Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208694.roa
File: AS208694.roa (raw, json)
Hash identifier: T0REW6pcp6TfRhlKAWRqLWtkEuHDF8tRxYIkP88SMOo=
Subject key identifier: 63:32:FF:2D:F7:F7:C6:7A:F7:0F:D4:18:8A:C4:FA:EB:14:33:DB:7A
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3D86058CFB9C4E4A269E205E2CAB25AC6C4D4037
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208694.roa
Signing time: Mon 29 Jun 2026 13:01:29 +0000
ROA not before: Mon 29 Jun 2026 12:56:29 +0000
ROA not after: Mon 28 Jun 2027 13:01:29 +0000
asID: 208694
IP address blocks: 2a09:54c5:1000::/48 maxlen: 48
2a09:54c5:1001::/48 maxlen: 48
2a09:54c5:1002::/48 maxlen: 48
2a09:54c5:100f::/48 maxlen: 48
2a09:54c5:1010::/44 maxlen: 44
2a09:54c5:1020::/44 maxlen: 44
2a09:54c5:1030::/44 maxlen: 44
2a09:54c5:10b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:86:05:8c:fb:9c:4e:4a:26:9e:20:5e:2c:ab:25:ac:6c:4d:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 29 12:56:29 2026 GMT
Not After : Jun 28 13:01:29 2027 GMT
Subject: CN=6332FF2DF7F7C67AF70FD4188AC4FAEB1433DB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:7d:8f:8b:be:e8:ef:e8:eb:d9:43:f5:38:
63:bf:24:6f:78:74:5b:f0:5b:3a:1d:13:b2:a8:2f:
3d:aa:38:f2:38:57:b3:e4:c7:f4:e8:7b:71:c2:d5:
0e:29:5d:e5:0c:cb:21:84:9d:0d:31:fe:f3:0b:7e:
15:cd:1f:81:e8:c5:58:bb:6c:84:dc:e4:d5:67:a4:
7b:ee:8d:31:c5:35:2c:cd:c9:e6:a7:73:a8:f0:5b:
cc:28:13:1b:60:0f:96:02:91:58:ed:89:df:26:ad:
0a:86:27:f5:d1:f4:ad:3d:d1:8a:fb:f4:9a:97:ec:
79:2d:11:1f:42:d5:a6:9a:52:f3:1c:e3:02:82:0f:
72:89:23:44:db:c1:6e:68:8d:0b:e6:e4:3c:7a:c1:
9a:e1:9d:ee:d5:46:57:d6:e6:c9:15:49:4d:74:96:
ee:53:19:e0:85:7d:02:b3:12:bc:98:43:00:88:4f:
6e:dc:23:e5:7f:a6:4a:70:c5:9c:c4:91:52:a5:eb:
e0:00:fd:46:31:06:de:63:72:d2:69:27:1a:68:55:
8d:ed:16:e6:1f:22:9e:17:e3:46:39:41:f0:f8:ef:
aa:7a:61:f4:d3:83:d1:1f:ce:a8:b9:fc:3c:c3:60:
70:89:f9:f9:5b:29:76:38:f5:fd:3c:9f:a1:05:3e:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:FF:2D:F7:F7:C6:7A:F7:0F:D4:18:8A:C4:FA:EB:14:33:DB:7A
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c5:1000::-2a09:54c5:1002:ffff:ffff:ffff:ffff:ffff
2a09:54c5:100f::-2a09:54c5:103f:ffff:ffff:ffff:ffff:ffff
2a09:54c5:10b0::/44
Signature Algorithm: sha256WithRSAEncryption
74:9a:6d:41:3f:95:67:fb:53:ad:b1:ba:04:ff:db:de:53:ce:
24:a9:54:7d:19:a5:95:d2:b1:2f:10:7a:98:43:96:dc:ae:0d:
5c:a0:fa:54:c5:c3:81:98:8a:3e:89:c9:09:e6:fa:c5:8c:d0:
06:d3:39:46:46:47:0e:fe:b4:51:1b:28:2f:6b:dd:29:2b:f2:
91:86:e0:44:98:18:2b:be:62:8c:1b:9e:bf:4c:25:03:4e:a7:
b5:98:6e:9e:7e:2a:14:d0:58:a9:1b:23:db:61:09:b5:28:e9:
e0:20:e1:c8:54:75:6f:ee:66:67:18:e8:f5:ba:be:75:67:5b:
7d:0c:32:0b:90:82:ac:be:60:ae:1f:52:1d:96:75:2f:65:32:
b8:44:87:0c:8a:39:69:04:7c:b8:a9:d7:e4:39:5b:67:76:99:
5f:44:1e:14:e3:f1:ae:4f:7e:96:64:e1:09:35:29:df:6d:05:
cb:90:cb:25:76:ff:f6:38:1e:6c:93:63:0b:3a:8e:c4:15:3a:
b3:98:3e:da:fe:bd:0c:e5:b2:58:36:22:87:b9:00:3c:71:a0:
ca:ed:2d:fd:a8:11:81:f8:8f:4b:ca:09:c4:b9:40:47:2c:6e:
f4:ff:2b:18:ce:74:bd:0c:d3:00:3e:7f:49:84:b4:c0:9d:5b:
d6:dc:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:10:08 2026 by rpki-client