Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209554.roa
File: AS209554.roa (raw, json)
Hash identifier: dTqKeWsePV+FMri+HyIGW9oSjiqAlR7pyUVBjny6uZo=
Subject key identifier: 53:9B:2F:40:6F:A0:D0:2C:CB:0E:46:10:E6:66:DC:E4:C8:E6:15:B9
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 37BEE7A1394F5705614AD8C1A7CF1C2164A4582A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209554.roa
Signing time: Sun 28 Jun 2026 18:56:30 +0000
ROA not before: Sun 28 Jun 2026 18:51:30 +0000
ROA not after: Sun 27 Jun 2027 18:56:30 +0000
asID: 209554
IP address blocks: 2a0f:6284:4400::/40 maxlen: 40
2a0f:6284:4400::/44 maxlen: 48
2a0f:6284:4410::/44 maxlen: 48
2a0f:6284:4420::/44 maxlen: 48
2a0f:6284:4430::/44 maxlen: 48
2a0f:6284:4440::/44 maxlen: 48
2a0f:6284:4450::/44 maxlen: 48
2a0f:6284:4460::/44 maxlen: 48
2a0f:6284:4470::/44 maxlen: 48
2a0f:6284:4480::/44 maxlen: 48
2a0f:6284:4490::/44 maxlen: 48
2a0f:6284:44a0::/44 maxlen: 48
2a0f:6284:44b0::/44 maxlen: 48
2a0f:6284:44c0::/44 maxlen: 48
2a0f:6284:44d0::/44 maxlen: 48
2a0f:6284:44e0::/44 maxlen: 48
2a0f:6284:44f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:be:e7:a1:39:4f:57:05:61:4a:d8:c1:a7:cf:1c:21:64:a4:58:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 28 18:51:30 2026 GMT
Not After : Jun 27 18:56:30 2027 GMT
Subject: CN=539B2F406FA0D02CCB0E4610E666DCE4C8E615B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:de:ec:b8:e3:b4:37:af:c6:6f:a1:50:03:
09:24:54:d2:01:7b:63:e0:a2:86:a4:1a:5f:90:ce:
b6:1f:19:24:7f:f9:48:d8:52:9c:00:4a:e1:a9:38:
fb:2d:b0:5f:c4:58:dd:48:97:c8:e5:ee:dd:44:aa:
93:81:6f:9b:01:4f:1c:e2:ae:2e:7b:5d:36:75:3f:
00:83:12:fe:5e:fb:44:51:b0:fb:5e:83:1a:69:23:
41:7d:f0:51:26:41:52:2b:bd:1b:42:8d:f6:ce:eb:
aa:5b:0b:ce:6e:54:f8:e9:7e:1f:74:a3:48:7c:df:
98:3a:4f:e5:e0:1e:dc:1f:f8:ef:70:1d:7c:f6:7b:
fc:6c:fc:5f:87:2e:5c:9c:16:1c:cf:09:fc:50:4d:
38:a3:11:64:03:02:31:8b:99:c3:97:4b:a9:71:fe:
00:bb:36:4e:07:48:b8:f9:1a:5c:3e:12:1f:32:0a:
88:86:fd:eb:51:ff:78:34:aa:df:6a:80:60:e6:21:
09:8a:2a:87:84:1e:21:dd:43:ca:bf:f4:b5:27:07:
4f:ca:b2:cd:83:e9:48:19:d1:6f:ff:ae:b5:d7:a8:
99:82:cb:94:bb:c1:2b:22:e4:25:91:e7:f1:33:19:
67:ed:e6:98:2d:9a:1d:a0:8c:76:e3:c1:b2:b3:84:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:2F:40:6F:A0:D0:2C:CB:0E:46:10:E6:66:DC:E4:C8:E6:15:B9
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:4400::/40
Signature Algorithm: sha256WithRSAEncryption
61:b9:9b:83:bf:0c:79:74:da:b6:ef:13:95:50:c0:2f:af:ee:
60:e1:d0:e1:a8:31:17:3e:e1:53:3f:43:db:70:d8:df:56:f9:
6e:39:ed:87:67:41:99:6c:1c:d0:d8:e7:fc:e4:4f:64:9b:0a:
9d:c2:74:ce:9e:1d:b1:49:3a:c9:b5:ad:58:e9:80:9a:6b:d2:
33:3a:2b:9b:b5:9f:8e:5c:7d:a4:7e:50:54:8a:b8:ee:46:b6:
99:30:72:20:e5:b9:1e:2a:c6:c2:66:ca:4d:50:4d:bf:44:82:
0c:2d:0d:b6:4c:b6:6c:91:7d:38:f7:f7:2c:bf:d1:12:8d:72:
fd:d4:59:1b:5e:55:32:d3:92:fd:79:26:ff:ad:03:ed:91:3c:
2c:55:5d:63:8a:a6:da:98:31:33:eb:48:fb:2a:ee:5f:85:95:
a3:45:49:35:43:79:dc:23:3e:ec:63:71:c1:67:e9:ee:36:a9:
57:84:8c:e8:c4:6d:a5:d1:14:ce:db:e8:1f:72:c7:2b:4a:25:
31:eb:b2:fa:1a:d9:8a:9e:86:77:5b:7c:5b:fb:4d:be:5b:89:
14:72:e9:23:b7:59:f4:fe:c3:31:77:8b:f8:a5:e1:c9:26:05:
8c:f2:ee:fd:c6:38:99:7b:48:b7:ba:56:9b:d7:2e:f2:5c:5d:
ea:e4:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:10:43 2026 by rpki-client