e:ee:94:71:01:00:
1e:6f:2f:1b:94:cd:9c:e1:52:00:34:eb:1e:ac:2b:
42:a5:2b:a1:13:d0:e8:ff:09:14:73:5a:e2:1d:81:
db:7e:64:42:15:18:e0:90:9a:39:0d:7b:20:9b:5d:
bd:a5:d0:77:91:40:a7:5c:85:50:37:9d:0e:e0:df:
c5:b4:a7:14:18:1d:9d:57:0e:e2:fd:5f:0a:4b:1e:
23:2e:44:04:79:b5:f6:7b:c7:84:77:86:a0:40:e3:
5f:fb:17:a5:bf:2a:b8:96:e2:6e:6a:24:b9:22:48:
32:2c:1a:c8:83:1d:aa:ee:40:f2:48:21:f3:ea:19:
7f:fd:9e:2b:2b:9e:7e:24:4d:34:a6:e3:05:4d:52:
89:36:30:0b:34:8e:73:55:1a:5e:8c:da:66:39:89:
7e:ad:ee:7d:b2:8c:5e:c7:07:b9:fe:fd:56:6a:64:
3f:29:d8:d8:5f:cc:1b:73:27:a5:46:50:84:25:a2:
f8:d7:a6:b6:ba:e6:0b:49:2e:e9:ec:fd:cd:f5:50:
42:a0:3b:34:40:3d:2e:2f:db:3a:df:19:f9:56:3e:
e3:a1:fa:b3:4b:0f:2a:1c:31:42:b8:11:86:a5:1f:
24:3b:ad:67:c9:18:63:f6:1e:3f:ea:02:e1:dd:13:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:1B:45:F4:22:C4:32:77:C3:2C:2D:F2:02:DF:D7:64:7C:EB:D9
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:8000::/34
2a0f:6284:8::/48
Signature Algorithm: sha256WithRSAEncryption
31:a4:b5:94:ce:61:2c:59:1a:2f:5f:6e:bf:8d:cd:4e:f4:83:
79:72:d2:9d:c1:33:d5:26:b5:02:12:ec:d9:28:cd:54:8f:51:
8a:4b:e0:f5:8a:ac:e3:af:cd:3c:2d:7c:67:35:6b:6f:e3:59:
08:d2:e1:76:4f:f2:83:0c:c3:2d:92:e9:52:2f:c7:35:47:b2:
e0:b0:47:78:01:30:dc:f2:91:ab:36:ef:15:43:0e:bf:58:94:
55:ba:5e:31:69:af:fa:cb:23:c0:dc:c5:12:eb:e5:cb:a7:8a:
16:81:13:ea:93:ed:a8:ce:0f:40:3c:a7:69:21:5e:02:1a:63:
bb:6a:5f:e2:ca:b1:9f:80:2e:df:25:ba:14:c2:0e:0d:89:14:
9f:79:44:c2:ca:49:42:b9:56:c1:fa:4a:2a:83:b0:66:89:2f:
8e:93:e3:ea:4d:49:68:d1:3f:f7:81:de:77:bd:ba:0c:50:23:
ee:42:2f:3b:7a:46:5c:6a:90:1a:98:30:15:08:72:00:48:10:
07:10:8b:02:a1:fa:07:15:68:38:44:e1:0a:50:06:cd:38:88:
a9:0b:6f:41:94:96:e8:93:98:e6:e3:ca:92:76:7d:2c:8b:ed:
55:c9:25:24:02:9c:6c:e7:51:a9:2d:23:72:f9:34:53:28:0f:
d2:10:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:13:41 2026 by rpki-client